Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft
File:                     RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft (raw, json)
Hash identifier:          i1MY0SRgnqBhJfOL6iyuPoqcLAU/38oc+k/jM76o4Bg=
Subject key identifier:   9F:E6:51:4F:13:39:24:5A:C2:CF:09:18:66:53:F1:F0:44:AA:76:8E
Authority key identifier: 45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1
Certificate issuer:       /CN=A91C6833/serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1
Certificate serial:       1F58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft
Manifest number:          1F3F
Signing time:             Tue 06 Oct 2026 16:02:09 +0000
Manifest this update:     Tue 06 Oct 2026 16:02:08 +0000
Manifest next update:     Tue 13 Oct 2026 16:02:08 +0000
Files and hashes:         1: RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl (hash: Zi8WPPrCUEOYXpf5ZU565E2to3u3mT8wGUFQdV0994U=)
                          2: 3F1BB7A09BC011EF995CBB11C4F9AE02.roa (hash: WNzcikHyNz/XCbkObbex7RStWIF1F/FG61SFteazfgg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl
                          rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8024 (0x1f58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6833, serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1
        Validity
            Not Before: Oct  6 16:02:08 2026 GMT
            Not After : Oct 13 16:02:08 2026 GMT
        Subject: CN=6ac51b81-dfec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:40:e4:70:a8:77:62:d6:f8:6e:96:45:6c:e7:
                    0f:34:e6:7f:f2:d4:7c:6e:67:c2:60:f3:62:92:d6:
                    87:93:f6:ac:5d:c9:9f:b8:40:4e:41:f2:be:f1:aa:
                    ee:ed:4d:2c:e9:7e:ab:63:0c:19:f8:ac:3c:48:de:
                    fa:e6:0b:fc:d8:a1:e6:aa:c2:e2:17:eb:de:1a:cb:
                    e5:6b:ed:33:59:fa:1d:a2:35:72:9b:ae:d7:e3:71:
                    50:7a:f0:9e:d5:3a:1b:63:b9:81:c7:9f:35:88:8b:
                    ab:97:0b:42:e2:bc:74:b0:74:28:96:9b:a3:e2:a2:
                    53:0d:0a:1d:14:ae:b8:e5:0b:6a:e4:d3:f7:cd:4a:
                    bb:10:75:53:7f:b5:cf:c7:aa:e7:92:a5:b4:8b:c3:
                    9e:c3:4b:04:58:c5:8d:b7:01:b0:e9:4b:a0:d6:1d:
                    cc:1c:41:6e:91:cd:28:2a:3d:5d:33:01:b7:47:56:
                    94:e8:c3:f3:f9:63:29:2f:06:c3:06:51:de:77:86:
                    08:7c:13:17:fa:06:d0:82:e4:b4:66:7b:3c:40:26:
                    86:f1:bc:c7:16:60:f7:2f:6d:76:69:17:7c:33:5a:
                    5a:26:0e:55:7b:dd:f4:eb:cb:38:dd:72:f9:f2:23:
                    24:54:d7:99:a8:e5:5b:a2:01:49:0f:e8:43:a4:63:
                    3d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E6:51:4F:13:39:24:5A:C2:CF:09:18:66:53:F1:F0:44:AA:76:8E
            X509v3 Authority Key Identifier:
                keyid:45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:65:d0:09:16:d7:d4:c6:21:f5:0b:ea:4f:83:bb:31:0d:17:
         93:67:07:71:d9:43:ab:b3:fb:6c:e1:12:b7:a9:01:5e:13:8e:
         9e:18:56:9c:dc:8c:5a:7f:4e:c2:55:51:7d:5a:5a:57:e0:6e:
         eb:f0:28:12:c3:3b:3d:49:cc:3c:10:de:cd:2a:aa:d7:97:3f:
         37:a1:40:4a:3c:d3:bd:26:b0:f4:c4:b3:7e:90:0b:e0:b7:ca:
         e1:31:ef:24:59:54:a0:a7:44:ec:01:13:95:2e:58:86:16:e1:
         7a:e9:57:a0:5e:2e:eb:06:e7:29:b5:99:43:14:00:49:17:1c:
         1c:87:94:e0:50:0c:12:2a:9e:39:17:41:6f:34:24:eb:56:68:
         ef:8e:4d:12:bd:5f:af:ff:8d:af:86:99:3d:e0:6b:0d:48:80:
         c2:b7:5d:c4:6a:7b:66:cd:76:d5:8b:4e:66:a7:68:e8:5c:e6:
         46:90:8c:c7:94:1a:63:9e:d6:a8:30:20:f5:17:f6:f9:0c:9b:
         74:de:53:a7:e7:db:07:8b:c6:21:57:09:ed:3a:0f:46:97:46:
         3d:55:c6:6c:80:40:bd:aa:f3:e8:f6:8a:1f:a6:28:80:0b:2f:
         4c:04:02:93:85:90:8b:c8:8c:b7:bd:db:70:eb:22:19:a2:1a:
         08:49:4e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:56:00 2026 by rpki-client