Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
File:                     _Z_UV0WCGIOHdsDcCO-2FVIB42g.mft (raw, json)
Hash identifier:          Ph5e71ubLAAfcKnKWATOE5GFwlmsOyVyaDH6SG2wpyo=
Subject key identifier:   87:E4:80:DB:B0:9F:89:9F:FE:95:AC:14:94:68:5E:97:51:FB:01:2A
Authority key identifier: FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68
Certificate issuer:       /CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368
Certificate serial:       35F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
Manifest number:          35C7
Signing time:             Mon 26 Oct 2026 14:28:14 +0000
Manifest this update:     Mon 26 Oct 2026 14:28:14 +0000
Manifest next update:     Mon 02 Nov 2026 14:28:14 +0000
Files and hashes:         1: _Z_UV0WCGIOHdsDcCO-2FVIB42g.crl (hash: evrQGS9GEqctUKVmxILYhtJaIe2rfcWKYwyjyMzAZYI=)
                          2: 2DED29046A8E11EF948C2811C4F9AE02.roa (hash: XBUaXxbl5beMfJKKd1d1AjiKQNSMzNu7XbP3LC5jZ1k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl
                          rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13817 (0x35f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6DD8, serialNumber=FD9FD457458218838776C0DC08EFB6155201E368
        Validity
            Not Before: Oct 26 14:28:14 2026 GMT
            Not After : Nov  2 14:28:14 2026 GMT
        Subject: CN=6adf637e-d416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2e:87:e7:22:ce:43:6d:c7:4c:83:5f:5c:bd:
                    5e:20:63:1e:09:2f:fa:52:a5:bc:13:40:8e:0d:13:
                    59:09:f8:b6:32:89:8c:d5:06:de:f5:6f:ea:a3:52:
                    2c:87:b7:33:55:1f:4b:57:7e:8a:82:59:5c:76:11:
                    34:ab:44:e9:7d:5a:3c:12:75:77:dc:49:81:d7:60:
                    79:b3:3c:51:e9:df:1d:e9:d3:fb:0f:84:d8:b5:30:
                    fb:e4:6f:6b:95:24:de:ca:f3:77:49:07:6b:87:ae:
                    39:b8:f4:36:b3:93:e9:02:ea:6d:f5:c3:b2:68:58:
                    88:4f:d4:eb:47:50:1b:e9:0a:31:59:f8:f8:32:f1:
                    17:37:ee:63:44:2e:ef:7d:29:65:bf:24:67:f5:33:
                    62:22:43:8c:91:48:ee:2d:0b:26:dc:b0:5c:72:c6:
                    96:82:ba:41:70:b0:32:0b:e1:72:c5:2d:d0:0c:6a:
                    3a:1a:04:56:87:44:f5:a6:ea:01:0d:85:01:0f:e1:
                    76:b2:f8:2e:74:9e:93:28:26:78:95:b7:c7:77:4b:
                    ac:4b:b4:3a:89:81:04:43:f9:a5:1e:8f:92:f6:7e:
                    ff:24:34:c1:7e:d6:28:c9:40:82:c4:90:13:c0:c5:
                    e9:bd:1b:92:19:89:19:a3:7a:d0:54:bb:9c:1e:95:
                    f3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E4:80:DB:B0:9F:89:9F:FE:95:AC:14:94:68:5E:97:51:FB:01:2A
            X509v3 Authority Key Identifier:
                keyid:FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ee:6b:ca:e7:6e:bc:a2:15:f2:bf:60:a2:ea:75:fa:5f:6b:77:
         5c:55:4a:1e:5e:78:7b:79:57:ec:a5:aa:fe:35:5b:c8:de:f2:
         84:93:3d:d5:b1:bd:e5:ea:c8:15:57:69:58:fa:8a:39:69:25:
         63:b5:10:51:ab:7a:0e:d6:15:50:fe:28:91:65:6a:0a:6e:43:
         c3:a0:80:a9:ae:95:fd:f8:81:e6:66:02:0e:9d:80:5f:2b:15:
         78:3d:25:01:89:2d:32:24:29:aa:22:9f:73:0f:72:a5:31:c3:
         ce:a9:1a:0e:a4:ba:db:5e:b0:51:05:d9:ce:7d:4e:81:6d:2b:
         6d:db:b1:10:5d:a5:6b:00:82:2f:ae:4e:87:96:a8:ae:d6:8c:
         08:e4:b6:30:a4:d9:5e:b7:26:f6:68:81:db:f3:c5:38:d1:43:
         53:e8:3a:e8:3b:0f:fa:c2:95:96:d3:05:7a:13:37:55:33:c5:
         fb:2d:d7:68:17:23:a6:02:9b:05:f1:27:69:c7:3e:eb:5d:fc:
         fb:c9:53:4f:df:a2:a2:60:70:3d:45:25:96:91:45:2b:59:8b:
         63:5a:f5:b5:5f:5f:09:5f:25:80:16:78:56:0a:36:a3:a3:57:
         06:b2:f9:b8:a8:3b:33:b7:61:56:59:2e:52:d0:24:29:a9:32:
         88:87:fb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:59:56 2026 by rpki-client