Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft
File:                     cleSPWdwxWeJGbB8vPqK-LnFBT8.mft (raw, json)
Hash identifier:          iPmD5MW3oTWZu6AaJX+XcM2KabpAEiFikWstexXl7kY=
Subject key identifier:   5F:50:31:37:03:30:18:EB:C3:0F:59:1B:6C:30:D8:64:4D:C6:DD:7D
Authority key identifier: 72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F
Certificate issuer:       /CN=A91C7175/serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F
Certificate serial:       01A9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft
Manifest number:          0197
Signing time:             Mon 19 Oct 2026 05:02:51 +0000
Manifest this update:     Mon 19 Oct 2026 05:02:51 +0000
Manifest next update:     Mon 26 Oct 2026 05:02:51 +0000
Files and hashes:         1: cleSPWdwxWeJGbB8vPqK-LnFBT8.crl (hash: 6JofCcGSQjdfw+DYmCR20/5gvRokaUBKdV6LsVKjSQs=)
                          2: E0FC9A944D3111F08F258733C4F9AE02.roa (hash: fi9JcGfoU/wiK7429QM9k1iyc8WV3c5GwUrIVHqsYuM=)
                          3: 65783A3A68FE11EFB904E587C4F9AE02.roa (hash: aFQ7bX8ytAFiMpuE9k/08/sRiHmY/0AMmDItTStdXqk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl
                          rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 05:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7175, serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F
        Validity
            Not Before: Oct 19 05:02:51 2026 GMT
            Not After : Oct 26 05:02:51 2026 GMT
        Subject: CN=6ad5a47b-c070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:45:b0:1b:e8:0b:63:9a:d2:5e:80:dd:d7:93:
                    00:bf:83:2a:a5:32:11:93:a0:cc:30:db:9d:59:3d:
                    29:cf:c3:74:54:0a:c2:b0:a5:f0:a9:7d:f4:70:cb:
                    5a:ce:fb:55:4d:be:37:3d:99:09:0c:97:20:27:b2:
                    d0:ce:c5:23:f1:43:2f:39:72:af:d4:f8:c5:49:5d:
                    fc:99:e8:52:aa:ff:d6:94:b1:b1:c2:3f:d7:1d:d8:
                    0c:ad:0e:8d:83:78:80:91:9e:14:cc:18:49:b5:f6:
                    e6:75:6a:4a:fd:9b:e5:b7:94:b1:62:61:f4:a3:e4:
                    74:1f:e3:67:19:48:ca:32:24:d1:56:16:1d:dc:9e:
                    c6:ec:2a:5c:23:7d:85:02:c3:15:d7:ca:00:ba:d3:
                    32:94:ec:e9:2a:0c:48:aa:18:3c:96:69:4e:1d:6a:
                    9b:25:5b:2b:14:ce:15:14:46:28:ab:27:b1:b7:2c:
                    7f:ee:a5:d6:19:09:33:61:60:0f:fd:e6:30:0e:76:
                    c6:14:c7:fa:80:1b:12:7b:e5:1a:e1:4d:ad:78:81:
                    4c:45:0d:4d:26:7a:86:f8:82:bd:8a:63:96:b0:e1:
                    bc:40:11:42:94:5a:5d:0e:9d:e9:06:2e:65:f3:bc:
                    76:69:5c:bf:4b:22:bd:8f:ff:b8:a0:04:88:d2:3f:
                    f0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:50:31:37:03:30:18:EB:C3:0F:59:1B:6C:30:D8:64:4D:C6:DD:7D
            X509v3 Authority Key Identifier:
                keyid:72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:18:f5:12:f6:bd:3e:4d:77:25:72:f9:c4:19:3c:28:b7:41:
         14:07:30:1f:76:65:8d:c8:27:f6:eb:5a:ad:00:8c:4f:b4:56:
         db:f7:88:57:6c:89:e9:48:e6:6c:c4:a5:3b:9c:07:ae:83:99:
         dd:14:ff:ea:54:a4:cb:23:87:6d:0c:00:d7:57:5f:7e:6d:34:
         cf:b7:7c:84:4b:ab:7f:57:68:ff:6a:d3:cf:63:69:f1:b0:2e:
         80:93:ec:82:91:76:ad:12:4e:bc:c7:eb:47:e1:05:70:9c:dd:
         43:8f:33:b8:f9:59:f1:48:a9:2b:a4:10:75:83:1b:e6:48:54:
         47:b9:94:68:ca:6f:47:59:01:30:42:ac:96:42:88:ea:a1:6a:
         d0:79:73:dc:23:0f:37:13:1e:bf:4e:ee:23:74:eb:cf:f0:22:
         d9:ce:75:da:6a:2e:b3:23:e8:a0:50:f6:28:e8:4c:c1:f9:43:
         df:70:d2:ea:b6:d2:cc:b6:1c:0b:cd:9c:1d:85:35:b7:af:f6:
         e1:5f:08:88:b7:a9:fe:af:f2:81:86:b8:87:74:7c:8c:6d:12:
         a3:3f:e1:ca:3b:63:68:8f:f8:8a:01:b3:61:e0:d5:1d:44:82:
         53:40:e1:51:ce:a0:ca:f0:62:72:9d:dc:c6:ac:43:4e:b5:b8:
         7b:bf:76:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:57:20 2026 by rpki-client