Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft
File:                     y51BptqW92pP8FhrXoqIn8AjVFc.mft (raw, json)
Hash identifier:          kDp4quV7rptXYtMVdKY7u/26QS3THpTgNEHJo6p8s5o=
Subject key identifier:   B2:24:84:8A:8D:47:85:FF:AF:1C:DD:56:5D:6F:AF:5B:0C:05:DA:26
Authority key identifier: CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57
Certificate issuer:       /CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457
Certificate serial:       0439
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft
Manifest number:          042D
Signing time:             Mon 05 Oct 2026 00:17:10 +0000
Manifest this update:     Mon 05 Oct 2026 00:17:09 +0000
Manifest next update:     Mon 12 Oct 2026 00:17:09 +0000
Files and hashes:         1: y51BptqW92pP8FhrXoqIn8AjVFc.crl (hash: Wx4Xu/DCxBSeOkdEZBgUy1ChqngxkFeNXX1FU24kkok=)
                          2: 94FE3AB6D55011EF8A1E1855C4F9AE02.roa (hash: WqjKBxQe2fFRZs4kqddr9GvMdc6frPevC+o56pVgm04=)
                          3: 4FF0079CC6CB11ECB185E43EC4F9AE02.roa (hash: v/YstiUDt5AHMIY3l8QrkWhxof9v0AFEbtY42FYgngA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1081 (0x439)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7A69, serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457
        Validity
            Not Before: Oct  5 00:17:09 2026 GMT
            Not After : Oct 12 00:17:09 2026 GMT
        Subject: CN=6ac2ec86-7a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f1:53:83:f6:b1:b8:1b:c9:79:04:16:6f:e7:
                    13:8c:d3:46:98:c7:89:d1:f2:5d:1d:fa:56:68:9b:
                    7e:23:22:53:ad:60:e3:6d:a9:dc:4d:8b:89:02:c6:
                    20:9a:f7:3f:13:ad:61:84:1b:b0:9f:c7:2b:d4:e7:
                    ff:f6:ca:cd:f9:aa:f1:cc:6d:cb:67:5c:3d:fe:12:
                    66:18:13:5d:74:e7:f8:d9:a9:af:d2:6a:df:4a:a9:
                    79:c9:cd:59:c3:e4:b2:a1:ab:28:28:42:03:25:29:
                    ad:b9:a0:cb:32:61:e8:d1:ae:b1:6a:80:3a:57:72:
                    c5:ed:f5:2a:70:27:3b:0d:eb:64:cb:93:6d:16:b4:
                    c8:e0:8c:ac:9a:52:e9:f0:ec:6f:1f:f3:5e:f9:8a:
                    b6:ef:14:70:b5:2e:0e:78:39:b7:9f:b8:4f:44:6d:
                    d0:9f:f0:02:33:19:31:99:b4:5a:a9:17:ce:90:04:
                    c4:f2:d8:53:b8:3a:d9:76:4c:13:cd:45:d8:4c:f8:
                    07:03:cf:43:07:2b:b3:3b:97:4b:0b:07:0f:36:fe:
                    60:c6:e2:56:aa:fa:9d:96:d1:d5:9a:6f:b3:b0:f5:
                    88:2f:28:16:c2:84:e2:8e:56:4d:68:f3:1f:d8:f9:
                    43:ad:1b:14:ce:2c:05:bc:fd:79:a1:24:de:a7:23:
                    da:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:24:84:8A:8D:47:85:FF:AF:1C:DD:56:5D:6F:AF:5B:0C:05:DA:26
            X509v3 Authority Key Identifier:
                keyid:CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:fe:8b:d8:a3:85:e1:b7:ad:be:ef:44:b2:03:86:58:d3:12:
         2c:7c:7a:7f:75:9a:ff:a5:83:31:4d:13:f6:6d:9a:1b:20:67:
         f0:86:5d:28:7f:f2:13:dc:e4:0a:fd:f3:06:11:a1:0c:63:66:
         5f:37:e0:9b:c4:7e:33:ae:40:05:ba:b9:15:3f:e4:7f:bb:30:
         f3:36:df:0b:f3:f0:45:8e:be:9b:37:01:d6:3a:3a:b4:51:a1:
         4e:18:36:5e:53:6b:cf:ac:19:49:f5:8e:9c:ab:8e:58:df:8b:
         e2:fd:58:3c:bb:cc:f3:5e:55:fd:5b:9a:67:29:4c:f2:43:2e:
         d1:a3:8f:a7:56:84:7f:e5:7b:ed:25:97:f3:d7:b4:3d:65:28:
         35:fd:38:15:a2:b7:75:95:8e:3a:60:dc:94:43:ab:dd:e4:5b:
         93:66:56:e4:dc:97:77:f9:26:ac:38:fb:9b:56:d7:1b:0b:48:
         94:bc:15:67:c3:43:f0:3f:0c:78:d4:d6:66:72:cd:c4:ca:08:
         49:63:48:05:71:b3:a9:6a:90:3d:e5:50:c6:49:ce:5a:f0:bf:
         54:fd:fd:1f:f7:7e:49:83:24:d7:dd:c2:a8:f4:03:2e:2f:1f:
         d9:d4:45:fc:a4:39:d7:60:85:fa:ad:10:3b:de:cb:16:01:44:
         b9:5f:dc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:54:23 2026 by rpki-client