Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft
File:                     MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft (raw, json)
Hash identifier:          +7N+lewUlsLK1V7zaqYjq2SFZ1xjM/hL4HlwXjVGe2A=
Subject key identifier:   B3:B6:C5:07:32:6B:D8:CA:23:57:F5:15:24:7F:27:65:04:FB:3F:99
Authority key identifier: 31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF
Certificate issuer:       /CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft
Manifest number:          0171
Signing time:             Wed 07 Oct 2026 05:21:36 +0000
Manifest this update:     Wed 07 Oct 2026 05:21:36 +0000
Manifest next update:     Wed 14 Oct 2026 05:21:36 +0000
Files and hashes:         1: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl (hash: urU3Q1pX0oJ6AiMni7PBjb4JJB6AcJWDtirvDajoOLo=)
                          2: D9BE56E2927D11EFB83ACB5CC4F9AE02.roa (hash: SUhQMhc4f0iIonT89sMRWBYG1AnMoqeXmV34+Ua8hnA=)
                          3: BE48D4AA927D11EF9651FC4AC4F9AE02.roa (hash: GdbfGtYS8h77XRd1qyihe8+9mJGRbTVbLdhWwXMqNGc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl
                          rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 05:21:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8203, serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF
        Validity
            Not Before: Oct  7 05:21:36 2026 GMT
            Not After : Oct 14 05:21:36 2026 GMT
        Subject: CN=6ac5d6e0-fbae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c9:44:c5:39:b7:9b:d9:f7:12:c8:cf:96:c6:
                    90:e9:1a:aa:f5:2b:21:84:d7:f5:5e:37:4b:58:3a:
                    b2:57:37:99:dd:2c:05:58:13:19:bd:7f:ef:aa:af:
                    a3:da:6e:0c:01:31:8e:b9:d1:62:42:d5:34:c1:75:
                    87:46:ac:d5:49:46:cf:f9:5a:e2:1c:d3:83:e9:af:
                    6a:ff:e6:45:f2:74:4c:1b:d0:7a:fa:77:e1:3f:82:
                    e9:d4:5f:df:b8:b4:5f:52:8e:0e:a9:57:a1:00:74:
                    c4:ea:31:c9:f9:e2:1b:47:18:7f:82:bb:09:e1:29:
                    b3:ee:fa:5e:b1:4f:9a:4d:e7:79:41:00:79:7b:1c:
                    26:14:a9:3c:2d:47:d3:bc:36:9e:36:19:96:17:49:
                    22:c9:b6:76:c1:15:a0:59:14:f1:ec:cf:73:25:33:
                    da:db:02:44:89:01:26:e9:78:cc:50:a6:ab:a9:9f:
                    6e:80:fa:b1:59:70:06:1f:a7:3d:ff:92:84:66:37:
                    75:e1:ef:d9:e0:8e:41:05:0c:01:f3:f6:79:cb:e3:
                    5e:48:bf:8b:04:3b:00:87:4e:53:10:1e:97:55:47:
                    22:fb:b4:89:71:37:d6:e9:c8:be:d2:51:8d:40:48:
                    ab:87:35:dd:5b:e4:55:b1:9a:79:2e:0c:0d:12:7d:
                    f5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B6:C5:07:32:6B:D8:CA:23:57:F5:15:24:7F:27:65:04:FB:3F:99
            X509v3 Authority Key Identifier:
                keyid:31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a8:f4:1e:6f:fa:2e:be:72:99:ca:7a:ac:fb:ea:df:6a:1f:
         d3:e6:f3:e6:d5:9e:ab:69:7a:c3:b8:a9:06:e8:0d:53:ae:3b:
         a9:23:03:90:c9:36:38:38:d2:c6:71:22:17:70:fb:a5:85:b6:
         cb:78:e5:ee:d8:e1:16:df:c8:3e:f6:74:2b:15:73:b2:10:44:
         c7:06:05:06:c6:bd:e0:01:fa:e7:0a:30:4f:21:cc:3a:50:8a:
         ac:b7:60:75:40:a2:cb:e4:3f:c6:33:5d:5e:8a:5e:4e:15:f4:
         8a:e7:07:b5:bc:4b:12:a2:03:65:de:1d:57:60:13:93:a5:db:
         d0:cb:fe:2a:91:80:96:36:3c:29:be:7e:d0:83:77:f3:40:8b:
         ba:cf:26:dd:99:d8:0c:fe:8b:58:07:1e:a3:ae:12:68:4a:40:
         b4:4b:fd:0a:c0:df:32:3a:c3:8a:1e:07:ac:1f:8e:89:b1:fa:
         05:b8:3a:88:17:32:62:ef:e5:4c:cd:79:76:77:fa:13:41:a6:
         73:8d:2a:27:05:1b:97:dc:a4:69:41:f4:fd:c6:aa:05:23:38:
         cb:97:b9:7b:c2:a9:98:d7:aa:3c:2c:e4:2b:79:28:49:4e:e8:
         2d:31:06:8d:8a:2b:e8:97:fb:73:e4:a2:11:e3:b6:4c:d5:ee:
         e4:a7:46:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:35:51 2026 by rpki-client