Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft
File:                     CO-lQmZek61vuSE1pf1ZJF_V-uM.mft (raw, json)
Hash identifier:          VVLoOm5ZWC4pV6GHX1HZwsU15J6UZWxrGlGWZ1GKOjI=
Subject key identifier:   35:CE:0F:CF:27:6B:01:45:73:17:3C:1E:8A:0B:6C:34:C3:F3:B9:D5
Authority key identifier: 08:EF:A5:42:66:5E:93:AD:6F:B9:21:35:A5:FD:59:24:5F:D5:FA:E3
Certificate issuer:       /CN=A91C8AF2/serialNumber=08EFA542665E93AD6FB92135A5FD59245FD5FAE3
Certificate serial:       02BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft
Manifest number:          02BC
Signing time:             Fri 09 Oct 2026 01:49:12 +0000
Manifest this update:     Fri 09 Oct 2026 01:49:12 +0000
Manifest next update:     Fri 16 Oct 2026 01:49:12 +0000
Files and hashes:         1: CO-lQmZek61vuSE1pf1ZJF_V-uM.crl (hash: Er9qf0LsUwy+HL5M/c7MMLYPWHiAwXgB39aJmCusSFI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.crl
                          rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 01:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 700 (0x2bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8AF2, serialNumber=08EFA542665E93AD6FB92135A5FD59245FD5FAE3
        Validity
            Not Before: Oct  9 01:49:12 2026 GMT
            Not After : Oct 16 01:49:12 2026 GMT
        Subject: CN=6ac84818-f791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9b:e9:a1:dd:4a:5c:96:70:9e:9b:60:a5:26:
                    64:27:bb:aa:21:b6:bc:ed:d5:7b:cf:35:55:8f:66:
                    9c:67:b7:4f:6d:94:bf:99:f7:65:b1:c1:62:40:ae:
                    85:09:40:9c:87:ca:be:dd:42:9e:b3:74:aa:92:00:
                    8d:84:21:df:ca:56:74:82:f7:47:b4:84:25:fd:41:
                    c3:57:60:dd:14:26:2a:d9:b2:e7:65:a9:4d:bd:bc:
                    47:fe:94:db:b8:ff:f3:b9:bd:56:e9:b7:8c:e8:b6:
                    fd:9d:53:1c:59:47:8a:1d:08:a4:1b:61:67:64:c5:
                    b8:0a:ae:1f:c0:2d:f6:d9:02:8b:24:a2:46:77:0e:
                    3a:d4:99:63:eb:22:e4:dc:a9:75:01:ef:79:ae:35:
                    ce:93:83:4e:0f:b1:6a:64:2b:58:4a:47:37:20:cd:
                    b6:8e:22:93:36:f4:9c:34:2d:31:95:42:b1:9e:91:
                    53:0b:cf:43:9e:6f:94:5e:4c:df:87:70:2a:f8:1a:
                    1f:f6:39:96:8d:d4:4b:fc:40:70:b5:d8:87:03:13:
                    bb:b2:d6:13:94:66:19:72:fb:4f:91:ab:9f:ab:76:
                    84:a5:0b:f8:37:87:0d:9e:48:b5:25:5b:f8:8d:ed:
                    a1:18:fb:6a:4c:57:05:58:06:4a:66:70:88:56:da:
                    42:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CE:0F:CF:27:6B:01:45:73:17:3C:1E:8A:0B:6C:34:C3:F3:B9:D5
            X509v3 Authority Key Identifier:
                keyid:08:EF:A5:42:66:5E:93:AD:6F:B9:21:35:A5:FD:59:24:5F:D5:FA:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:a9:ca:48:9f:bb:6a:05:0a:41:87:0c:9c:6e:89:e5:0e:28:
         72:4e:bf:9c:cf:61:78:e0:a0:1e:da:94:0c:65:51:73:90:df:
         62:61:40:2d:63:5e:18:22:2d:69:77:1e:bd:8e:9d:fa:71:48:
         2a:8a:5e:11:62:c3:6f:34:91:73:11:a4:9d:33:ca:35:59:a6:
         09:e6:81:19:62:38:78:7f:ef:e7:f2:e2:2c:6d:03:30:5f:bb:
         20:2c:55:8b:51:36:65:fe:03:91:39:30:2e:ac:fb:93:f9:18:
         da:fd:59:a6:40:14:bb:a4:e5:a0:c1:c5:87:8b:ec:63:7c:77:
         df:e5:fa:6e:a9:fa:fc:a2:6a:55:d3:3a:32:e2:6f:ce:92:90:
         ca:5b:aa:a1:f0:ba:e4:c4:b7:07:10:cd:59:d6:94:8a:76:9c:
         e1:f3:1d:96:ac:5e:a3:53:f3:8a:be:99:3b:17:f4:c3:72:f8:
         fa:9e:81:68:44:0e:a8:64:e4:24:15:9b:ee:87:a2:b8:d7:28:
         65:94:c4:fb:52:57:1b:e9:4d:45:cc:11:c7:07:8a:60:0d:8f:
         9d:c5:30:a1:83:fc:8a:eb:d7:de:8d:38:3f:98:e4:d3:a7:ae:
         e8:50:24:9c:b5:b2:ba:28:32:57:21:8b:d5:1e:29:89:1a:22:
         95:47:4b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 15:23:47 2026 by rpki-client