Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft
File:                     5yN2M529XTAqWcz6d6wJzRcjlU0.mft (raw, json)
Hash identifier:          DvKLOA4bMxW0k4XVs+ZfyvxtPlZQ7GvrKqh5i+xst80=
Subject key identifier:   BA:2C:76:02:55:E8:0B:D4:B3:FE:87:E4:91:BD:53:FC:CC:B1:3C:13
Authority key identifier: E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D
Certificate issuer:       /CN=A91CD60C/serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D
Certificate serial:       0177
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft
Manifest number:          0170
Signing time:             Sat 03 Oct 2026 05:35:52 +0000
Manifest this update:     Sat 03 Oct 2026 05:35:51 +0000
Manifest next update:     Sat 10 Oct 2026 05:35:51 +0000
Files and hashes:         1: 5yN2M529XTAqWcz6d6wJzRcjlU0.crl (hash: f40muPYlAfBzHv94J9BJm7xCEGFOq7VWAxCQgfTaSRU=)
                          2: AC8EE79E975B11EFB1D18E82C4F9AE02.roa (hash: E/UjcIn0wlrlZQH9DRKC67zkHtOeFvf1WN6PywtlyRM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl
                          rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 05:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD60C, serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D
        Validity
            Not Before: Oct  3 05:35:51 2026 GMT
            Not After : Oct 10 05:35:51 2026 GMT
        Subject: CN=6ac09438-7452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ed:bc:e9:cc:02:8a:c8:3e:2b:f5:7d:ad:a6:
                    56:e1:b5:db:15:3c:85:01:91:33:8c:2c:13:6a:e7:
                    e5:8f:4e:2a:79:0c:f1:3a:31:64:58:81:1a:a0:76:
                    72:7e:9f:b3:a6:4d:4c:a9:31:77:1d:ba:81:3f:15:
                    d5:05:85:5d:9d:eb:98:08:9e:5b:d6:47:09:b1:44:
                    e6:e0:7e:34:2c:b3:f3:58:db:a0:39:d3:93:a7:cd:
                    cf:d0:77:6e:cb:c7:62:79:0c:5c:f1:62:5e:33:fd:
                    54:27:db:67:f7:8f:d7:2a:2c:3e:42:cc:a9:72:09:
                    75:1a:ce:b2:f4:db:4d:08:a0:b6:e9:a6:5f:a7:41:
                    9a:f2:2d:86:9d:fc:aa:5f:93:58:79:65:6a:24:a5:
                    a8:96:cf:03:13:db:6e:c5:c3:a4:7d:e0:44:7e:d7:
                    ab:99:6a:71:35:f2:8a:b8:3f:de:52:0c:ab:cb:9b:
                    76:cd:77:ba:a0:0c:61:70:3b:60:50:c0:6c:66:21:
                    41:d0:50:50:f5:51:60:3f:1e:71:54:63:19:2b:e8:
                    3e:88:69:68:5c:e9:7a:33:0c:56:13:11:02:8e:16:
                    50:25:78:e4:ac:20:fb:74:66:0b:f2:d1:f0:f7:c2:
                    c9:f9:50:20:1f:49:e2:7f:aa:78:77:64:b5:71:a7:
                    be:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2C:76:02:55:E8:0B:D4:B3:FE:87:E4:91:BD:53:FC:CC:B1:3C:13
            X509v3 Authority Key Identifier:
                keyid:E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ec:40:35:7b:af:e3:a6:26:4a:2d:7a:74:4b:70:f8:28:57:
         b7:98:37:7f:48:b6:7e:e2:5d:af:09:d6:b0:4e:a1:45:b0:da:
         f6:5e:e1:f3:02:f3:9b:06:5f:9d:44:a1:b0:a1:ca:f9:39:53:
         25:9f:31:f9:19:0f:4a:2d:a8:40:78:d7:6d:f1:da:86:61:4f:
         3c:db:29:49:83:cd:10:3e:ed:80:68:50:d4:06:1b:99:f2:27:
         fc:11:e1:b9:1b:1e:d7:ff:3a:c6:e0:f0:c9:ab:ae:d3:c3:89:
         19:f5:2b:38:a7:ea:df:a6:5d:ab:f9:8e:ed:5d:3f:f6:50:76:
         c9:97:18:a4:8f:68:30:aa:da:92:94:1d:e5:30:4b:54:fd:ed:
         46:fd:03:b8:70:8a:c5:5b:6f:94:d6:e5:fe:ed:6a:7a:fb:bd:
         7c:96:03:a4:0e:5f:12:06:86:7e:a9:c4:57:d0:18:ed:3f:49:
         c5:69:36:22:37:f5:23:27:a7:cf:8d:0c:01:ac:0d:d8:3b:9b:
         6f:38:20:ef:4e:54:6a:29:b4:34:fc:12:1d:38:df:08:47:5a:
         0f:68:7c:18:02:ae:26:87:73:a4:49:7a:50:25:da:3b:92:62:
         99:04:0a:5d:fd:45:dc:68:e5:17:c5:95:67:ea:21:79:c1:7c:
         0e:b6:af:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:25:14 2026 by rpki-client