Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
File:                     tSlwZVVtKyKTSTXnUgcivVMz2k8.mft (raw, json)
Hash identifier:          BscDXC0H9jxFbM8nDy9C+0wuigxfp54TxVpWCnwwdqY=
Subject key identifier:   F4:F6:35:9C:9F:2E:5A:C4:1A:30:F2:9F:A7:66:09:35:67:AC:56:32
Authority key identifier: B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F
Certificate issuer:       /CN=A91CD7A4/serialNumber=B5297065556D2B22934935E7520722BD5333DA4F
Certificate serial:       0280
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
Manifest number:          0276
Signing time:             Sun 25 Oct 2026 02:20:48 +0000
Manifest this update:     Sun 25 Oct 2026 02:20:48 +0000
Manifest next update:     Sun 01 Nov 2026 02:20:48 +0000
Files and hashes:         1: tSlwZVVtKyKTSTXnUgcivVMz2k8.crl (hash: fI9UIW4ghugVtj+j0LNApaVfk8du20K/vOpXi+6AKCk=)
                          2: 275245323AB511F0AE5E5919C4F9AE02.roa (hash: k50pyswPVAJjF83tcl2ttbv+lV78Nbi1RduGBQNNES0=)
                          3: AD47BEC4320611EE845F4A5AC4F9AE02.roa (hash: HkA6U1wFsTKTzUQHdDn6LGozzBTZRy33eQX4h5sxnuY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl
                          rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 02:20:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 640 (0x280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD7A4, serialNumber=B5297065556D2B22934935E7520722BD5333DA4F
        Validity
            Not Before: Oct 25 02:20:48 2026 GMT
            Not After : Nov  1 02:20:48 2026 GMT
        Subject: CN=6add6780-1ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:38:b5:a3:07:e2:52:bb:07:2c:01:26:59:46:
                    4b:ce:0d:56:80:48:55:1a:8e:36:1b:93:50:f2:bf:
                    3f:7d:7c:99:16:12:78:7b:18:ea:a4:f4:f9:6f:ca:
                    18:7c:80:20:fd:7c:9a:7d:6c:5e:2e:fe:4c:66:ac:
                    85:e2:9d:a3:82:4d:03:6c:fd:db:1e:f6:0e:4b:78:
                    da:e3:e8:19:62:ed:42:a1:4f:34:e2:2d:fe:3e:96:
                    7b:a8:94:f4:84:ef:27:0b:0a:1e:11:09:e2:58:64:
                    13:2c:db:af:4e:5d:88:fe:fb:d1:81:9d:30:ea:8b:
                    fa:6e:23:2e:13:cf:e0:17:6e:9a:e3:80:ea:49:b0:
                    cc:d1:66:44:15:91:46:60:05:b0:f5:40:ee:c3:29:
                    8e:52:71:66:e2:34:d5:c0:d5:77:8a:92:2e:a5:85:
                    4b:e0:3c:81:ef:0f:9e:1a:b3:a9:5e:9d:d6:72:09:
                    f5:5f:7d:dc:8d:d6:fd:82:d7:66:71:4a:6b:77:57:
                    3a:e3:79:ca:8e:88:aa:db:11:e5:40:82:99:4a:1e:
                    a6:f9:ca:1f:12:12:65:8d:4d:37:a3:60:39:c3:47:
                    03:aa:07:c0:76:e5:a1:de:70:b6:18:ec:a9:50:b1:
                    2a:e7:31:b5:75:ef:77:69:3c:fd:6a:f6:c8:ec:bd:
                    2f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F6:35:9C:9F:2E:5A:C4:1A:30:F2:9F:A7:66:09:35:67:AC:56:32
            X509v3 Authority Key Identifier:
                keyid:B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:64:5a:ec:10:69:f4:9b:71:d7:ea:4c:b9:69:89:11:b7:54:
         46:d0:0f:34:f6:46:a3:8c:27:c0:a0:98:b6:92:f9:20:59:17:
         23:e3:64:2c:28:8e:be:69:c9:9b:f0:53:73:a9:09:85:04:e1:
         8b:4c:ad:af:58:53:fa:30:69:d4:e5:46:d3:2f:b8:c4:22:9b:
         03:ad:dc:37:eb:74:02:79:6d:59:3b:d6:9a:65:5e:62:f9:48:
         88:af:36:0c:95:aa:38:6d:a1:95:5e:e4:05:3b:1e:ac:a5:d9:
         fc:a7:8c:17:36:6d:f1:e3:19:de:d1:d7:ef:35:69:b0:2b:78:
         93:ba:63:f2:df:f3:e4:f2:3b:ff:94:ba:33:54:7d:36:34:eb:
         c7:24:f1:d3:68:02:99:36:40:dc:d8:ad:4c:66:f3:7e:c6:47:
         4e:29:9f:4b:fb:2a:bc:16:1d:a1:30:6f:9b:bf:c1:73:4b:9c:
         95:53:12:17:ea:8c:c0:cd:44:0f:a6:33:24:cc:96:eb:f0:2b:
         94:cc:f8:97:28:91:13:cb:74:73:a3:f8:9c:81:c7:09:db:69:
         c4:22:19:a2:99:da:39:08:b6:ce:34:cc:ae:91:8c:eb:3a:04:
         24:2a:69:d3:89:e3:fd:56:d0:42:59:d1:63:fd:dc:7f:60:ea:
         65:33:34:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:48:43 2026 by rpki-client