Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft
File:                     8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft (raw, json)
Hash identifier:          gyYlQqPebns2l8/2Rhp2qII9SdP0x+tbHN2tmJN02Zw=
Subject key identifier:   85:43:6C:B1:41:99:0D:A6:4E:9E:9B:A3:7A:74:80:78:2B:EC:B9:F9
Authority key identifier: F2:44:81:5D:5B:39:1E:20:00:B7:8C:A9:6E:19:30:20:FF:90:22:58
Certificate issuer:       /CN=A91CDF78/serialNumber=F244815D5B391E2000B78CA96E193020FF902258
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft
Manifest number:          51
Signing time:             Mon 05 Oct 2026 08:45:43 +0000
Manifest this update:     Mon 05 Oct 2026 08:45:42 +0000
Manifest next update:     Mon 12 Oct 2026 08:45:42 +0000
Files and hashes:         1: 8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl (hash: njEZwZZToV/AUjvWN86ezVJIbxrEQtzWwCtdDg3kro4=)
                          2: 46165CDE490411F1BC93ABE395833773.roa (hash: X96VcqcjafQHkS8RXd769VXGiUvTLL5bk9V9PsYGSzw=)
                          3: EE42117C927511F18A54FCC54511F970.roa (hash: 4onIQnShgHHglJV/eY63U0D9thFh3TgjTZuJUpaZPkM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl
                          rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 08:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDF78, serialNumber=F244815D5B391E2000B78CA96E193020FF902258
        Validity
            Not Before: Oct  5 08:45:42 2026 GMT
            Not After : Oct 12 08:45:42 2026 GMT
        Subject: CN=6ac363b7-4778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7b:0c:a1:62:dc:c0:96:f5:a4:68:85:ef:8f:
                    8a:a8:29:4b:a5:c5:c2:b3:21:64:df:7c:9f:63:17:
                    85:c9:1d:cf:ed:0e:34:77:65:90:bf:a5:9a:05:4f:
                    e4:ad:2c:e6:d3:06:43:5b:81:4d:20:34:70:cb:bb:
                    9d:03:09:10:c8:8c:58:a0:ac:21:c5:86:b7:ea:6b:
                    34:5c:a3:6f:f1:84:e6:90:16:81:8b:74:24:cd:c5:
                    87:49:8d:43:47:d0:ed:63:d3:ce:29:cf:bd:a8:bc:
                    d0:7c:d9:d0:2d:89:a1:b5:8e:0d:49:e8:a5:83:d8:
                    a1:89:38:57:76:f5:10:6b:2f:39:ce:7b:78:75:d8:
                    4f:51:ef:69:15:b9:85:f7:f9:42:ee:d2:52:4a:2f:
                    07:db:17:f1:82:2e:e9:62:db:f0:fe:8d:61:cd:cf:
                    d5:34:24:44:13:78:28:1e:5b:ce:b4:48:54:b1:83:
                    77:a3:5f:95:48:2b:83:24:97:19:60:ba:2e:66:7f:
                    77:a1:c7:fc:b6:d4:88:79:39:79:57:b9:91:08:b7:
                    46:78:71:fd:4a:0f:fa:97:10:e0:ae:62:d8:16:99:
                    2f:bc:91:f2:ce:a7:c4:10:06:75:9f:11:dd:88:77:
                    e5:60:17:31:b4:3d:76:70:39:9a:77:13:21:cf:9a:
                    e5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:43:6C:B1:41:99:0D:A6:4E:9E:9B:A3:7A:74:80:78:2B:EC:B9:F9
            X509v3 Authority Key Identifier:
                keyid:F2:44:81:5D:5B:39:1E:20:00:B7:8C:A9:6E:19:30:20:FF:90:22:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:8f:29:d6:f3:b1:5a:a3:b3:8d:7c:82:ea:fa:1a:ca:f2:0d:
         32:b5:45:ea:13:60:0c:d0:09:49:eb:3b:9a:20:98:9d:37:4b:
         8b:3a:3a:20:f2:98:20:e9:04:c4:50:05:c1:69:c9:4a:f8:95:
         28:fc:08:37:a9:07:b0:cd:d4:bc:43:b9:8a:12:fa:22:ea:23:
         56:65:3a:ad:f7:db:b4:6a:b6:b1:90:01:50:e7:a6:36:98:08:
         27:67:7a:ec:80:c1:ff:7a:7a:24:57:43:d4:16:fa:c5:38:a2:
         80:2f:6f:ca:e2:d0:42:5f:6c:24:d9:db:a0:e3:80:42:2e:eb:
         89:3e:55:5e:b4:a6:6d:e9:88:ee:21:89:3a:87:15:a7:81:bd:
         25:2d:a0:2a:90:f5:e0:ef:1e:ee:cd:99:3e:f8:bc:fe:25:2b:
         e5:12:f1:24:46:af:4f:78:3f:97:81:0f:41:16:20:8b:c3:e6:
         32:8a:48:af:3b:26:e7:92:1b:ca:88:5b:22:0d:32:70:df:2c:
         db:d6:46:1e:c7:00:69:9d:81:26:d7:1f:39:66:e3:31:2b:27:
         f3:60:48:75:c8:84:46:ef:99:05:1d:55:74:a5:de:02:dd:af:
         5a:80:b8:26:33:1f:59:01:22:63:d8:83:14:02:db:f5:4a:41:
         ba:db:ac:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:02:57 2026 by rpki-client