Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft
File:                     aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft (raw, json)
Hash identifier:          8mq+QPP6Sg368IQsz/Iiof9KJkfF5EbjI/qikW0tazI=
Subject key identifier:   72:15:6E:D9:10:37:A0:DC:DE:89:5E:54:B3:90:66:4D:52:61:88:69
Authority key identifier: 68:A4:FC:81:2D:01:91:36:3E:1C:4A:13:09:9F:53:B0:27:37:65:79
Certificate issuer:       /CN=A91CE216/serialNumber=68A4FC812D0191363E1C4A13099F53B027376579
Certificate serial:       08C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft
Manifest number:          08B5
Signing time:             Tue 06 Oct 2026 20:41:50 +0000
Manifest this update:     Tue 06 Oct 2026 20:41:49 +0000
Manifest next update:     Tue 13 Oct 2026 20:41:49 +0000
Files and hashes:         1: aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl (hash: HDXkLmdhs8S7tF2jdo1GzYOeQMzE4GjTOrbYHNdrsYQ=)
                          2: 7F2355F2FE2A11EA8A51B85AC4F9AE02.roa (hash: LxDrlJvtyaRL2wVNUjApHj5FEy/mIjNevhV6EDdmD1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl
                          rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 20:41:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2242 (0x8c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE216, serialNumber=68A4FC812D0191363E1C4A13099F53B027376579
        Validity
            Not Before: Oct  6 20:41:49 2026 GMT
            Not After : Oct 13 20:41:49 2026 GMT
        Subject: CN=6ac55d0e-a7da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:34:85:01:79:9a:63:ca:76:07:db:7f:1e:5f:
                    54:4c:7f:86:89:f8:5d:2b:f0:32:61:33:8e:e3:a6:
                    df:6a:d6:0d:c3:a2:45:c4:7a:70:3f:e2:c3:9b:bb:
                    3f:6d:51:5a:72:26:63:a1:ac:36:d5:a2:56:2d:cb:
                    94:27:63:b9:6e:c4:21:00:03:6b:ea:f4:ac:4c:00:
                    d4:c2:c0:38:37:44:ed:4c:a3:5d:4a:dc:ca:32:8f:
                    f2:61:51:c8:34:8d:15:8d:94:b2:6f:1f:b8:42:9b:
                    20:0d:b7:9e:65:4a:bb:a4:2f:0c:10:cd:44:d5:05:
                    50:05:04:fc:ac:fe:30:ac:37:ea:b0:2e:dd:fb:6f:
                    cb:ec:f8:83:a7:ee:84:b7:49:f6:7d:b6:64:cd:8e:
                    83:21:a2:e5:57:f8:12:13:b1:49:3f:88:e4:63:1c:
                    f3:24:e2:36:74:1e:3a:76:75:48:c7:34:03:c0:4d:
                    ca:81:a6:13:ba:6f:0c:53:83:31:50:de:2f:cc:88:
                    60:f7:8c:c3:f2:dd:2c:e6:e1:0e:05:de:99:27:aa:
                    0b:b0:7d:3c:cf:d9:db:43:ae:b1:64:ec:9a:c9:b3:
                    3d:d1:f4:81:f4:39:e3:c1:e4:3b:88:b2:0a:95:e1:
                    5b:12:82:f2:14:a2:f2:17:f2:cb:a4:f0:06:ea:c2:
                    b2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:15:6E:D9:10:37:A0:DC:DE:89:5E:54:B3:90:66:4D:52:61:88:69
            X509v3 Authority Key Identifier:
                keyid:68:A4:FC:81:2D:01:91:36:3E:1C:4A:13:09:9F:53:B0:27:37:65:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:55:54:68:23:7e:d0:98:54:1e:12:3a:0e:60:a3:ed:51:33:
         10:4a:24:2e:58:97:7f:a3:ef:1c:d2:7f:dd:39:41:31:a0:27:
         69:da:a5:70:26:3e:be:85:c0:dd:3c:18:d1:b6:d4:22:ee:e8:
         e9:10:d1:e5:c9:98:19:20:56:05:a7:d9:c8:f6:19:e7:b1:70:
         6e:e5:b4:78:5c:20:63:25:6d:6b:d2:e8:21:c3:74:61:3b:2a:
         43:ea:03:4b:b5:f6:e2:71:bc:b2:0f:43:06:35:4a:f6:e2:ec:
         36:a6:54:23:8f:5e:84:2b:e7:2a:24:89:4e:93:59:fb:48:dc:
         1c:24:d6:65:e6:58:03:0a:2e:4b:6b:48:27:3e:39:e7:9e:a4:
         37:54:f6:bc:44:83:47:5c:95:67:7f:ad:c7:bd:93:fd:4c:b8:
         80:0c:44:81:18:75:77:8f:53:88:ea:ba:ae:ac:62:e3:ff:fd:
         8b:d4:7c:18:83:aa:fb:3e:20:dd:11:4c:67:ea:75:65:52:40:
         a3:37:47:89:9f:a0:ea:2c:59:7e:4d:07:23:3d:69:50:bb:4a:
         0f:74:4b:c1:e4:a9:a3:dd:94:af:1a:61:09:0b:4e:d4:47:11:
         57:0b:3f:e8:00:33:f5:fb:02:21:67:f6:af:3b:38:04:73:ad:
         4c:59:f0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:37:32 2026 by rpki-client