Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
File:                     0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft (raw, json)
Hash identifier:          indn2msjpKDxHbD9D+HC3Nxwkvs7v3Tf6YUHyi6knEI=
Subject key identifier:   96:E2:5D:79:8C:B8:BA:20:8D:A8:74:22:5A:F3:13:53:74:4D:42:C2
Authority key identifier: D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF
Certificate issuer:       /CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF
Certificate serial:       19A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
Manifest number:          1999
Signing time:             Wed 28 Oct 2026 15:47:58 +0000
Manifest this update:     Wed 28 Oct 2026 15:47:58 +0000
Manifest next update:     Wed 04 Nov 2026 15:47:58 +0000
Files and hashes:         1: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl (hash: F0oJh6CI8k/78z0z928mvhpLGA2Itz2tbb/dY0+iJX8=)
                          2: AE21A9C6818911EA81577016C4F9AE02.roa (hash: /hHfMzw3wFKPf6r1EjShKflD2YZUUETl3Ub8hWJ+iIM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl
                          rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 14:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6563 (0x19a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1691, serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF
        Validity
            Not Before: Oct 28 15:47:58 2026 GMT
            Not After : Nov  4 15:47:58 2026 GMT
        Subject: CN=6ae2192e-293c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d2:bb:9c:89:9b:53:23:71:35:fa:02:72:91:
                    83:ea:71:b7:c1:93:d5:63:de:e8:62:2f:a1:cb:68:
                    ad:fc:fa:21:fb:76:85:1d:25:fe:d9:ce:e3:38:45:
                    1a:f6:c7:b6:f0:31:43:97:06:1f:89:fc:7a:22:55:
                    43:d2:eb:3a:83:8e:30:df:0e:3a:e3:11:e8:53:32:
                    db:84:b7:c7:a7:66:b6:dc:d3:e1:30:10:15:a7:eb:
                    f9:b2:7d:17:2b:e8:31:24:c5:d3:db:3f:86:0e:dc:
                    6d:86:aa:47:51:cd:8d:1a:80:ed:78:c9:9e:10:74:
                    52:a7:70:a1:54:43:26:25:3e:11:cd:e2:d5:c1:2d:
                    df:2d:a2:94:48:a2:e4:68:bd:64:a1:10:92:f9:ae:
                    83:3b:93:47:38:ff:a3:2d:a8:ac:16:9a:ca:84:c2:
                    1a:b1:c4:ff:8c:ab:0d:de:cd:43:24:d4:7b:d0:11:
                    13:e2:e6:f7:69:f7:30:5b:31:ff:f7:bd:ec:b7:de:
                    dc:ce:fe:3c:64:98:3e:05:cb:22:2b:9f:74:4d:3e:
                    f8:44:71:bb:54:eb:0b:79:e6:d7:99:6f:fe:74:a3:
                    2c:b6:9a:20:ce:c4:42:fd:3a:88:ab:2e:3e:87:b1:
                    8e:aa:4e:9b:7a:cf:49:ac:28:f8:27:d7:2a:01:e2:
                    e6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E2:5D:79:8C:B8:BA:20:8D:A8:74:22:5A:F3:13:53:74:4D:42:C2
            X509v3 Authority Key Identifier:
                keyid:D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d7:8c:dc:e4:ec:95:8f:12:bc:ba:32:53:af:77:90:51:77:
         d6:68:73:3e:ed:be:66:db:47:b4:1b:c3:e8:83:f2:71:e1:10:
         7d:95:68:0a:32:1a:3e:d1:8d:30:d2:1e:12:b2:94:67:bf:93:
         12:a3:e2:29:42:10:ea:50:e4:1d:fb:2b:d7:c4:b5:ab:b3:9d:
         0b:72:8a:34:2a:a6:c1:45:9f:aa:32:f2:7d:95:77:44:32:64:
         8f:41:98:9c:20:6a:00:f1:b5:64:9e:88:7b:98:68:e6:5d:2a:
         49:4e:c5:75:d0:cd:dd:2b:9e:12:3a:1a:d4:c9:fd:a7:b0:f1:
         da:19:5b:24:cf:f9:f7:98:35:a8:5b:cf:17:96:5e:3e:1d:30:
         0a:84:99:2e:ce:01:31:af:a3:e7:b5:52:f9:6b:c2:9a:f3:b4:
         f0:3b:9f:c3:85:31:b4:fb:67:0a:9a:fd:76:7c:1f:47:32:be:
         1a:42:e6:54:72:be:8b:06:87:3a:fa:45:fb:26:77:3a:11:7a:
         ef:d0:e1:45:61:6f:52:fa:14:6a:89:6b:80:46:12:1e:73:09:
         b8:e2:2b:af:76:14:8c:ab:f5:1c:1b:e5:04:4d:1c:45:47:d0:
         d8:67:02:1f:8a:b6:f0:ce:b3:44:0f:aa:5f:02:df:bd:3a:03:
         72:91:7e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:52:51 2026 by rpki-client