Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft
File:                     SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft (raw, json)
Hash identifier:          89bhWGITsdhW/kgkyuR1UtwtlqumWzE6k1jfDoO68zo=
Subject key identifier:   A8:3D:E0:74:16:ED:7C:ED:5E:E3:91:1F:E1:61:2D:44:75:42:01:A8
Authority key identifier: 48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60
Certificate issuer:       /CN=A91D3D89/serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360
Certificate serial:       01C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft
Manifest number:          01BB
Signing time:             Wed 07 Oct 2026 04:24:10 +0000
Manifest this update:     Wed 07 Oct 2026 04:24:10 +0000
Manifest next update:     Wed 14 Oct 2026 04:24:10 +0000
Files and hashes:         1: SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl (hash: XAryCYDUqQ+JvWbb4TLz206QzYtrPFAAFoMypry1Rgk=)
                          2: 37D4A3DE20BA11EF9B035D1FC4F9AE02.roa (hash: 58RBvPli9ah74/loscUZOCI8P+BRuK4NwEuZslUtewI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl
                          rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 04:24:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3D89, serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360
        Validity
            Not Before: Oct  7 04:24:10 2026 GMT
            Not After : Oct 14 04:24:10 2026 GMT
        Subject: CN=6ac5c96a-428a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2d:54:f9:06:84:05:60:88:83:7d:ed:80:21:
                    a4:df:7d:f6:ed:3e:d5:5a:48:12:ce:d2:a7:58:4d:
                    4c:25:1f:1c:7c:02:f7:ae:eb:fa:54:b2:0d:4d:16:
                    8a:cd:dc:94:7b:35:95:ac:f7:75:1d:78:3c:64:40:
                    a8:60:e6:45:5a:fa:74:ac:0d:09:d8:1a:94:91:9a:
                    fa:ca:7f:f7:3a:41:5b:e2:91:61:1a:71:f5:f0:50:
                    36:f7:43:1c:12:65:1e:0f:9f:5f:0c:72:22:49:39:
                    7b:29:7a:75:c6:77:32:f7:f9:2b:99:0f:be:b4:56:
                    e4:c9:fd:bf:45:a6:68:3d:c5:77:7b:6c:57:2a:d5:
                    91:3c:7b:09:be:8c:6a:8d:c7:57:fb:e4:50:97:b3:
                    27:52:65:1f:d6:b1:31:66:3e:68:5c:e5:64:02:b8:
                    95:36:7e:07:ac:5b:1c:99:9d:ea:4a:dc:f9:f6:a6:
                    22:60:66:1c:19:ef:1a:fe:0a:18:8d:0a:f3:a9:bc:
                    a9:a0:37:b5:b8:e4:10:e1:96:37:f2:29:4d:f2:a2:
                    11:57:14:e5:7e:9a:02:9f:5e:c3:f3:e2:96:e6:28:
                    9d:5a:28:26:bc:09:2d:c6:44:ba:92:30:24:58:89:
                    e1:bb:4e:de:bd:a2:81:3b:ab:ae:ce:47:8e:2a:9b:
                    de:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3D:E0:74:16:ED:7C:ED:5E:E3:91:1F:E1:61:2D:44:75:42:01:A8
            X509v3 Authority Key Identifier:
                keyid:48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:4b:37:dd:c1:c5:5c:16:b1:75:4a:34:2a:9c:6f:28:32:11:
         09:cd:0e:44:cb:cb:04:fc:a9:0d:a9:c5:09:40:54:e2:69:fc:
         52:dd:08:b3:17:bf:0c:14:94:3b:6f:d3:2b:00:85:b8:9f:ba:
         b2:db:03:48:93:fe:6d:5f:23:c7:3c:e2:64:83:50:36:ef:7a:
         d9:e6:38:85:ee:3c:dc:b6:7e:4a:ce:17:1f:c4:5c:5c:e4:1e:
         d5:11:73:67:2f:28:45:cb:6c:f8:87:0b:4d:3b:4e:e2:15:cd:
         68:cc:ef:e9:6e:03:af:e6:d1:df:ed:9b:af:5f:34:e7:3d:ed:
         bf:14:1a:e9:71:47:42:7d:2e:f4:f0:0e:ee:33:70:78:b9:77:
         b2:3e:df:b3:9c:fc:71:0a:2a:97:a4:4b:c7:31:8a:94:8c:d6:
         a4:a0:63:3f:9b:4c:74:6e:b5:ce:8d:ac:61:15:7d:50:29:98:
         84:f6:b1:69:d7:92:55:1b:48:f9:67:5c:6a:40:e2:29:70:75:
         cd:94:b0:9a:e2:93:a2:b5:50:18:7a:0c:b4:88:92:b4:d3:46:
         28:1b:e3:c3:38:ee:b8:01:a3:7d:44:63:37:ea:87:8b:50:45:
         bd:a1:4c:a4:e9:03:3d:db:17:ed:0f:82:b1:ed:19:20:76:22:
         33:cd:39:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:41:54 2026 by rpki-client