Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
File:                     Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft (raw, json)
Hash identifier:          MEZFH90vqS62KszHUGQCO/9Kuc2ID5zniwN0yZYsLPY=
Subject key identifier:   74:8C:78:DD:B7:E4:1A:AB:8E:FE:E6:E4:FA:47:F1:17:21:FA:2E:B3
Authority key identifier: 0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7
Certificate issuer:       /CN=A91D462A/serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7
Certificate serial:       01B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
Manifest number:          01A7
Signing time:             Sat 24 Oct 2026 16:15:30 +0000
Manifest this update:     Sat 24 Oct 2026 16:15:29 +0000
Manifest next update:     Sat 31 Oct 2026 16:15:29 +0000
Files and hashes:         1: Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl (hash: SAVLJgArq+KuWRJt2aRR95SMAccSWDyAGpT+k2mJ8dw=)
                          2: D5BFBE9E591811EF80AA9F21C4F9AE02.roa (hash: lJ8a2BmLR6pDdgSaGE66enyNc/gqE+gsClVSBRvWGto=)
                          3: 626CA672591911EFAF1F1D23C4F9AE02.roa (hash: 9ayUJbTwLRPcJporlzoTUwIv2h9R8DWkz2gQBFVIj/M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl
                          rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 16:15:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D462A, serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7
        Validity
            Not Before: Oct 24 16:15:29 2026 GMT
            Not After : Oct 31 16:15:29 2026 GMT
        Subject: CN=6adcd9a2-8987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e2:10:45:b5:c8:12:65:b1:f9:f1:52:2f:b9:
                    fe:26:55:3f:8a:05:3d:96:35:f6:3f:16:a9:9d:96:
                    ae:15:bc:43:4a:0e:ae:d2:3c:d4:4a:c8:77:0c:7d:
                    31:e0:f8:9a:37:d2:e6:ae:31:8e:66:1e:c1:5e:8a:
                    58:2e:f3:4d:7e:fb:1a:e2:26:2d:60:5a:9e:24:01:
                    8b:92:84:40:fc:6e:e4:97:c4:c0:8a:c7:1e:cc:ad:
                    e8:9c:6c:32:99:23:42:dd:5e:52:4c:91:ab:3a:2f:
                    10:55:ba:a0:28:c9:53:1a:07:6b:e1:4b:09:be:b4:
                    9f:8d:e0:25:2d:8e:66:88:a7:cc:d7:f4:e4:7b:b9:
                    bf:f6:7e:96:9b:5c:b5:4f:b9:7a:3a:5e:1e:75:7f:
                    f5:68:d5:34:24:df:49:61:c7:d7:b4:1a:21:3e:6f:
                    e7:06:ad:37:3a:5b:64:0b:fa:3e:a3:32:b0:18:b4:
                    55:05:e5:9e:5a:6a:2f:cd:43:14:9c:74:cc:cf:4a:
                    e4:5e:1c:18:65:f3:25:89:a5:1b:79:7e:72:b3:b0:
                    51:e6:6a:91:c4:e0:40:a2:c6:8a:af:ff:df:1d:87:
                    b7:4d:f7:1e:66:9a:29:f7:13:82:7c:78:25:32:d6:
                    0f:90:80:ab:4e:b4:33:98:6d:81:f9:7b:66:4f:0a:
                    25:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8C:78:DD:B7:E4:1A:AB:8E:FE:E6:E4:FA:47:F1:17:21:FA:2E:B3
            X509v3 Authority Key Identifier:
                keyid:0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c8:31:91:8a:ef:08:8e:32:5b:89:cb:47:f2:da:95:35:2a:
         4a:a8:a7:6e:92:9e:76:1f:16:6a:ec:0b:0f:5c:35:19:6f:ea:
         fc:1a:1f:8e:e5:90:2b:82:b4:02:8a:1b:02:71:15:8d:0d:fc:
         93:55:c1:f0:92:cc:fe:3c:3f:c8:0a:68:3c:82:fb:44:12:53:
         7f:5e:19:22:55:16:fd:d8:c8:f1:8e:df:0d:f9:5f:b1:de:2b:
         23:f0:e2:b4:50:64:6e:58:bc:8f:bc:da:ca:c1:e6:1c:15:88:
         6a:95:26:37:c5:38:db:a9:b9:ed:25:5c:4c:fa:82:2c:84:a5:
         7a:da:5d:0d:92:f5:ad:41:e7:dd:d0:53:09:ef:d9:d3:6a:b2:
         11:4b:d6:0e:85:59:80:cd:ea:a2:1b:3e:2e:91:43:d5:db:06:
         d1:29:28:c6:44:b5:42:4b:49:d0:7f:be:1e:d5:5f:45:0b:db:
         ef:e4:00:17:68:66:a7:17:5a:6d:40:6b:7c:bb:8f:39:f6:60:
         8f:65:bb:b5:a2:f0:eb:5e:7f:f9:18:4b:fc:04:ff:db:f3:0b:
         46:fa:78:42:7c:76:ad:06:fc:45:fb:3c:39:c2:d3:1f:4c:bf:
         2d:bf:2d:7b:ee:ff:d0:1b:68:16:f0:96:06:61:95:f2:4e:6e:
         cc:79:86:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:18:52 2026 by rpki-client