Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
File:                     utY-wFoDGPl_MVby4gWcYZPOOAo.mft (raw, json)
Hash identifier:          +V0Q6iTRd7DQsQbRmvTNEImaaK7YVwL/+aaMLDQcsy0=
Subject key identifier:   FF:23:AC:B3:1A:80:34:20:3D:BF:D3:61:89:33:1D:37:B2:54:2C:4A
Authority key identifier: BA:D6:3E:C0:5A:03:18:F9:7F:31:56:F2:E2:05:9C:61:93:CE:38:0A
Certificate issuer:       /CN=A91D5A49/serialNumber=BAD63EC05A0318F97F3156F2E2059C6193CE380A
Certificate serial:       02DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
Manifest number:          02DE
Signing time:             Mon 05 Oct 2026 01:17:54 +0000
Manifest this update:     Mon 05 Oct 2026 01:17:54 +0000
Manifest next update:     Mon 12 Oct 2026 01:17:54 +0000
Files and hashes:         1: utY-wFoDGPl_MVby4gWcYZPOOAo.crl (hash: CMt1Gk403H2KppBCElYEEZFWI3p9bJkJJUnZ8gD1I5Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.crl
                          rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 01:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 734 (0x2de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5A49, serialNumber=BAD63EC05A0318F97F3156F2E2059C6193CE380A
        Validity
            Not Before: Oct  5 01:17:54 2026 GMT
            Not After : Oct 12 01:17:54 2026 GMT
        Subject: CN=6ac2fac2-f3dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8f:6a:d4:5b:e9:58:ad:a4:f5:78:9b:af:49:
                    e6:6b:b5:f5:c2:ea:f7:8c:56:7d:d4:d3:e1:70:57:
                    6b:ee:bc:64:f7:bd:7f:06:ea:3e:7f:04:fb:31:6d:
                    1c:a2:e3:6d:0c:9f:32:f9:c5:d2:ea:30:92:f5:cc:
                    20:7f:03:8a:33:17:10:6d:af:fc:e8:00:ae:19:27:
                    71:6d:65:a2:fb:71:a4:d8:07:65:5b:80:69:f2:48:
                    ed:b3:82:be:9a:19:ab:f1:a8:7e:5a:72:ce:c4:68:
                    2f:d6:ce:f8:7c:5a:bd:5d:a0:fb:eb:ff:1c:70:e4:
                    ff:11:e5:1f:ad:3a:fe:9f:fc:22:51:38:cb:50:1d:
                    65:3e:76:24:00:25:22:60:ea:4c:ce:f9:77:a6:40:
                    3f:c8:77:d9:7d:23:85:a2:89:01:36:b9:d7:8b:2d:
                    48:43:8b:11:2f:d1:c4:c7:0b:73:8d:46:ec:90:6b:
                    62:e9:d0:d9:15:f9:0c:ce:00:f5:6f:dd:be:c4:c9:
                    f7:e4:91:b0:6b:cf:69:c1:42:dd:eb:d4:a3:57:1e:
                    4a:07:27:6f:cc:01:97:76:c7:d6:43:45:e7:62:90:
                    d4:e9:b5:21:7d:b2:13:6b:00:cd:9e:e3:bf:f1:d9:
                    28:e4:b7:0f:97:90:5c:3f:cc:a9:c8:01:c4:14:1f:
                    81:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:23:AC:B3:1A:80:34:20:3D:BF:D3:61:89:33:1D:37:B2:54:2C:4A
            X509v3 Authority Key Identifier:
                keyid:BA:D6:3E:C0:5A:03:18:F9:7F:31:56:F2:E2:05:9C:61:93:CE:38:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:6c:5f:93:7b:af:ef:b3:41:8c:ac:a6:0f:3c:97:d5:64:df:
         18:45:d8:1d:d4:a5:21:be:c0:b0:f2:71:bd:da:e7:3b:a5:45:
         be:80:fc:89:ea:29:d4:2b:9e:2f:03:2b:c1:a0:ac:60:46:7e:
         57:07:ee:a9:72:15:e0:f8:94:35:46:c7:3f:a1:72:07:3b:81:
         46:69:b4:06:2e:bf:99:04:54:55:07:b6:2b:08:92:4b:f2:b9:
         84:61:1a:05:d3:85:9b:d2:2c:9a:ee:ff:0c:c2:2c:f3:ce:85:
         95:a9:4c:2f:ae:64:a6:c2:4a:02:3e:f5:78:c1:67:53:56:c2:
         06:95:f0:18:19:2d:7c:85:8e:70:03:80:71:9a:fe:ad:ff:80:
         05:d3:a0:15:b6:ba:1b:0b:5a:ad:eb:f7:80:bf:60:5d:50:c2:
         a2:53:20:67:5e:8e:88:3c:6c:90:92:c4:82:0c:bf:42:f8:23:
         37:06:db:9c:46:c6:31:6f:57:59:80:25:27:f2:68:a7:98:cc:
         18:c4:b9:2e:eb:b2:8f:9d:3a:fa:37:a0:cc:15:8d:82:59:7a:
         5d:e0:fb:b2:68:f5:3d:4f:2f:f2:96:06:98:ad:a2:d4:c3:b1:
         ed:a8:49:a8:a8:67:6f:52:33:2f:a3:37:06:80:d5:8b:33:5d:
         11:e8:cc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 13:14:29 2026 by rpki-client