Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft
File:                     10XhyGsYGPfQVj-Q6LoSvosa43g.mft (raw, json)
Hash identifier:          2BKI18VR5mk5ZKvMlvoMV2Wnwjs8YQOhfdn+tvFTQD0=
Subject key identifier:   6D:F6:E9:87:AD:65:48:FA:08:ED:33:5F:23:D5:36:73:7D:CF:F0:D4
Authority key identifier: D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78
Certificate issuer:       /CN=A91D97C4/serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378
Certificate serial:       025D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft
Manifest number:          0254
Signing time:             Sat 03 Oct 2026 02:59:29 +0000
Manifest this update:     Sat 03 Oct 2026 02:59:29 +0000
Manifest next update:     Sat 10 Oct 2026 02:59:29 +0000
Files and hashes:         1: 10XhyGsYGPfQVj-Q6LoSvosa43g.crl (hash: W9w3DRR3q/BM9Tx1Yo5ZlyWss88ZyJ7ugykMLZ91Nzs=)
                          2: 317FCFCA85B411F1928328FC5DA30FBC.roa (hash: it6HwI6gYN9kRsjao8LVj1cZthgpU769+I6sMCyi7EQ=)
                          3: 6E8D6EEA85AA11F1873A8CE75BA30FBC.roa (hash: iVDmlKturjsdPeMQ1ZgDutRftzZi0zhbWX3+CGjmM4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl
                          rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 02:59:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D97C4, serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378
        Validity
            Not Before: Oct  3 02:59:29 2026 GMT
            Not After : Oct 10 02:59:29 2026 GMT
        Subject: CN=6ac06f91-ecf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0c:e0:0f:6a:3b:3c:c8:21:c5:fb:c5:dd:3f:
                    61:fc:95:e6:77:d9:c8:81:7f:f1:27:f8:db:fe:f8:
                    a4:62:6c:df:b1:ae:90:ff:4f:07:d3:36:26:44:2d:
                    0b:71:75:c6:82:51:19:9c:b1:d6:d2:67:f4:9d:78:
                    b1:be:83:cb:25:c0:96:f0:02:2e:f8:0d:bc:01:b4:
                    51:9a:ba:08:65:56:4e:b0:3e:e1:e7:64:cb:ab:d4:
                    e6:55:4a:f5:1f:f2:18:d6:d7:aa:86:b1:a4:0e:48:
                    f7:e8:0d:aa:79:7b:85:32:f3:36:a4:6d:64:53:7a:
                    7f:05:43:da:4b:36:b5:69:cb:f7:11:ac:d4:bd:ac:
                    84:0c:28:b5:80:73:a6:b6:db:40:ca:a7:09:59:c5:
                    5c:75:3a:a8:25:e4:f8:ca:7a:4a:08:7f:05:34:7b:
                    d4:c9:a1:4d:70:89:f4:03:a4:98:00:f8:f8:5a:fb:
                    4e:78:02:5b:29:37:96:27:b6:b1:98:bf:ee:69:ed:
                    04:26:1e:5e:fe:e5:ca:fc:bd:7f:8e:b6:94:f1:61:
                    22:4f:09:2c:65:c7:de:02:84:81:2e:81:70:bb:32:
                    16:a2:9e:88:9c:63:06:00:1f:28:a3:19:e1:6a:2b:
                    66:06:5f:c7:ee:5d:65:ff:bb:bd:fd:42:67:25:5b:
                    28:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F6:E9:87:AD:65:48:FA:08:ED:33:5F:23:D5:36:73:7D:CF:F0:D4
            X509v3 Authority Key Identifier:
                keyid:D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:d8:30:c2:80:e2:c6:75:a2:1a:37:c3:05:e0:e2:0c:0c:81:
         ca:2a:f5:4e:dd:52:22:9c:0c:a6:a4:0d:29:34:25:a9:b7:22:
         7e:ea:8e:11:49:47:8a:58:b8:6c:bb:0e:6e:a4:c2:98:4c:74:
         df:e5:18:6f:5d:18:20:ed:a3:27:37:05:18:4e:7d:62:a8:2e:
         53:b0:8c:67:0c:5d:4d:ee:ac:d6:ba:2b:64:e9:73:f8:7e:fb:
         ec:7c:c4:c9:a8:17:d2:a6:67:2f:16:01:bf:e5:9a:60:38:c3:
         b9:34:d7:08:aa:49:16:0c:63:b9:bf:0c:de:1f:1e:57:61:19:
         f1:c8:88:df:4b:ea:0b:76:f5:2c:bf:27:25:c8:c3:5e:04:2d:
         91:07:25:fe:32:9c:c5:69:3b:b1:50:fd:5b:61:42:4e:74:d3:
         27:41:a9:5c:9e:97:30:b8:98:22:12:fe:d4:50:29:4c:66:4f:
         c3:cb:50:b7:d7:be:a4:ed:f8:8e:17:17:78:04:b8:8e:8e:60:
         f7:c3:65:0d:ee:5c:41:5e:77:e4:71:0b:e5:be:8b:c4:10:f6:
         2b:8d:47:7f:9a:8d:08:7e:13:28:11:fa:03:14:31:df:15:0c:
         97:c1:85:c2:83:8b:38:1c:38:81:d8:92:38:f5:03:54:86:4b:
         14:2d:e7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 03:56:47 2026 by rpki-client