Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft
File:                     i0hqzK8SpnqVaI6NEb1ljAQcElo.mft (raw, json)
Hash identifier:          kmzDFnAE1uVAINZzbV8Pg2y21SxIRecHvkZQTfC2yIE=
Subject key identifier:   9D:EC:56:AF:29:56:EA:C2:D5:07:78:5F:4C:62:BE:91:76:57:76:0B
Authority key identifier: 8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A
Certificate issuer:       /CN=A91DBA5B/serialNumber=8B486ACCAF12A67A95688E8D11BD658C041C125A
Certificate serial:       0199
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft
Manifest number:          0192
Signing time:             Tue 27 Oct 2026 04:42:40 +0000
Manifest this update:     Tue 27 Oct 2026 04:42:39 +0000
Manifest next update:     Tue 03 Nov 2026 04:42:39 +0000
Files and hashes:         1: i0hqzK8SpnqVaI6NEb1ljAQcElo.crl (hash: 5/aH/l9Oz8FPLx/zbzSDU6EW5t0KbFM03kR7ZQo0Ea0=)
                          2: F305F43270E711EF8573CF71C4F9AE02.roa (hash: YMLfZRhw2F992qnEpT9FOvqxRRq8hdiIFf9AFe0u2Q0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.crl
                          rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 04:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBA5B, serialNumber=8B486ACCAF12A67A95688E8D11BD658C041C125A
        Validity
            Not Before: Oct 27 04:42:39 2026 GMT
            Not After : Nov  3 04:42:39 2026 GMT
        Subject: CN=6ae02bc0-b8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:73:a5:cb:4b:92:64:83:a4:a9:12:6c:e7:5e:
                    26:6f:4b:5d:df:f3:05:a1:7f:9d:03:bb:69:55:9b:
                    f6:5e:36:b6:c9:08:db:83:22:ac:02:47:2d:0a:5d:
                    d6:22:4c:fc:53:37:b2:25:ca:b7:54:87:91:a7:de:
                    db:ac:21:05:51:c7:3f:ba:ab:4e:88:ee:5b:7c:1f:
                    14:26:3d:62:13:0d:b1:eb:02:84:7c:68:6e:3e:57:
                    a6:29:ca:61:c8:ab:fe:a0:a8:c6:64:8e:6b:56:05:
                    ff:2e:66:be:2c:8b:81:3e:6c:9a:fc:1f:74:c2:e5:
                    f8:66:6a:b8:46:08:c4:10:5d:a1:ec:47:22:e7:dc:
                    00:13:52:27:99:8d:6a:f3:76:e2:84:d1:f0:1a:da:
                    91:e7:7d:2b:7e:03:81:5f:ed:4c:72:73:0d:c1:2b:
                    d6:b9:db:d6:6c:86:f7:59:18:45:1f:25:a6:41:bf:
                    ac:c2:87:e4:18:d4:47:cf:7e:93:81:7e:16:e7:00:
                    03:9e:6b:ca:4d:71:cf:45:70:82:33:af:01:01:15:
                    f5:78:c9:53:e4:c9:92:83:b2:a3:c4:f1:ad:b6:b8:
                    dc:24:e3:22:9c:e2:ff:f6:f3:dc:fe:d0:e3:4c:f8:
                    06:d5:80:cb:6b:bb:22:ab:ac:ad:11:52:1f:a7:f9:
                    83:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EC:56:AF:29:56:EA:C2:D5:07:78:5F:4C:62:BE:91:76:57:76:0B
            X509v3 Authority Key Identifier:
                keyid:8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:31:5c:82:cd:15:08:31:e9:30:9d:47:80:9d:ef:b2:c1:24:
         d1:ea:c9:0c:40:3c:ef:de:ad:98:7b:99:c4:b6:12:c8:7c:e9:
         3c:91:d5:7d:47:10:a1:aa:52:04:b1:cd:08:c0:76:6a:f9:42:
         b9:72:89:a2:37:0f:50:04:63:70:f1:68:c9:f7:98:6c:37:08:
         f2:41:d9:8f:86:fb:af:63:5b:67:a8:df:ab:9a:c9:ab:b3:73:
         94:8e:c9:4c:05:b7:24:42:0e:8b:31:cc:2a:59:3f:80:ad:1e:
         45:f8:f0:cc:27:83:5e:19:7e:be:cf:b4:30:73:a9:34:d5:ad:
         6e:a8:3d:d1:dd:a7:c3:34:7a:a7:41:80:7e:e6:44:17:66:66:
         da:b6:42:c8:b4:3c:e5:0b:fe:dd:a8:97:f0:a0:ca:78:d8:96:
         eb:88:6c:76:a1:65:60:18:55:4d:21:17:c1:46:e1:e6:c5:e0:
         03:d9:46:1a:49:51:b7:b3:1a:02:50:66:6a:aa:d1:86:7a:dd:
         25:cb:b5:7d:f7:a0:06:4f:b3:6d:d7:4a:f7:74:81:55:3c:08:
         62:6f:14:4c:3f:0f:0d:5f:24:85:d1:33:e5:86:08:23:d8:3a:
         85:df:e3:cf:7c:4c:80:08:31:4d:18:43:d0:cd:4b:a7:ac:dd:
         25:5f:63:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:30:45 2026 by rpki-client