Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft
File:                     df43qD7agAphAmCFh-30CJ2CQOA.mft (raw, json)
Hash identifier:          CIUsZ8pYWjgiaF4od3HXfdDGurZtCrdTlyqJGcnVDfA=
Subject key identifier:   78:34:62:A1:89:74:3B:B6:1C:A7:76:D7:3C:6E:AF:05:79:B3:D0:20
Authority key identifier: 75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0
Certificate issuer:       /CN=A91DC7AA/serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0
Certificate serial:       0118
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft
Manifest number:          0110
Signing time:             Mon 05 Oct 2026 06:27:07 +0000
Manifest this update:     Mon 05 Oct 2026 06:27:06 +0000
Manifest next update:     Mon 12 Oct 2026 06:27:06 +0000
Files and hashes:         1: df43qD7agAphAmCFh-30CJ2CQOA.crl (hash: TcbehOMU/3SxEx13W9qkzJacfluyXa3r1yaT+NYE0Yw=)
                          2: A7C7EF962A8911F09526D35BC4F9AE02.roa (hash: HcYhHFFcvCKuaGxFRTIVt3Z+Wah4d0SujZ+rvqoNWCE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl
                          rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 06:27:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC7AA, serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0
        Validity
            Not Before: Oct  5 06:27:06 2026 GMT
            Not After : Oct 12 06:27:06 2026 GMT
        Subject: CN=6ac3433b-dab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bc:6f:ec:8a:34:52:e1:0a:78:f6:3e:53:31:
                    85:31:5a:30:69:53:aa:7e:7e:18:48:87:8a:08:5a:
                    08:43:aa:72:4b:6e:33:45:e8:f5:c4:e2:b3:70:bd:
                    20:1d:c4:24:9d:ef:5e:98:0a:8e:15:05:20:f8:db:
                    ce:e0:27:35:43:2c:5a:c5:0b:d8:1b:a9:3c:c7:36:
                    aa:42:55:d6:2f:24:32:17:35:66:41:74:11:91:db:
                    ce:aa:aa:c3:56:60:f8:40:0c:03:ac:c9:f9:ad:57:
                    e0:30:b9:1c:70:1a:77:fc:50:ea:0d:72:e7:0b:b0:
                    a4:25:41:c2:3e:72:fc:05:0a:22:83:87:cb:60:27:
                    ec:b1:fa:a7:02:c3:d6:39:3c:86:64:06:d9:a7:aa:
                    f2:04:9c:ff:65:1f:b6:74:97:ed:1a:88:c5:c4:26:
                    36:0b:88:88:ca:fc:dd:07:d5:53:d7:68:8a:d2:8f:
                    1f:d7:f1:a1:86:b1:59:8e:37:15:44:ea:51:a1:2e:
                    68:b3:b2:7a:8a:36:6c:a0:f2:e3:2e:2c:30:07:bc:
                    94:73:85:0e:99:d6:78:f1:f3:41:bd:ac:c4:27:8b:
                    26:9b:19:41:c9:96:78:a9:96:7f:94:7e:6a:f7:3e:
                    75:79:87:77:68:d4:72:b8:c4:c4:82:0c:8c:c5:bd:
                    a5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:34:62:A1:89:74:3B:B6:1C:A7:76:D7:3C:6E:AF:05:79:B3:D0:20
            X509v3 Authority Key Identifier:
                keyid:75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:d8:67:1f:be:a4:31:b9:5f:ee:87:6f:3f:97:f1:f1:2e:1b:
         1e:aa:29:4b:cb:b4:50:42:f6:92:52:58:af:12:73:3e:5d:21:
         fc:b9:3a:71:71:e2:0c:86:68:44:2c:66:f6:f8:5c:dc:f6:ec:
         43:1a:3d:af:2a:a8:26:69:78:f6:cd:24:2b:de:fd:05:8b:27:
         d0:48:69:ab:97:07:bd:69:f8:34:5c:84:aa:20:63:f7:7a:5e:
         39:70:53:87:b9:ab:23:e5:89:42:bc:6f:be:28:86:af:9b:e0:
         81:4e:db:d4:3b:e2:68:f9:be:91:54:9f:61:f2:7b:bb:c8:fc:
         b0:7c:01:4b:38:b1:ee:e4:d5:f3:07:d4:dd:76:20:ea:b5:0e:
         33:e5:45:8f:46:87:05:41:34:43:c5:a7:ff:cc:9b:60:bc:06:
         c8:de:30:56:c2:82:ec:c9:49:4c:a3:9a:3c:04:6a:3d:3e:58:
         23:95:f9:32:c5:f2:99:53:bc:cb:04:60:93:34:96:8f:1f:03:
         15:db:f1:32:04:51:b8:4d:93:ca:ba:84:3a:2b:1f:a8:c6:d2:
         39:f8:9b:f2:95:11:09:32:6d:3b:f8:52:07:4e:38:d2:19:f7:
         87:e8:d3:d6:dc:75:6d:46:4d:1b:43:89:4b:2d:af:2f:26:61:
         f1:b7:57:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:26:30 2026 by rpki-client