Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft
File:                     8mF6VUFXzpkgnjn9-1PVFt3eePg.mft (raw, json)
Hash identifier:          RzLy6eoIdrsy7FfFCY7+pIu3Pl4+mNzSWLnf1lw+yDs=
Subject key identifier:   89:A8:51:0F:3E:6A:F7:D7:BF:7D:AB:D7:4A:70:EF:1A:D5:66:07:7D
Authority key identifier: F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8
Certificate issuer:       /CN=A91DD25E/serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8
Certificate serial:       C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft
Manifest number:          BF
Signing time:             Wed 07 Oct 2026 07:24:19 +0000
Manifest this update:     Wed 07 Oct 2026 07:24:18 +0000
Manifest next update:     Wed 14 Oct 2026 07:24:18 +0000
Files and hashes:         1: 8mF6VUFXzpkgnjn9-1PVFt3eePg.crl (hash: GHi1Jg6xynMwI8LJ+kSOW4RBsPmNznDgVSRcNVJr3Ho=)
                          2: 43E43270A27D11F0862ABC17C4F9AE02.roa (hash: Yh1bbT2+xjblexqdnh+JiXLZlJI+5u5HESQyRKq7U1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl
                          rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 07:24:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD25E, serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8
        Validity
            Not Before: Oct  7 07:24:18 2026 GMT
            Not After : Oct 14 07:24:18 2026 GMT
        Subject: CN=6ac5f3a3-f217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:64:1d:b0:a1:0d:34:1f:49:01:18:60:91:00:
                    71:6d:e4:e7:36:02:16:7b:cf:46:82:24:87:75:9d:
                    7a:eb:72:78:01:e4:bc:fa:a9:0f:09:06:b2:68:9d:
                    a0:d1:a0:d3:34:26:b4:55:c1:b2:2b:17:90:cf:46:
                    f5:98:ae:c8:e7:22:55:a2:b3:d9:40:d0:5e:03:29:
                    cf:da:01:57:9a:61:d7:b7:d8:42:f9:8c:78:59:26:
                    ec:df:a9:01:43:4c:3e:68:23:06:88:fa:f7:cf:88:
                    9b:7b:5d:48:24:e9:6d:2b:f5:88:a8:fd:52:0f:5a:
                    99:46:83:8d:f0:91:ef:0d:d3:9c:96:22:1e:d0:79:
                    95:85:15:80:12:ac:9f:48:4b:8c:d9:fe:75:0b:73:
                    3c:2c:ae:db:01:9a:b1:39:e3:f1:70:74:db:41:0b:
                    9f:a1:ee:88:c5:0d:a4:97:05:0e:bc:3d:b6:9f:a2:
                    92:6a:b7:90:4c:9a:d5:65:86:1a:1c:0b:61:16:d0:
                    24:8f:63:b6:c1:c3:b6:78:55:dd:57:9c:1c:85:5e:
                    ff:7e:85:06:39:95:03:a8:81:e6:41:e0:74:ca:64:
                    c7:08:59:da:27:21:39:cd:93:ba:b4:be:42:64:1e:
                    95:a5:f0:b9:f0:20:31:48:1a:15:70:ef:b5:7b:26:
                    2d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A8:51:0F:3E:6A:F7:D7:BF:7D:AB:D7:4A:70:EF:1A:D5:66:07:7D
            X509v3 Authority Key Identifier:
                keyid:F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:9e:08:dc:33:66:3e:89:c6:10:c5:45:76:6c:43:dc:05:37:
         53:66:6d:ba:36:7c:b2:ac:14:b2:ff:a0:2a:aa:80:0b:e2:ce:
         9b:88:62:ea:9b:68:0f:52:b7:36:0d:28:69:9a:1d:9a:6e:d7:
         72:db:ce:e4:e8:23:d2:56:b5:e9:3c:6c:a9:71:30:2f:1e:16:
         57:5a:70:d8:9b:e5:12:8d:a8:94:3e:64:e4:b6:85:be:5a:04:
         5e:95:b1:6b:27:eb:de:25:2c:e1:47:ed:4e:f3:14:ff:2e:7d:
         1a:5a:02:30:17:2c:ba:a4:56:6e:73:00:e1:14:8a:a3:cd:f6:
         70:c0:8d:e0:b0:cb:07:5a:b0:f9:ee:07:f9:6a:30:90:9b:2b:
         ab:b9:c7:ae:0e:02:bb:df:56:40:f5:03:d7:33:55:8b:be:81:
         20:43:61:9d:d9:23:66:c0:62:3e:c3:60:fd:f8:ca:d9:01:86:
         c1:59:4c:27:2a:c9:09:87:48:1e:e9:a2:c1:ba:ad:3c:46:36:
         34:3f:30:90:cf:a0:07:91:14:d5:ad:2b:6b:de:7a:2a:fe:d4:
         51:08:e0:bf:b0:96:a7:c9:e6:5d:de:ac:04:62:74:df:8b:e4:
         91:10:2c:64:fb:b5:b1:be:3f:f7:79:0b:22:4c:66:92:ab:1b:
         2a:c5:00:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 21:23:56 2026 by rpki-client