Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
File:                     R4pL3QESHRxrMz7MPiW6Gohxmao.mft (raw, json)
Hash identifier:          QK8wPD+v97Z2vbvGdzwjYUD+0Bcp2CkHsNH1/hjlfts=
Subject key identifier:   7A:A9:23:3A:96:01:A2:7C:BF:39:22:2B:C5:86:1F:C3:F4:C4:12:A8
Authority key identifier: 47:8A:4B:DD:01:12:1D:1C:6B:33:3E:CC:3E:25:BA:1A:88:71:99:AA
Certificate issuer:       /CN=A91DF076/serialNumber=478A4BDD01121D1C6B333ECC3E25BA1A887199AA
Certificate serial:       0EE3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
Manifest number:          0ED6
Signing time:             Mon 26 Oct 2026 17:41:09 +0000
Manifest this update:     Mon 26 Oct 2026 17:41:09 +0000
Manifest next update:     Mon 02 Nov 2026 17:41:09 +0000
Files and hashes:         1: R4pL3QESHRxrMz7MPiW6Gohxmao.crl (hash: GmKNZr1tjO1DxBQeoaT/TAYqpLj7rl/sJH3DN1EsthU=)
                          2: 7043D43679BB11ECB6D72266C4F9AE02.roa (hash: oGmQ2rN8oMQwi/Mb9M5b5FwgbGff4iWncx9xo/hE81k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.crl
                          rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 17:41:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3811 (0xee3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF076, serialNumber=478A4BDD01121D1C6B333ECC3E25BA1A887199AA
        Validity
            Not Before: Oct 26 17:41:09 2026 GMT
            Not After : Nov  2 17:41:09 2026 GMT
        Subject: CN=6adf90b5-e014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:40:c1:66:43:ca:c4:7b:7e:2f:97:ab:80:ae:
                    3a:46:10:78:59:ac:a8:fd:4e:02:7e:3e:d8:40:ed:
                    5b:0d:99:66:f4:b1:36:9a:97:23:f5:bd:06:85:bd:
                    4f:49:c1:07:29:7f:b3:cd:d3:75:5f:f6:ca:f4:17:
                    cb:22:0e:e0:29:5a:63:75:72:67:0c:6c:4a:ef:e5:
                    a6:e1:bc:53:ac:86:89:f5:3f:bd:5a:38:6e:01:32:
                    e4:21:04:e0:0f:8b:55:55:c7:6e:40:7d:18:1c:1f:
                    d1:df:8a:6a:ce:71:9f:b0:50:8d:4d:ab:c9:7a:1a:
                    0c:40:a0:91:8b:c3:8c:b7:5b:ab:d6:ca:34:b0:57:
                    06:ad:10:31:cd:83:30:58:a8:79:a2:9b:aa:14:0e:
                    3e:43:df:b0:57:8b:98:25:a1:d2:3b:a7:da:e6:c4:
                    b7:09:67:aa:fa:ae:f5:ac:1a:a1:47:46:57:eb:56:
                    6f:00:44:90:57:52:a7:a9:d6:4a:e1:b2:5e:52:09:
                    ca:f0:de:ac:0f:89:6a:31:48:12:55:21:56:c7:1a:
                    24:30:d6:88:93:1e:96:0e:bd:8f:6e:41:1b:56:fc:
                    2b:f8:6d:f4:8c:ef:45:66:fe:d7:c3:de:49:35:ef:
                    bb:f9:67:14:8e:e9:8a:43:2c:83:16:4f:ad:96:4e:
                    2d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A9:23:3A:96:01:A2:7C:BF:39:22:2B:C5:86:1F:C3:F4:C4:12:A8
            X509v3 Authority Key Identifier:
                keyid:47:8A:4B:DD:01:12:1D:1C:6B:33:3E:CC:3E:25:BA:1A:88:71:99:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d3:7b:73:59:16:3d:03:f2:fe:c1:10:f8:fc:79:3b:c3:09:
         69:43:37:f3:93:dc:c5:51:b2:9d:2b:de:a4:0b:7c:38:f3:68:
         48:65:5f:7e:4e:03:41:52:08:69:2b:1d:a6:0a:b6:8b:02:e8:
         26:b9:0c:84:6c:4b:98:bf:62:c2:64:33:49:1d:98:d1:f1:05:
         1c:22:50:00:a0:eb:1d:5e:cc:61:11:50:c5:d4:2e:a3:00:b6:
         93:a4:73:55:3b:01:2c:68:7e:ef:2e:d6:b1:d6:9c:73:ea:98:
         a9:a4:b3:e9:47:0d:b5:47:e9:3e:28:53:fe:6d:8a:1a:36:84:
         42:83:65:9e:12:73:e5:3b:b2:e1:e6:5e:d7:6a:37:4b:a3:6f:
         b0:e2:6d:6f:e1:00:04:62:ca:34:b9:51:d7:2e:8b:42:d2:ca:
         09:85:8b:e4:39:82:5e:ad:85:db:07:48:d4:66:77:42:35:b5:
         9b:f2:73:65:90:25:c4:57:9e:7e:a4:4e:ca:3c:a3:db:8b:d6:
         dc:8b:69:5e:35:7c:43:45:73:4b:e5:9a:6c:a6:47:f6:9f:ec:
         72:f3:af:86:69:a7:58:e9:ac:cb:24:ab:2c:23:cd:75:e3:57:
         88:a5:58:03:5f:4f:33:79:6b:5a:cc:c2:b5:78:60:1e:aa:2f:
         ce:44:1d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:11:56 2026 by rpki-client