Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft
File:                     906Wyp7pNgdFZCkpYPvB-c80hU0.mft (raw, json)
Hash identifier:          C/qGFgyTdYiku1O+cHCplfUnF6Ml32PQEmrTWzT98dI=
Subject key identifier:   32:4B:9F:52:5B:BC:B1:FA:AA:D0:EB:84:87:DC:78:39:76:77:A0:4D
Authority key identifier: F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D
Certificate issuer:       /CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
Certificate serial:       02AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft
Manifest number:          0297
Signing time:             Mon 05 Oct 2026 02:03:23 +0000
Manifest this update:     Mon 05 Oct 2026 02:03:22 +0000
Manifest next update:     Mon 12 Oct 2026 02:03:22 +0000
Files and hashes:         1: 906Wyp7pNgdFZCkpYPvB-c80hU0.crl (hash: ZDMCcGOA1hJOewDJl1jC6lNdQhyHAS4EirMHeYa64AI=)
                          2: 1142378EA6ED11F1BCD2D8325311F970.roa (hash: U7gXTN2jSHEpswXiAu/JP39xJ693Xn6tNaLPqV5Q4Ss=)
                          3: 0B241CB2A6B311F1B22327223B11F970.roa (hash: Wt14FIQP3ssl0Qzbl4IG7F3qL3er1NNc+D/wePYI5gU=)
                          4: F26B14C4EE8B11ED95BCBB13C4F9AE02.roa (hash: 8jeW8/hJkGdFdRJb/DPimyhjr6XbR1wf7zCFXjc91Ws=)
                          5: 0C43C6FE115A11F1BB244A79283D8C67.roa (hash: iSL/mpPwJSWU3nd39VwJEW+QZvsKDcKpXyFb6h/Kusc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl
                          rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 02:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 685 (0x2ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0329, serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
        Validity
            Not Before: Oct  5 02:03:22 2026 GMT
            Not After : Oct 12 02:03:22 2026 GMT
        Subject: CN=6ac3056b-a52d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d9:11:9d:4c:1c:0f:23:9d:44:5a:33:59:a1:
                    af:c1:70:fd:38:90:9a:a0:cc:e3:7a:c0:bf:17:e1:
                    d7:1b:f8:b3:31:86:67:e9:ec:44:31:a7:01:27:16:
                    5a:c7:c4:3f:b5:59:8c:e3:6f:93:02:10:a3:57:ac:
                    4e:4e:6a:9d:04:64:eb:df:d7:23:28:86:a7:51:84:
                    3c:65:21:17:29:c1:a1:cf:49:1d:9e:95:b3:e3:24:
                    6a:98:91:18:c7:f8:55:59:04:5c:8c:41:66:e6:3c:
                    95:ba:72:ec:74:75:8c:27:88:82:eb:29:99:4d:4f:
                    a0:ef:70:bf:5f:40:8f:63:17:48:74:27:33:08:0b:
                    2b:f1:c6:5f:bb:a9:9a:4f:16:36:1d:36:6e:04:13:
                    29:e5:af:07:61:67:04:a6:10:06:b7:f2:74:0a:78:
                    f1:c2:42:17:4d:60:5c:ee:d7:81:f9:38:af:31:3b:
                    c9:69:31:61:e5:97:a6:e2:05:88:8a:8f:65:57:c8:
                    85:2d:e2:81:78:9a:f7:63:b8:ef:50:54:ee:1e:c6:
                    12:17:e9:24:1e:10:9c:04:1b:a0:e5:1f:81:0c:7f:
                    57:12:77:08:73:53:91:ed:99:29:9c:5f:2f:25:00:
                    2a:ef:ff:4e:11:a3:e4:23:2d:ab:af:1a:51:b2:d6:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4B:9F:52:5B:BC:B1:FA:AA:D0:EB:84:87:DC:78:39:76:77:A0:4D
            X509v3 Authority Key Identifier:
                keyid:F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ad:c6:34:65:dc:f6:74:1e:5e:a7:6d:e8:61:86:59:10:a6:
         95:8e:28:e9:d1:4e:80:73:9e:ca:7f:c3:1f:03:1a:4a:67:a1:
         65:52:5f:e2:70:c1:b0:77:0e:83:4e:43:c3:ea:ee:56:6d:5c:
         70:18:a7:ca:2b:38:14:cc:2b:f6:55:3d:1a:08:03:b1:65:65:
         aa:80:cb:24:51:26:c1:3a:c2:97:a7:52:0f:e7:4e:57:10:77:
         48:49:dc:f8:17:9f:4a:9a:b3:f3:19:91:52:74:27:1e:ed:58:
         cf:5f:b2:a1:3d:d4:ee:bd:fe:3a:17:d8:f1:b2:6d:54:9d:fa:
         7c:5c:84:9e:a6:0e:fb:39:fe:26:5b:d4:c1:44:d0:67:1d:01:
         5c:a5:67:de:12:1f:1f:85:f9:d0:14:10:fe:59:49:97:29:ee:
         ea:d3:32:c3:ec:f5:47:d4:99:a5:e3:0c:9a:22:9d:11:cb:6b:
         8c:33:50:02:bc:4e:d2:0a:17:65:71:3f:31:7e:87:e2:e1:54:
         d7:2f:a2:95:a0:93:97:f6:cf:e7:8a:77:86:87:bc:96:c3:34:
         69:0e:a3:c5:e8:8a:ad:7c:0e:46:67:40:3e:29:44:05:c2:6f:
         e4:4d:4f:8a:6c:13:9b:a5:a3:4a:02:58:22:59:c5:2b:8c:6d:
         27:03:5a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 00:59:07 2026 by rpki-client