Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E03A0/820F58CE695411F18C0D49337347A888/iF62yruqbX7kx2tBVtczXePUyn8.mft
File:                     iF62yruqbX7kx2tBVtczXePUyn8.mft (raw, json)
Hash identifier:          VbHBzIR+LFf491dEoahKWz+rSM74lCrsmefvHUIhFnQ=
Subject key identifier:   A1:87:2E:76:88:37:2D:77:D7:FD:EA:7E:D2:E9:7F:C3:CA:46:EE:27
Authority key identifier: 88:5E:B6:CA:BB:AA:6D:7E:E4:C7:6B:41:56:D7:33:5D:E3:D4:CA:7F
Certificate issuer:       /CN=A91E03A0/serialNumber=885EB6CABBAA6D7EE4C76B4156D7335DE3D4CA7F
Certificate serial:       3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iF62yruqbX7kx2tBVtczXePUyn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E03A0/820F58CE695411F18C0D49337347A888/iF62yruqbX7kx2tBVtczXePUyn8.mft
Manifest number:          3B
Signing time:             Wed 07 Oct 2026 09:10:01 +0000
Manifest this update:     Wed 07 Oct 2026 09:10:01 +0000
Manifest next update:     Wed 14 Oct 2026 09:10:01 +0000
Files and hashes:         1: iF62yruqbX7kx2tBVtczXePUyn8.crl (hash: J37O3TJyU8/smp43yhUZnRQC1UuYeh7rVHxqsybq8LE=)
                          2: CB95F0FC695411F1959172477347A888.roa (hash: 7rTgze+Ry2UhS3yMBTinUY/zuuqUO/FlCws2qCK2ydc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E03A0/820F58CE695411F18C0D49337347A888/iF62yruqbX7kx2tBVtczXePUyn8.crl
                          rsync://rpki.apnic.net/member_repository/A91E03A0/820F58CE695411F18C0D49337347A888/iF62yruqbX7kx2tBVtczXePUyn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iF62yruqbX7kx2tBVtczXePUyn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 09:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E03A0, serialNumber=885EB6CABBAA6D7EE4C76B4156D7335DE3D4CA7F
        Validity
            Not Before: Oct  7 09:10:01 2026 GMT
            Not After : Oct 14 09:10:01 2026 GMT
        Subject: CN=6ac60c69-fa2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:5e:b4:00:4b:c1:6f:4a:fa:76:3f:ce:f2:
                    c5:be:cc:c9:9a:e9:b1:96:4e:f2:28:5d:d2:f6:1b:
                    ec:ab:b9:9a:7d:3e:a4:b5:2d:c8:94:b6:4e:04:90:
                    1f:ff:07:7f:46:36:e0:fd:5b:2a:a6:79:72:a5:9e:
                    3f:fe:73:0a:df:e3:af:75:1b:70:4e:5e:b7:46:3a:
                    0c:b3:13:49:ce:a3:c4:be:03:87:0e:0f:58:db:44:
                    26:6d:49:06:12:f4:4b:73:97:0e:a3:83:4b:a6:5f:
                    50:c9:e7:31:51:d9:49:a1:e5:3f:8e:51:e2:a4:e1:
                    ab:33:8f:57:9e:63:0d:58:b5:d3:8e:51:d9:6e:07:
                    e2:a6:e4:00:16:5e:7d:09:e0:6e:c0:3e:9a:d9:1a:
                    5b:17:d1:17:12:1d:45:81:0d:e3:59:47:aa:36:cc:
                    44:16:20:18:1a:fd:93:c2:dd:21:02:96:9d:c0:be:
                    be:9e:98:e6:6b:22:8e:72:6f:58:81:d6:8c:86:46:
                    73:8e:06:f6:63:19:cc:e3:de:ce:44:fa:a6:f7:00:
                    1a:4b:1f:d4:33:a6:f7:c2:51:86:40:cb:bb:c1:aa:
                    b3:ab:39:7f:15:7e:d9:eb:94:ad:2b:2e:cc:94:ff:
                    d2:16:7f:ee:a5:28:4c:d2:54:ce:48:18:9b:7a:44:
                    d6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:87:2E:76:88:37:2D:77:D7:FD:EA:7E:D2:E9:7F:C3:CA:46:EE:27
            X509v3 Authority Key Identifier:
                keyid:88:5E:B6:CA:BB:AA:6D:7E:E4:C7:6B:41:56:D7:33:5D:E3:D4:CA:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E03A0/820F58CE695411F18C0D49337347A888/iF62yruqbX7kx2tBVtczXePUyn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iF62yruqbX7kx2tBVtczXePUyn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E03A0/820F58CE695411F18C0D49337347A888/iF62yruqbX7kx2tBVtczXePUyn8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:1c:9a:1b:37:19:75:1f:c2:df:00:98:d7:4c:da:f6:d8:d8:
         f9:aa:95:20:e0:b3:f4:92:a8:06:aa:e3:5e:7b:89:80:9a:20:
         5c:68:79:31:e9:af:f0:de:4b:93:6a:48:36:fb:3e:27:ea:eb:
         04:96:f3:a7:66:67:66:b0:a3:57:00:99:2c:8e:d5:ef:f8:1f:
         30:5e:e1:8e:5d:42:ca:4d:e4:d8:f9:1a:9f:19:97:a2:c0:39:
         53:1d:c2:87:c0:2f:c6:bd:a4:cb:e0:05:27:ce:eb:c4:bf:d8:
         dc:92:74:4c:85:d7:75:47:23:df:87:d9:3f:ef:29:92:2a:a1:
         d0:c1:9d:b7:85:8c:8b:bb:43:04:23:56:2f:d8:23:6d:9f:44:
         03:78:ce:87:66:d6:ae:9d:65:08:c7:86:da:26:74:0b:de:dc:
         5e:e8:90:01:74:80:26:b9:8e:46:51:5c:09:13:2b:28:3d:6c:
         ba:c5:84:86:36:76:a4:e7:d4:fa:c5:8d:c1:71:75:47:cb:a5:
         14:69:3a:36:ca:2f:37:f0:9c:d0:e2:d9:a7:6e:7c:56:e8:47:
         3a:fd:f9:60:7c:80:8b:aa:f1:84:bb:58:a5:1a:19:3d:e8:5b:
         25:a0:96:87:79:7b:49:11:62:5d:52:c6:82:e9:f8:6a:cf:6d:
         82:8e:1f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:24:19 2026 by rpki-client