Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft
File:                     4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft (raw, json)
Hash identifier:          sEZDpSRDev5n/+0geIGiHGoyqi2DSFp8uRVwmRuPUAk=
Subject key identifier:   02:D8:5B:40:60:3A:70:FA:B3:6C:41:99:1E:EC:60:84:C7:93:DC:ED
Authority key identifier: E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24
Certificate issuer:       /CN=A91E0CA1/serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624
Certificate serial:       0BC3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft
Manifest number:          0BBA
Signing time:             Thu 08 Oct 2026 19:09:46 +0000
Manifest this update:     Thu 08 Oct 2026 19:09:45 +0000
Manifest next update:     Thu 15 Oct 2026 19:09:45 +0000
Files and hashes:         1: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl (hash: tzKMlFEPJUtx3b/JkSbTcUyKqh3FWRnAtq3wVdzwojY=)
                          2: 29B9D5B8524111EABEF0A119C4F9AE02.roa (hash: a6wavOgKoP5md5rS3aTV8AwOSfSYTGywa/u0ciPrNLg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 19:09:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3011 (0xbc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0CA1, serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624
        Validity
            Not Before: Oct  8 19:09:45 2026 GMT
            Not After : Oct 15 19:09:45 2026 GMT
        Subject: CN=6ac7ea7a-4d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:5e:bf:3f:e4:f0:3f:1d:0f:34:ce:da:5c:54:
                    1b:d9:db:b3:04:81:4e:cf:6b:ca:04:2e:e9:df:56:
                    67:43:9d:fd:36:8d:79:b4:bd:73:be:de:89:49:1c:
                    f1:b2:04:d7:a6:ff:38:74:e5:4c:4b:b8:ca:12:44:
                    88:d3:b0:cb:f1:7c:9f:38:0e:1e:8d:56:85:66:95:
                    e3:ec:3d:d3:50:e6:94:c4:8f:ef:6c:48:35:43:d7:
                    33:dc:ef:1a:de:c6:11:00:46:45:45:a1:2b:6d:5b:
                    1b:1e:78:f3:d5:3f:8d:d8:b8:99:62:49:29:86:f5:
                    2c:7b:27:fc:f0:1c:b9:89:6e:40:14:ba:a7:23:37:
                    dd:d3:d0:08:a1:d1:c1:7f:c4:2b:b7:86:f4:d5:7e:
                    6a:a5:20:43:71:cc:bf:17:fb:40:46:61:89:f2:99:
                    ba:52:b8:8d:3b:9e:a4:17:b5:cf:c9:39:1b:8d:8d:
                    09:59:87:39:dd:d0:1b:7f:99:69:5a:a4:2e:45:03:
                    da:9a:36:9b:47:ad:a9:31:9e:b4:e3:b4:34:2e:77:
                    14:77:34:d6:db:4b:a9:dc:d0:6c:88:4a:3e:14:77:
                    76:e7:47:07:ef:32:b3:06:9f:79:4e:19:fd:20:e5:
                    57:1d:36:d4:51:8b:39:92:5c:41:41:8b:ec:1e:b8:
                    e7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D8:5B:40:60:3A:70:FA:B3:6C:41:99:1E:EC:60:84:C7:93:DC:ED
            X509v3 Authority Key Identifier:
                keyid:E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:3f:9c:fe:61:a4:10:fa:6a:3d:db:a2:92:e3:97:f5:75:3f:
         e7:d2:8d:c3:a8:9d:14:73:41:4a:95:a8:98:c1:1a:24:2a:01:
         ce:42:d2:63:f6:e4:7a:4e:0b:12:29:08:71:06:f2:3f:18:92:
         00:9c:aa:33:b7:07:b5:87:25:55:de:b7:08:74:59:6e:6b:02:
         e6:46:5c:a2:33:75:58:32:60:7c:82:21:a5:de:e7:a2:e2:47:
         6e:71:b5:76:53:49:7c:89:b7:15:7d:3c:f8:57:e4:7b:c3:14:
         39:34:7e:4b:fa:6c:fe:12:3b:de:cb:44:6d:5c:81:0c:c6:0c:
         da:6e:72:72:11:ae:28:63:51:c8:54:db:20:26:64:4b:d1:9f:
         0f:f9:67:67:26:09:88:45:54:c6:4e:fb:17:74:3a:e1:8e:9d:
         a9:7c:34:ac:4c:6c:61:af:71:f8:06:0f:1a:2c:4a:5b:66:ed:
         31:a4:47:c5:c0:f7:21:51:7b:ad:f2:8e:ae:d5:e2:74:3c:77:
         6c:17:06:f5:7f:a8:4a:f1:6e:46:d5:d0:26:34:50:9e:6e:4e:
         8c:fe:1f:48:46:ce:c9:3a:57:50:f5:5d:3f:84:ca:3b:2b:ca:
         cc:0e:99:3c:57:bf:0a:ca:76:d4:ed:a1:0e:b0:c4:ac:dc:6b:
         3a:0a:0b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:57:10 2026 by rpki-client