Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4704/C1DF3626960A11F1AA0A4E315A11F970/svrjQ38F991IAtDgjybiDcu02qI.mft
File:                     svrjQ38F991IAtDgjybiDcu02qI.mft (raw, json)
Hash identifier:          Mc+ar+K/ZY1dbXnPw7xZ1O09zZNv4urX0H9Kwwyif1w=
Subject key identifier:   D6:D6:99:79:81:85:1D:2F:B0:BA:43:83:2A:3C:D3:FB:C6:2D:EF:8F
Authority key identifier: B2:FA:E3:43:7F:05:F7:DD:48:02:D0:E0:8F:26:E2:0D:CB:B4:DA:A2
Certificate issuer:       /CN=A91E4704/serialNumber=B2FAE3437F05F7DD4802D0E08F26E20DCBB4DAA2
Certificate serial:       1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svrjQ38F991IAtDgjybiDcu02qI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4704/C1DF3626960A11F1AA0A4E315A11F970/svrjQ38F991IAtDgjybiDcu02qI.mft
Manifest number:          1D
Signing time:             Sat 03 Oct 2026 09:40:41 +0000
Manifest this update:     Sat 03 Oct 2026 09:40:41 +0000
Manifest next update:     Sat 10 Oct 2026 09:40:41 +0000
Files and hashes:         1: svrjQ38F991IAtDgjybiDcu02qI.crl (hash: QFIBcq5XIRcrHfbJHaFu+WKtrNqIl6ef9d6p6Ce4iC0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4704/C1DF3626960A11F1AA0A4E315A11F970/svrjQ38F991IAtDgjybiDcu02qI.crl
                          rsync://rpki.apnic.net/member_repository/A91E4704/C1DF3626960A11F1AA0A4E315A11F970/svrjQ38F991IAtDgjybiDcu02qI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svrjQ38F991IAtDgjybiDcu02qI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:40:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4704, serialNumber=B2FAE3437F05F7DD4802D0E08F26E20DCBB4DAA2
        Validity
            Not Before: Oct  3 09:40:41 2026 GMT
            Not After : Oct 10 09:40:41 2026 GMT
        Subject: CN=6ac0cd99-4c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:93:f0:bd:72:e1:ea:25:33:2e:b5:c1:d0:d1:
                    32:fc:1d:71:7b:b9:41:fd:e7:87:d2:47:fc:f2:08:
                    33:84:cd:76:83:75:c1:bc:de:d5:e6:fa:9b:e6:c1:
                    20:e0:f4:57:13:ea:92:f0:de:36:35:59:f3:98:cc:
                    5e:fa:0c:ef:54:f2:5c:0e:d7:06:b9:c7:74:4d:d5:
                    4f:8d:bb:94:da:88:42:d7:08:7f:4e:91:24:95:3f:
                    8d:94:cc:86:93:b0:d0:72:1d:70:f5:e6:c4:be:f7:
                    1e:0c:86:b2:e9:8e:eb:8c:2b:0f:3a:41:b0:a3:ff:
                    95:00:27:8e:05:de:c6:26:9e:f7:aa:20:99:0a:6c:
                    ba:70:cb:88:00:34:b3:b6:cf:5c:67:33:12:4b:47:
                    7a:cd:ec:81:81:de:4e:a9:7c:3b:de:59:d7:99:38:
                    7d:19:af:c7:75:5f:61:29:2e:83:ec:e3:7a:91:06:
                    71:1b:24:b4:7c:44:35:a4:85:dd:72:88:f3:70:ae:
                    9e:7c:65:02:9c:a5:e3:b6:5f:e9:7e:cc:d9:e3:cb:
                    29:bf:4d:75:76:57:ef:5d:2f:73:64:21:47:b8:40:
                    a3:4e:33:a4:67:a5:48:53:9d:95:96:36:52:08:eb:
                    fe:92:b2:26:f1:64:a1:ba:fe:a2:97:84:6d:02:bf:
                    d8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D6:99:79:81:85:1D:2F:B0:BA:43:83:2A:3C:D3:FB:C6:2D:EF:8F
            X509v3 Authority Key Identifier:
                keyid:B2:FA:E3:43:7F:05:F7:DD:48:02:D0:E0:8F:26:E2:0D:CB:B4:DA:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4704/C1DF3626960A11F1AA0A4E315A11F970/svrjQ38F991IAtDgjybiDcu02qI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svrjQ38F991IAtDgjybiDcu02qI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4704/C1DF3626960A11F1AA0A4E315A11F970/svrjQ38F991IAtDgjybiDcu02qI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:48:94:f2:be:48:ca:18:a8:a0:9f:4d:74:1f:84:51:36:78:
         70:76:1d:46:19:b1:66:10:da:52:9e:aa:4e:c3:ed:6a:e0:2e:
         05:06:b9:e0:32:dd:65:b2:81:b9:13:2a:69:e1:48:7f:3c:85:
         1d:39:a1:8d:c1:3b:99:88:8e:25:ae:f2:60:0b:a2:cd:34:67:
         e3:bf:13:6d:6b:aa:08:18:df:fd:a2:37:64:97:cf:b0:6a:cf:
         72:31:fd:55:14:c3:98:91:54:61:89:a5:ed:c5:c5:d6:e0:98:
         e6:f8:1c:28:cd:08:38:90:49:3b:7e:5b:34:25:89:be:b3:4b:
         a0:52:46:60:24:3d:f6:8a:cd:9e:a5:cd:d9:b1:b0:a9:bd:c1:
         60:f5:05:ed:7b:b4:9c:45:27:c0:b8:a3:3b:94:52:61:cd:13:
         8a:5c:23:55:d7:81:43:23:85:4b:bd:41:d2:eb:c6:69:67:2f:
         97:75:62:a7:d0:d6:a9:b6:6a:d5:13:57:a7:30:80:58:4d:79:
         0c:db:be:fb:03:66:3b:0b:38:70:d7:ac:85:e5:6d:7e:17:9f:
         1d:89:71:b9:85:d5:df:79:2b:b5:48:30:3b:5c:f9:95:e6:ca:
         83:26:31:4c:ad:c3:d7:ff:1c:70:b9:78:38:ac:63:00:f5:98:
         9e:c8:da:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:47:27 2026 by rpki-client