Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.mft
File:                     8e0mdV_Ai9BZkZUyuPo6akg04_k.mft (raw, json)
Hash identifier:          gacURG123WzlJRI1d9EI24CGiMHpWUDQL+iL1kBxC0g=
Subject key identifier:   02:B5:54:59:19:17:CF:ED:79:88:2A:EE:86:CA:84:BF:34:DB:DF:09
Authority key identifier: F1:ED:26:75:5F:C0:8B:D0:59:91:95:32:B8:FA:3A:6A:48:34:E3:F9
Certificate issuer:       /CN=A91E6369/serialNumber=F1ED26755FC08BD059919532B8FA3A6A4834E3F9
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8e0mdV_Ai9BZkZUyuPo6akg04_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.mft
Manifest number:          85
Signing time:             Tue 27 Oct 2026 07:59:23 +0000
Manifest this update:     Tue 27 Oct 2026 07:59:22 +0000
Manifest next update:     Tue 03 Nov 2026 07:59:22 +0000
Files and hashes:         1: 8e0mdV_Ai9BZkZUyuPo6akg04_k.crl (hash: RBwhJ+MVZD2vfDKPVeHbHVUoYgGUVvSHpWft1kLy7L0=)
                          2: E0F26F840C7A11F1925E54691C3D8C67.roa (hash: I7EBb+YBXT8xgUhV3T13QqxJ9GRbIYd43OJn2AJIB9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.crl
                          rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8e0mdV_Ai9BZkZUyuPo6akg04_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 07:59:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6369, serialNumber=F1ED26755FC08BD059919532B8FA3A6A4834E3F9
        Validity
            Not Before: Oct 27 07:59:22 2026 GMT
            Not After : Nov  3 07:59:22 2026 GMT
        Subject: CN=6ae059db-575c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7a:b0:d7:32:aa:27:69:b5:2d:cb:d7:a9:7f:
                    fa:3d:44:f5:72:da:d8:97:63:61:f9:c4:0c:d2:0e:
                    b5:85:b5:23:ad:14:c1:fe:84:1b:c5:73:57:9b:dd:
                    2d:af:07:9b:8f:cd:94:4f:0c:47:74:e8:b1:2d:c2:
                    51:93:52:05:72:38:14:fb:ca:9d:13:9b:38:25:7b:
                    80:ac:1d:d3:0b:6f:10:22:74:c8:47:c8:6b:ef:f0:
                    44:69:0a:ea:69:3b:98:fa:d4:3d:01:d3:83:fa:6c:
                    e0:3c:d6:3f:bc:09:98:37:8d:6b:ba:2d:47:ca:69:
                    f4:74:77:c5:99:d0:ce:63:37:42:05:97:26:4c:2d:
                    fc:cd:d1:51:f7:c9:34:8d:34:46:aa:dd:f9:7c:a5:
                    85:5e:f4:88:c7:8f:f0:4c:c5:92:80:21:2a:c6:cb:
                    e9:c1:c8:71:64:34:10:4e:6d:46:06:4c:48:2f:ef:
                    b3:41:d0:fe:fa:16:39:92:1a:19:b0:4b:1d:37:75:
                    39:e5:6a:6a:e2:83:90:9c:4f:f1:da:be:9f:0b:80:
                    89:f9:09:9b:bc:d3:01:0e:4f:c5:b2:6a:7b:c7:53:
                    a8:fe:db:c5:28:63:f7:33:37:e6:8f:e0:34:bb:7d:
                    b6:e3:f2:c7:ba:f7:dd:3d:0e:03:fb:0c:74:cc:14:
                    fe:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B5:54:59:19:17:CF:ED:79:88:2A:EE:86:CA:84:BF:34:DB:DF:09
            X509v3 Authority Key Identifier:
                keyid:F1:ED:26:75:5F:C0:8B:D0:59:91:95:32:B8:FA:3A:6A:48:34:E3:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8e0mdV_Ai9BZkZUyuPo6akg04_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:2f:ce:09:bd:9a:e1:e1:3d:c1:00:14:b6:78:68:65:4d:32:
         ca:01:5b:02:5e:47:05:6f:28:22:cd:aa:15:49:98:de:86:44:
         f8:b0:3b:ab:ba:73:7d:14:db:89:97:63:20:72:4c:94:86:f4:
         2b:c9:d9:6a:db:51:c7:21:f5:31:6a:d9:6c:ca:70:f1:85:6d:
         be:cf:14:85:d5:4d:56:a6:0f:9d:1f:a1:b6:0d:9f:ab:8e:03:
         5a:f3:1c:73:e8:bc:e6:85:b6:48:af:2c:3c:8d:c3:76:01:9e:
         e2:39:10:83:6f:ba:d3:8a:8f:b1:46:e6:c4:a2:52:8c:1b:93:
         9e:65:92:fc:ec:4e:4f:c2:d7:9d:cd:46:ee:d0:4b:07:e2:69:
         f4:19:14:d0:b6:15:71:8e:bf:63:32:dc:25:d1:36:62:dc:a4:
         a3:f4:c6:e7:bf:3c:db:52:49:41:3d:62:b7:c4:86:1f:f8:d5:
         07:41:e0:40:dd:a9:16:c1:94:da:ed:fa:65:3a:78:a8:fa:0c:
         03:ae:dd:55:0e:17:32:18:10:bf:42:de:60:55:2f:77:bf:74:
         82:01:cd:08:54:86:42:1f:41:5d:5b:0a:14:fc:3a:6d:63:25:
         6e:37:cc:82:39:ea:82:41:0a:6c:44:ef:24:61:20:62:03:17:
         d9:00:75:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:55:13 2026 by rpki-client