Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft
File:                     L77sEYtTYT4VQvM__DYRjlYtRy4.mft (raw, json)
Hash identifier:          2clde/vIXYZJM0o4SHCBprUvDbVhu/OfUKUSyqYm1ec=
Subject key identifier:   EB:60:1D:03:C4:F2:CE:96:73:7D:18:CF:EA:29:31:CA:14:20:F2:F8
Authority key identifier: 2F:BE:EC:11:8B:53:61:3E:15:42:F3:3F:FC:36:11:8E:56:2D:47:2E
Certificate issuer:       /CN=A91E8556/serialNumber=2FBEEC118B53613E1542F33FFC36118E562D472E
Certificate serial:       9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft
Manifest number:          93
Signing time:             Tue 27 Oct 2026 07:58:19 +0000
Manifest this update:     Tue 27 Oct 2026 07:58:18 +0000
Manifest next update:     Tue 03 Nov 2026 07:58:18 +0000
Files and hashes:         1: L77sEYtTYT4VQvM__DYRjlYtRy4.crl (hash: Tj/gKe4UuHJrDHgwCYO6JzU90Jv0mRr+tSkAxfd+yZs=)
                          2: B9712F3A95FB11F1A9B800575611F970.roa (hash: x5BuCZTyVNZFBSc1/v493t+7C+Ef8YquC3PYrbla2xM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.crl
                          rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 07:58:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8556, serialNumber=2FBEEC118B53613E1542F33FFC36118E562D472E
        Validity
            Not Before: Oct 27 07:58:18 2026 GMT
            Not After : Nov  3 07:58:18 2026 GMT
        Subject: CN=6ae0599a-7214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4f:c1:0c:af:e4:18:4c:5d:1c:99:c7:c7:68:
                    ce:ef:92:ff:e0:e1:a2:c2:d6:4b:be:07:9d:14:39:
                    d1:ba:9b:af:23:df:0c:52:e2:96:76:ec:d2:9f:61:
                    fc:01:d1:c6:b3:33:ed:5b:98:ea:33:4b:e9:1a:4f:
                    d1:e6:16:f2:17:e4:2b:6f:a5:43:6d:6f:49:03:fb:
                    ac:14:74:e5:bc:6a:7f:84:18:d7:a8:dc:24:52:c9:
                    32:2c:32:cf:89:ad:f5:15:55:d5:d8:33:25:a1:5d:
                    08:27:d9:a4:c5:bf:88:9a:ec:21:64:44:d2:44:ba:
                    29:4e:04:8a:56:55:13:62:4d:9e:25:6e:cd:7b:7a:
                    89:d1:a5:4c:48:b5:fd:71:d8:38:f9:95:e5:ee:f3:
                    68:87:23:19:57:70:09:64:9f:5d:6a:b9:88:10:1f:
                    53:6c:dc:4b:dc:6c:09:14:75:8c:16:f1:4f:a7:7c:
                    9a:49:2c:63:a6:62:74:ba:f1:59:69:f7:5f:2f:42:
                    ef:a8:a4:47:c1:a7:b5:c9:fd:d9:49:bb:9c:db:17:
                    c3:e6:73:09:9d:d6:21:31:2f:76:9c:fa:fa:a6:79:
                    57:10:07:79:5d:72:da:fe:e6:f1:e4:19:f2:3b:d0:
                    bf:9a:dc:60:6d:8b:aa:be:84:5d:61:2a:4e:c5:41:
                    08:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:60:1D:03:C4:F2:CE:96:73:7D:18:CF:EA:29:31:CA:14:20:F2:F8
            X509v3 Authority Key Identifier:
                keyid:2F:BE:EC:11:8B:53:61:3E:15:42:F3:3F:FC:36:11:8E:56:2D:47:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:03:ad:a9:30:e0:d1:99:28:a8:f9:8d:9b:da:e3:11:d6:6b:
         1b:fd:f7:2e:4d:0e:ce:eb:b5:dc:7c:10:3c:af:01:01:11:bd:
         df:61:63:5c:69:db:e7:52:53:be:ee:dc:67:d5:03:81:ae:00:
         f7:78:9e:2e:4d:5f:51:f7:62:de:53:36:30:a8:2b:6c:f9:2f:
         b0:a8:60:24:37:01:bb:bc:17:36:fe:4a:4b:a0:7a:51:f8:f2:
         5c:9f:83:63:d7:61:44:0e:60:6a:4f:a0:b4:12:7b:ac:63:11:
         0a:ee:99:2c:44:a3:cb:b1:a9:e1:9b:2e:bb:59:53:5f:c0:80:
         c6:5f:9d:ae:cb:52:23:ec:ee:a5:88:e4:71:29:b1:47:d3:da:
         2e:68:2a:26:a5:eb:55:b3:c9:3d:e4:64:4b:68:18:83:ee:82:
         ad:5b:c1:55:09:f6:6d:d2:c9:62:5c:de:6b:2a:b8:81:4b:03:
         00:83:19:f2:ed:a0:ae:14:12:23:7a:c7:5a:e7:3d:92:b9:eb:
         c7:62:14:e0:45:54:91:44:a6:27:db:b5:f2:22:6b:ec:e8:02:
         b7:b9:78:d2:ea:8a:74:b0:fd:85:c9:ab:67:07:8d:67:43:30:
         02:a0:d7:87:c3:c9:bf:86:49:34:29:fa:07:4a:64:b2:50:58:
         f2:0e:10:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:34:38 2026 by rpki-client