Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft
File:                     mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft (raw, json)
Hash identifier:          lBfAUm1pUfuPpr2/WBc8EcPDMm5hzPc5NhM8XZIcqkg=
Subject key identifier:   B8:2F:70:46:E0:C4:00:6E:B0:30:9F:7A:02:74:AE:32:C2:79:39:DA
Authority key identifier: 99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23
Certificate issuer:       /CN=A91E9EA9/serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23
Certificate serial:       0747
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft
Manifest number:          073A
Signing time:             Sun 18 Oct 2026 22:05:45 +0000
Manifest this update:     Sun 18 Oct 2026 22:05:45 +0000
Manifest next update:     Sun 25 Oct 2026 22:05:45 +0000
Files and hashes:         1: mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl (hash: 9sJNcDxXhZtOEj316yXtXQycJ/vHy0Bo0EYRSadeysk=)
                          2: C8D28C084D0D11F1BB69BE04B5833773.roa (hash: xIXzdhPfo53rwNh2Mlgu0y8PEjCEJhfEi2ZuL9DtaEc=)
                          3: 2CB68FE8943211F0B1116B74C4F9AE02.roa (hash: 3MyKsLacs+jSNFLg0g6siYMmeYjfiDOjgCzdQeB8N4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl
                          rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 22:05:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1863 (0x747)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9EA9, serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23
        Validity
            Not Before: Oct 18 22:05:45 2026 GMT
            Not After : Oct 25 22:05:45 2026 GMT
        Subject: CN=6ad542b9-d251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a0:54:24:3e:da:d9:f8:72:0d:89:1e:07:c7:
                    47:8c:7e:57:a1:fb:69:d9:b3:c3:28:7c:9e:c5:05:
                    58:a4:dd:20:b0:35:26:98:1b:56:e7:e9:02:b2:2c:
                    fc:be:3d:fd:7d:ed:34:a2:bf:46:4c:94:a4:51:d7:
                    31:cd:25:e8:ec:92:68:0e:03:16:94:95:1b:a5:61:
                    10:b4:20:cb:af:58:a4:3a:d8:76:09:88:7a:03:d7:
                    9c:5f:1b:61:6b:5b:64:8d:23:0a:79:22:b0:28:c4:
                    b2:4c:77:ea:07:ad:44:6a:78:85:38:c8:55:f8:d9:
                    c1:52:65:96:82:a0:b1:5c:a4:cb:fb:85:7e:30:02:
                    90:b3:d2:72:d5:e3:43:f6:cb:c8:68:e6:38:00:b8:
                    51:85:97:a8:1e:c9:0c:93:35:f7:fe:44:09:10:bc:
                    d0:d7:45:6c:03:6e:a6:71:16:c7:de:b7:97:45:5e:
                    a8:21:dd:0c:84:00:77:11:6d:0e:e1:0d:96:6c:eb:
                    50:35:90:e8:6b:a8:78:e3:6e:07:a6:2d:2f:ba:ba:
                    1c:e1:8d:d3:6b:39:e5:f4:39:d2:e5:50:cf:b7:60:
                    9a:d9:6f:d9:1a:eb:d8:73:6f:c0:ba:92:0c:79:33:
                    23:6d:2f:9b:d1:ce:ff:9e:1e:72:0f:bb:fe:8b:91:
                    04:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2F:70:46:E0:C4:00:6E:B0:30:9F:7A:02:74:AE:32:C2:79:39:DA
            X509v3 Authority Key Identifier:
                keyid:99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:39:d3:b8:46:26:80:af:d7:f0:30:56:40:cd:31:fc:aa:51:
         3d:10:ec:d3:54:fe:de:47:b7:96:c1:bb:64:3d:d1:5a:fa:e5:
         e0:5b:2f:84:84:32:9f:6a:53:83:c0:c4:f7:86:a8:cd:e8:b7:
         33:73:a7:56:84:df:0e:9c:e5:c6:b4:9c:32:b1:bf:9e:26:61:
         44:b1:13:df:99:36:18:de:e9:d2:5e:96:9d:5a:50:81:08:a4:
         da:dc:78:71:70:19:5b:7b:6b:46:2c:68:01:9c:c8:d4:49:35:
         40:cf:5e:18:21:a9:2c:2f:7d:2a:37:70:77:7f:cd:30:71:7e:
         f7:0c:9a:a5:07:05:a3:3c:3b:ef:ac:7e:00:50:f8:f0:66:38:
         a6:4b:64:11:c9:1d:64:f6:b6:3e:45:3c:75:23:72:3a:d9:b3:
         39:a6:a4:8c:df:91:42:b0:32:02:0d:4c:4b:4b:05:83:4f:39:
         19:a4:98:19:05:37:3d:81:31:12:fc:a6:e4:a7:66:fc:43:14:
         96:9a:49:57:15:8d:ac:f3:c4:d5:10:56:c5:d3:1d:50:14:27:
         df:0c:4c:c8:db:dc:51:30:a2:f5:53:09:25:4b:ef:21:b3:4c:
         82:98:58:2a:28:8a:6a:d5:a8:b8:a4:22:e1:8d:7a:da:20:ed:
         bd:d9:c6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:44:21 2026 by rpki-client