Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
File:                     b2WgySJgsa2iMYeym6w76trAVmE.mft (raw, json)
Hash identifier:          SHqqtAfsJNVa7f8qTercKs7YntgH22XeyIzTI1EG+Qg=
Subject key identifier:   EA:CF:C3:9E:34:C3:70:7B:8C:F7:BA:83:CC:3F:88:20:F2:AA:A5:6E
Authority key identifier: 6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61
Certificate issuer:       /CN=A91EA449/serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661
Certificate serial:       01EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
Manifest number:          01DD
Signing time:             Sat 17 Oct 2026 04:20:11 +0000
Manifest this update:     Sat 17 Oct 2026 04:20:10 +0000
Manifest next update:     Sat 24 Oct 2026 04:20:10 +0000
Files and hashes:         1: b2WgySJgsa2iMYeym6w76trAVmE.crl (hash: zF2WzYf8rwIbcU1tN+OMGdl5I/WbsbaDdpnVB57tJDA=)
                          2: 84379068C1E611F1993DB6794311F970.roa (hash: uQXNcCVAMQkeoh/rRRGb7nsF0vdQP0xsvLHBlukdM1c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl
                          rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 04:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA449, serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661
        Validity
            Not Before: Oct 17 04:20:10 2026 GMT
            Not After : Oct 24 04:20:10 2026 GMT
        Subject: CN=6ad2f77b-c38a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:36:3f:0b:6f:59:fa:12:89:72:fe:3f:57:e4:
                    6c:58:d9:57:70:93:81:32:76:ff:82:95:a4:fe:e5:
                    c8:91:5f:66:60:e1:92:5d:34:45:4e:2a:eb:d2:25:
                    b8:67:93:af:56:bf:d7:34:74:d6:31:d1:96:a2:1b:
                    b4:9d:5c:b6:7c:6d:88:9c:b6:e6:30:ef:34:c4:5f:
                    16:1f:d1:24:93:70:6f:19:cb:4e:62:dc:78:cd:cd:
                    a5:b2:7c:ec:ca:5d:f1:17:ea:1e:9e:3d:42:52:a3:
                    91:8f:18:bd:e4:e2:62:98:1e:a7:a3:3f:fd:e4:f8:
                    3d:55:76:63:75:ce:d5:32:b0:b4:10:4c:f6:8f:ab:
                    e5:57:89:c8:7b:75:3d:a9:43:e8:49:73:60:cb:e2:
                    93:8e:cf:83:ed:41:fe:5d:cb:93:f2:3b:8b:54:54:
                    ce:f2:f9:29:62:a4:cc:a1:3c:8f:0f:af:36:d9:26:
                    43:b6:dc:37:05:f5:0d:e8:f1:c0:dc:31:a7:8e:e3:
                    90:f0:f0:9d:a2:ef:5c:c2:dc:57:6d:a4:34:a0:7b:
                    17:d6:d3:15:ff:71:9a:17:3b:5c:18:43:60:14:d1:
                    a3:37:0d:56:3e:72:22:a3:c5:6f:40:54:7b:ce:45:
                    84:a6:d7:7e:8e:33:5f:57:30:b1:5b:74:d8:08:9c:
                    15:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CF:C3:9E:34:C3:70:7B:8C:F7:BA:83:CC:3F:88:20:F2:AA:A5:6E
            X509v3 Authority Key Identifier:
                keyid:6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:fd:91:04:e5:60:9a:8e:94:6e:57:29:a3:1f:17:ed:51:02:
         da:af:b1:b6:f8:20:f5:8e:55:ce:e5:9a:01:d6:f3:0c:57:02:
         d3:91:40:ae:75:51:8b:42:bc:88:45:1e:fe:d0:e9:1a:f9:5e:
         28:8a:3e:cc:c7:b3:a8:b4:73:bc:df:76:98:aa:d3:f6:a2:ef:
         a6:63:a9:b9:8f:0c:22:e7:2a:54:c5:07:e2:07:f9:42:3d:f9:
         9e:49:0e:60:df:21:b0:37:81:2f:fe:b5:fe:2b:b8:20:bb:a3:
         17:22:30:52:fd:f3:a7:53:03:90:d0:bb:d2:9e:de:63:de:06:
         d7:c4:99:b9:a8:02:45:91:0c:78:5f:9e:ae:81:4f:9f:a3:ca:
         fc:a8:a2:62:77:2e:18:2f:32:7b:8f:d2:47:5d:36:7f:60:d0:
         56:91:a8:47:59:d9:b3:62:34:cc:13:1c:4b:67:0b:fa:54:76:
         63:10:7c:3e:0d:d1:a7:4d:5c:2c:13:ce:08:28:4b:f8:ae:bd:
         2d:fa:b3:ed:87:2d:25:f4:27:85:33:df:dd:4a:99:11:59:52:
         cb:c3:27:6a:2a:41:ef:cb:6b:8c:24:d5:09:5d:f5:62:00:9c:
         64:45:39:83:63:ce:43:f8:7d:43:8e:e2:3d:b8:60:40:e5:01:
         0f:95:5b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 21:48:32 2026 by rpki-client