Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
File:                     MSRAIBsu90t8rGwx-4X0HpxGhqA.mft (raw, json)
Hash identifier:          3FDNzV6AoGGj8qhe09/C2AWnHYL9qHCnw53bgKKXGLo=
Subject key identifier:   84:E4:07:15:0A:E6:E9:B2:5B:4B:A4:01:87:1D:55:74:7E:E3:DD:91
Authority key identifier: 31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0
Certificate issuer:       /CN=A91EA80C/serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
Certificate serial:       0151
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
Manifest number:          0142
Signing time:             Tue 27 Oct 2026 05:53:27 +0000
Manifest this update:     Tue 27 Oct 2026 05:53:27 +0000
Manifest next update:     Tue 03 Nov 2026 05:53:27 +0000
Files and hashes:         1: MSRAIBsu90t8rGwx-4X0HpxGhqA.crl (hash: t8Af9aJEL4qImefAnkc8EqodN+1dl5sF+OJAvG2jteU=)
                          2: F5FC39B600F811F0BD702A69C4F9AE02.roa (hash: 4J8/FZ6Z4aWtn3x7hmcoO5/BToWEDFdORTF4LOMQboM=)
                          3: F14B18CE64C611F0A7F4DB79C4F9AE02.roa (hash: iEXGIsNYH311PJIgaH9OeoRGxcu7W7Wehcq1wxoUdGY=)
                          4: 2178DCD2FF3E11EF8D834053C4F9AE02.roa (hash: 4QP/rAbhyfXHecTQkzEPbUUKcaxecI63gYXrQwwXTlY=)
                          5: 070DB3BAFB6D11EFA5E39678C4F9AE02.roa (hash: 0YPbPYRmDBxvxeUZ+nCsDlhMinpUmdIW4GNWTG2+RDU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl
                          rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 05:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA80C, serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
        Validity
            Not Before: Oct 27 05:53:27 2026 GMT
            Not After : Nov  3 05:53:27 2026 GMT
        Subject: CN=6ae03c57-1cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6d:4a:18:bd:58:21:61:3d:44:2b:86:88:73:
                    40:7a:3c:1a:08:42:03:ec:dc:fb:fc:dd:cd:d6:fe:
                    2e:63:a8:7c:79:1a:d1:c2:c9:78:74:19:63:5e:b5:
                    32:2e:e1:a9:62:a9:f0:39:66:35:5c:a5:76:9b:52:
                    73:f9:bc:03:1a:c7:7b:fc:21:54:9c:75:43:fd:b7:
                    d2:7c:2a:f4:46:11:ca:d4:11:b1:a6:05:c9:1d:2b:
                    3c:40:d0:0f:88:79:4c:47:3d:16:30:34:3f:70:df:
                    c2:64:85:0f:f2:c8:0d:b0:74:53:f5:6d:ed:ab:e8:
                    75:41:36:72:11:aa:48:fe:54:b4:15:2a:2b:18:ac:
                    cf:e0:ef:fc:c7:05:29:06:43:ac:0c:65:76:4c:31:
                    15:97:fc:2e:eb:b3:6b:c9:41:13:c1:2e:30:bc:5f:
                    76:e4:7b:d0:ab:49:95:91:2c:68:de:46:cb:b9:2a:
                    38:ff:63:8e:61:69:a2:26:68:83:6e:66:fa:2e:df:
                    7c:f5:ab:44:b2:81:6b:50:87:43:82:b0:36:19:4d:
                    77:93:ac:54:84:67:35:79:8f:a6:bb:cc:cf:75:f3:
                    58:fc:6d:71:a6:96:78:d7:04:f3:93:16:71:e6:de:
                    54:c8:26:ae:0a:07:77:ac:db:11:cf:e0:16:f1:99:
                    9a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E4:07:15:0A:E6:E9:B2:5B:4B:A4:01:87:1D:55:74:7E:E3:DD:91
            X509v3 Authority Key Identifier:
                keyid:31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:fe:08:34:f5:78:15:8f:a4:c7:9f:71:dd:c5:f2:b9:3a:a1:
         e5:eb:a6:c2:64:2b:b6:d5:4c:f8:e3:e0:30:4f:43:5c:dd:6b:
         dd:8c:81:48:57:f5:c9:05:a4:ca:cf:28:12:4f:72:d7:b3:a7:
         57:a9:10:eb:70:0d:90:d2:e5:28:c7:82:65:3d:ed:8f:aa:9c:
         1a:5d:f2:59:0a:fd:49:3c:27:37:cd:f4:dc:50:8c:51:d8:71:
         81:fb:e2:dc:ed:ad:cb:8a:9e:d2:ad:7f:09:29:6e:3e:95:8f:
         43:a6:d6:7c:26:99:1b:fe:af:28:6a:2e:5e:06:0c:8c:4a:e2:
         58:35:5d:2f:ac:4f:7e:d9:ad:50:12:01:b4:fd:42:e0:72:38:
         98:8d:3f:3d:c8:3e:e6:71:3f:5a:df:28:e1:52:c8:f4:5e:6e:
         b1:3b:8b:20:3c:f8:24:17:d8:86:52:db:55:7d:cd:bc:c0:d8:
         6b:9a:10:8d:06:7e:a8:4f:3f:06:73:61:9a:21:b0:c5:f5:16:
         8d:97:ee:8f:7c:07:26:a7:e2:c8:12:4b:2d:26:a6:bd:c5:f9:
         b3:08:e5:de:35:4f:5a:d7:48:ea:13:8d:74:95:30:d5:b2:99:
         0f:09:56:b0:e8:20:a6:a3:4f:1c:5b:79:49:b9:a2:98:41:e4:
         22:82:2e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:24:27 2026 by rpki-client