Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft
File:                     CptpgbEtWk0t827p0oCmWVwyUTY.mft (raw, json)
Hash identifier:          M3I+sU0X0mng9Y71RbpgVvD0AD0HzQBkB5Ed1kWcQo4=
Subject key identifier:   1A:0E:C2:3C:AD:FA:F5:1C:3C:CC:C1:49:3D:D4:17:92:37:F3:F5:0F
Authority key identifier: 0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36
Certificate issuer:       /CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136
Certificate serial:       0BEC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft
Manifest number:          0BDC
Signing time:             Sat 24 Oct 2026 18:59:16 +0000
Manifest this update:     Sat 24 Oct 2026 18:59:15 +0000
Manifest next update:     Sat 31 Oct 2026 18:59:15 +0000
Files and hashes:         1: CptpgbEtWk0t827p0oCmWVwyUTY.crl (hash: XS6zicGtX7OFj0Xqsxv7JJliFiRdgD0BKdfbMJDLH+E=)
                          2: 2FC13F564ED511EA945E3314C4F9AE02.roa (hash: 4McE/O+QP2V8R9j++qZmwcXS2m87n+BBuLz8mpv2nxE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl
                          rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 18:59:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3052 (0xbec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAC82, serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136
        Validity
            Not Before: Oct 24 18:59:15 2026 GMT
            Not After : Oct 31 18:59:15 2026 GMT
        Subject: CN=6add0004-9a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:f6:b2:84:f2:e0:71:29:40:b4:6e:27:cf:f7:
                    22:8f:49:c8:cb:38:09:e3:c3:93:81:9e:1e:89:76:
                    a3:6b:76:32:3c:df:33:c8:28:83:df:55:01:b4:d6:
                    66:99:28:7d:93:76:78:56:a8:52:63:c6:fc:a5:f1:
                    81:cd:ed:17:1b:62:6d:49:5d:2e:67:6c:fa:d5:3c:
                    d8:16:f6:44:76:0d:9a:ab:6b:25:48:fc:f3:4f:20:
                    09:5c:b8:ad:e8:95:f9:53:04:84:81:b3:a5:c0:66:
                    d9:72:d7:d6:23:f2:69:c5:bc:2f:16:a1:6b:7c:43:
                    46:81:c9:32:90:40:fa:51:f5:5d:84:88:ae:34:e4:
                    fa:e8:2e:7a:44:b5:7e:be:e4:8a:d1:d6:2e:23:2a:
                    c0:b2:60:f5:c9:44:8c:e1:ea:2e:74:fe:83:b1:a5:
                    0f:34:03:ec:28:a7:98:b4:f9:49:3d:4e:9d:cd:61:
                    7a:20:42:c4:d3:5a:b7:88:09:07:45:75:18:2c:a9:
                    a6:63:33:09:9a:99:ef:7c:da:b1:23:12:68:d5:2b:
                    55:d5:51:3a:76:48:6f:4e:c8:ae:21:ac:06:fc:06:
                    1d:52:b2:f0:64:75:1c:20:ae:e8:1e:e1:25:8a:4f:
                    35:c9:1f:7d:b7:5e:41:b0:69:1a:03:39:3c:e4:cb:
                    85:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0E:C2:3C:AD:FA:F5:1C:3C:CC:C1:49:3D:D4:17:92:37:F3:F5:0F
            X509v3 Authority Key Identifier:
                keyid:0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:53:ce:84:f3:4d:ca:8e:ad:53:88:f2:63:ec:49:20:3f:f7:
         18:75:30:c4:dd:06:71:b9:74:c5:0c:03:21:ff:f0:1b:a6:d6:
         09:3b:35:54:93:7b:fe:5e:26:55:94:e5:a5:0c:1f:d3:6e:7f:
         63:d1:6a:86:bf:c2:13:65:24:67:a3:ab:28:05:30:fc:f2:61:
         b3:1c:29:6c:91:87:f7:80:9e:49:4a:ab:87:c3:eb:08:76:14:
         54:cc:fb:ad:42:24:e6:07:95:7e:4e:1d:5d:02:ea:79:f0:37:
         86:54:d4:cf:37:40:c5:7c:f7:4b:59:ff:7b:25:58:92:b5:9e:
         a4:d0:e1:99:b9:6a:a1:d0:57:e1:40:af:a0:d1:dd:e9:94:01:
         42:fe:13:89:ed:56:0d:03:59:6f:ae:b4:ca:af:57:f8:fc:d4:
         bb:2a:03:af:ed:c7:b6:af:f0:97:5d:b1:35:af:f1:b7:f8:db:
         be:f1:f6:e3:ca:ff:13:1b:f2:f2:53:b0:ca:f8:07:7c:cf:f7:
         8f:fd:1f:fe:5c:10:3b:ad:c5:50:cf:7f:77:da:a4:44:0b:95:
         66:df:d1:29:89:7c:23:47:2f:ae:b6:94:42:24:56:fb:4f:c3:
         ae:8d:aa:05:3e:52:74:13:21:48:3f:32:cc:90:9c:6d:48:f8:
         c7:86:57:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 04:33:14 2026 by rpki-client