Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft
File:                     d4O93Owt-bn8-48Qm3PU95Shc4Y.mft (raw, json)
Hash identifier:          g1ftqqhg57ebS02L2H7IGeSPEVZmq3Y4lgt7b0p1Mro=
Subject key identifier:   A3:5D:2D:07:2C:F1:3B:A2:25:2F:4E:7B:E8:89:28:76:20:82:33:E0
Authority key identifier: 77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86
Certificate issuer:       /CN=A91EAD63/serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386
Certificate serial:       0318
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft
Manifest number:          0311
Signing time:             Sat 03 Oct 2026 01:24:31 +0000
Manifest this update:     Sat 03 Oct 2026 01:24:30 +0000
Manifest next update:     Sat 10 Oct 2026 01:24:30 +0000
Files and hashes:         1: d4O93Owt-bn8-48Qm3PU95Shc4Y.crl (hash: FTcix4zDsUDn5v46rum90ge8kLVSToJrLX3ifbTsUfo=)
                          2: 9BA13212344C11ED8F22CB70C4F9AE02.roa (hash: PeFV/oLu/csLft0iODoJnYJS2cAXlNVSsKTM91Ov3+8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl
                          rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 01:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 792 (0x318)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAD63, serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386
        Validity
            Not Before: Oct  3 01:24:30 2026 GMT
            Not After : Oct 10 01:24:30 2026 GMT
        Subject: CN=6ac0594f-fc8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:db:e5:57:c0:59:6c:e3:cb:9a:8f:ec:1f:71:
                    e3:87:91:99:1a:d4:9f:a9:a9:cf:1d:ec:f1:d2:bc:
                    ce:9e:e7:2d:ce:9f:6f:d3:a8:1b:1d:4c:a8:77:58:
                    ba:3e:96:2a:a2:bf:9f:d9:9b:79:f3:c5:d8:7e:b3:
                    eb:6d:9e:c3:c4:ea:af:a4:63:2a:8e:56:b1:89:3c:
                    5b:a6:3a:c8:eb:0e:f8:0e:85:4a:9b:d0:55:ef:8c:
                    ac:74:f0:dc:af:97:67:71:46:c8:3c:28:dd:69:bf:
                    40:63:58:57:9d:c2:9c:da:b0:11:a0:7a:f1:6c:c9:
                    e5:b8:8b:ac:9d:84:a3:33:26:53:69:ba:bf:c6:18:
                    5b:d6:b1:50:d9:24:cb:a2:e5:73:14:00:15:1c:b8:
                    a4:23:07:11:35:e7:0b:67:55:7a:1c:3a:37:08:7a:
                    34:2d:2b:5c:db:f0:01:e4:c8:e3:91:c5:7d:b9:5e:
                    71:64:75:43:ee:19:b2:63:c0:87:55:7d:31:6a:f2:
                    3d:7c:30:31:d3:fa:41:ba:43:00:85:8c:c7:14:c5:
                    9f:c9:a8:da:f2:ef:e8:93:80:77:b8:a1:30:06:fd:
                    2e:63:97:a2:6f:7d:89:63:1a:4a:03:15:d5:ed:d7:
                    24:29:d0:3e:e7:69:96:f4:56:4f:cb:e0:40:1c:55:
                    53:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5D:2D:07:2C:F1:3B:A2:25:2F:4E:7B:E8:89:28:76:20:82:33:E0
            X509v3 Authority Key Identifier:
                keyid:77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:4e:18:72:0a:3f:e9:c8:bb:62:11:70:4b:39:ef:99:fa:15:
         17:52:13:fc:33:36:6f:90:6a:7e:64:07:15:fe:76:a0:e3:8f:
         76:d3:98:b9:9f:30:1c:44:6d:91:12:57:31:96:36:9a:bf:af:
         34:52:f4:31:bf:78:b7:7d:d1:86:79:6f:9e:9b:a4:78:10:a8:
         33:1f:b0:b1:d0:b2:bb:d7:b8:28:70:bc:43:13:94:82:06:ad:
         48:1a:ed:8a:1f:0b:32:88:96:66:79:8f:08:2d:f3:ef:96:e4:
         01:89:2f:ff:55:33:a3:93:11:a7:27:4a:45:4c:7d:82:94:1b:
         e8:5d:0e:32:47:2c:0b:90:c8:7f:04:36:c6:cc:c0:37:74:12:
         8a:45:34:98:9b:e2:2a:c8:73:30:7b:95:ce:61:5a:c2:e2:8d:
         e4:71:47:1d:f4:c2:3a:7a:fd:4e:a4:b6:eb:9d:3e:44:24:c3:
         27:e2:7c:40:e2:98:5a:3e:8e:84:a5:5e:f4:09:fc:3c:16:34:
         81:67:d9:92:f9:7a:00:f6:ce:73:e6:b7:f1:bb:7c:17:c7:a0:
         1d:34:10:d1:e1:18:24:0b:17:02:7d:1b:a0:3f:9d:ce:95:92:
         3a:1b:13:44:5e:60:4d:f3:58:31:e2:df:b5:3e:d6:7a:f9:8e:
         06:d0:f5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:54:42 2026 by rpki-client