Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
File:                     XOe82cbkE4HMCvkJkN2gNpOF5lU.mft (raw, json)
Hash identifier:          KmPr81QejHrt7gdG8Ui12WgGnydTUqbNIABnl5wKrQ8=
Subject key identifier:   56:2D:78:9E:4F:7F:49:04:56:B2:6A:6C:BF:49:51:DE:13:2A:E9:74
Authority key identifier: 5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55
Certificate issuer:       /CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655
Certificate serial:       0583
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
Manifest number:          056E
Signing time:             Thu 22 Oct 2026 23:25:35 +0000
Manifest this update:     Thu 22 Oct 2026 23:25:34 +0000
Manifest next update:     Thu 29 Oct 2026 23:25:34 +0000
Files and hashes:         1: XOe82cbkE4HMCvkJkN2gNpOF5lU.crl (hash: xaWLIhz3/Ze1LZeV/vZ/tWwJgkYt6XfMa/T3+TDM9sg=)
                          2: C71919900BEE11EDBB84E711C4F9AE02.roa (hash: kY65kJ7Z3Mu7QEVILrGdTmAvqTkSFv9BjhpNLh4YUPY=)
                          3: 10A8D0E263F611ECB344F979C4F9AE02.roa (hash: SmcwGq0dD9iTZhV8jdPLgAp8Fs3hII4+H1WFKJpXd7c=)
                          4: 11330A4663F611ECB344F979C4F9AE02.roa (hash: 3M+74bn/sA2p4TiZmfBp8pwqRm0NY6QA2mPOgZx57gA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl
                          rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 23:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1411 (0x583)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC3A8, serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655
        Validity
            Not Before: Oct 22 23:25:34 2026 GMT
            Not After : Oct 29 23:25:34 2026 GMT
        Subject: CN=6ada9b6f-128e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:be:78:a1:58:76:54:b8:b1:e6:71:5b:75:ae:
                    b0:50:77:94:f8:44:1e:ed:64:86:14:ed:86:b0:88:
                    f8:07:ce:c9:98:de:b7:af:f6:57:a5:ba:70:30:6e:
                    d1:b5:57:22:be:b1:30:94:ff:da:5f:24:2c:6c:1c:
                    b2:36:72:b3:1c:1c:f8:0e:9b:10:bd:cc:ac:ef:b1:
                    6a:be:21:d5:2a:74:ec:46:c1:6d:eb:5f:58:6a:e7:
                    4b:58:ff:3b:a2:d2:b7:82:70:79:0d:64:83:fc:f7:
                    c1:5b:5a:06:70:eb:13:5f:6e:e1:d0:cc:db:67:10:
                    04:67:71:7e:00:99:25:f7:f9:7c:7b:09:6b:9f:75:
                    b7:c8:1f:5d:30:4e:11:84:6d:2f:3d:3d:65:5b:49:
                    cd:74:5e:4d:e4:9a:d4:f8:b8:9d:f8:bc:c4:5f:99:
                    66:6a:f0:e5:35:9d:10:3f:81:2e:d0:a3:f2:54:bf:
                    a0:23:67:7b:f9:2f:18:d2:3b:f4:5d:bb:b6:0f:1c:
                    6e:c9:5d:93:85:59:93:47:83:de:b4:cb:58:de:db:
                    b9:07:02:70:a3:9d:39:55:ac:96:b3:0e:f8:d6:56:
                    27:86:26:72:f8:08:86:be:b8:ef:af:69:00:4f:0c:
                    6a:7d:48:92:eb:21:56:e0:36:fd:0f:f7:01:37:18:
                    ec:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2D:78:9E:4F:7F:49:04:56:B2:6A:6C:BF:49:51:DE:13:2A:E9:74
            X509v3 Authority Key Identifier:
                keyid:5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:01:a7:e1:87:1d:36:20:25:5f:28:ed:47:91:d3:42:7a:8c:
         c9:f4:0b:2b:0b:8c:29:4c:11:40:a5:6f:f0:d4:6e:62:23:7a:
         3a:a7:c0:38:d9:ad:93:7f:df:84:d7:a2:bc:52:7c:bd:bb:2b:
         f7:94:0c:76:b6:44:d1:9f:f3:08:0f:e1:af:0c:bd:26:57:92:
         e8:5f:2d:4e:70:8a:c4:7b:f9:e8:6a:bb:c7:63:5d:72:32:55:
         1f:79:1c:de:c3:c5:e2:55:04:85:fa:4e:f3:9e:27:78:4d:ff:
         4f:02:d8:31:06:74:e2:36:e4:51:73:e0:30:c1:6e:ca:e0:29:
         87:8c:bf:de:ab:71:d3:43:7f:9f:3d:d0:e7:51:5b:1d:3a:85:
         ba:69:5d:17:e1:10:6d:50:26:9c:7f:b7:b8:a5:11:d8:fb:06:
         de:63:42:dd:18:a4:29:a1:e5:1e:71:9f:2a:ef:1d:7d:07:4a:
         94:d4:60:48:7c:d5:15:14:22:90:c4:0a:f3:2e:1a:b6:b5:0a:
         69:fc:c7:87:c9:88:6f:38:23:b3:16:d7:94:45:c9:21:2a:9e:
         b7:64:74:fe:95:bf:dd:6a:14:15:23:d8:6b:f6:a4:a6:aa:af:
         c7:3b:1b:ee:37:ea:f3:37:e7:10:15:c8:83:65:0a:c2:b8:b3:
         74:15:af:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 21:57:19 2026 by rpki-client