Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.mft
File:                     74sS4pnzyE0UvzVyXwLdxQOxLgE.mft (raw, json)
Hash identifier:          /GDhHXQLQoJYcRxhMVkg52Xj76komsj6mqC/D/oiKR8=
Subject key identifier:   E2:9C:8F:14:7F:8B:E7:1E:55:C5:C7:F9:BD:25:81:D4:31:D6:92:E3
Authority key identifier: EF:8B:12:E2:99:F3:C8:4D:14:BF:35:72:5F:02:DD:C5:03:B1:2E:01
Certificate issuer:       /CN=A91EC978/serialNumber=EF8B12E299F3C84D14BF35725F02DDC503B12E01
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74sS4pnzyE0UvzVyXwLdxQOxLgE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.mft
Manifest number:          87
Signing time:             Fri 09 Oct 2026 08:25:24 +0000
Manifest this update:     Fri 09 Oct 2026 08:25:24 +0000
Manifest next update:     Fri 16 Oct 2026 08:25:24 +0000
Files and hashes:         1: 74sS4pnzyE0UvzVyXwLdxQOxLgE.crl (hash: Qn+WivmxrPDdG4VC2XtjDaQcHBxk3VJMjo/6oU+aSY8=)
                          2: F46C6AE2001311F1811932CE406F56BC.roa (hash: Y1FIeA5W1peYAHXFaaeSTulF7afuHq/zsNXpjJL0dG0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.crl
                          rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74sS4pnzyE0UvzVyXwLdxQOxLgE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 08:25:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC978, serialNumber=EF8B12E299F3C84D14BF35725F02DDC503B12E01
        Validity
            Not Before: Oct  9 08:25:24 2026 GMT
            Not After : Oct 16 08:25:24 2026 GMT
        Subject: CN=6ac8a4f4-b72a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:38:a5:0d:ca:b0:c7:7a:ea:f1:9e:72:30:df:
                    66:a5:f5:21:a2:a4:a3:b3:b5:0a:d3:d5:e3:b2:8e:
                    e4:9d:77:c3:28:1e:85:92:71:e4:8e:08:88:78:26:
                    17:49:01:31:2c:ad:37:bb:e1:6a:21:07:49:18:6d:
                    86:39:95:81:a5:cf:0d:43:be:04:d3:78:e2:8b:cb:
                    30:88:9e:38:2b:04:74:5e:83:76:62:64:41:72:e2:
                    25:8b:6c:bf:9e:95:a0:8c:bd:6b:14:49:c8:00:8d:
                    d5:0d:bb:cf:46:ec:90:e5:f7:7d:ef:60:a0:51:ba:
                    fb:1f:51:b2:65:90:b5:b2:16:43:82:08:80:c6:f2:
                    c0:73:4c:08:bf:a8:74:4f:0b:ee:7d:8c:8c:f1:6f:
                    dd:78:ee:19:09:bb:06:fe:89:20:9c:89:66:91:17:
                    dd:9d:3b:88:0b:ca:b6:c9:47:8d:2d:0f:b5:10:70:
                    9a:97:fa:1d:e2:c2:f8:6a:84:5c:c1:87:86:6c:a2:
                    de:a5:a5:df:a8:95:ad:23:4f:54:6d:70:79:85:f3:
                    18:f8:2d:6b:a0:29:5b:59:39:2b:df:52:31:82:a2:
                    9d:f0:5b:34:69:f1:4f:1b:40:88:e6:9d:5a:ae:2a:
                    38:07:be:18:ad:db:04:4b:9e:7a:1f:aa:46:35:09:
                    06:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9C:8F:14:7F:8B:E7:1E:55:C5:C7:F9:BD:25:81:D4:31:D6:92:E3
            X509v3 Authority Key Identifier:
                keyid:EF:8B:12:E2:99:F3:C8:4D:14:BF:35:72:5F:02:DD:C5:03:B1:2E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74sS4pnzyE0UvzVyXwLdxQOxLgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:a2:4f:1e:8e:f3:04:e7:2c:8b:7f:da:3c:af:5d:0a:9e:a3:
         d5:d4:08:96:a7:02:9c:18:4a:09:0a:0e:99:08:e4:bc:c6:86:
         1e:df:ba:7c:87:1b:23:85:02:97:91:34:b5:7c:59:4b:04:33:
         a5:9b:de:2d:81:d5:86:ab:86:19:33:e3:4e:c2:ef:26:2f:9c:
         b0:82:5c:c5:b6:93:19:c9:4e:2c:f2:cc:6c:57:7a:82:66:6f:
         79:b6:ac:c9:75:4c:d0:71:cd:98:a1:f7:04:4c:28:b0:c1:4d:
         d1:59:f0:b5:63:a2:72:87:bb:d7:13:3b:b9:54:53:8d:d6:dd:
         f2:55:4d:2d:07:75:e5:8e:22:a4:ca:47:dd:ac:84:12:54:78:
         a8:0a:a0:3a:96:ca:e9:ac:74:58:e0:e6:7f:3f:8a:64:62:4c:
         1d:d2:f4:2e:f9:85:81:8d:56:d4:67:8e:66:cf:cd:7f:e7:c7:
         e4:15:36:6e:1c:6d:8d:28:39:3b:a7:fb:23:96:ac:b7:58:d2:
         e4:6c:b3:e9:f9:80:0f:5f:17:15:fa:8a:69:76:25:85:bc:45:
         12:1e:04:a0:4b:10:03:3f:48:66:c3:be:ff:6c:61:26:24:7b:
         5f:e3:28:c4:7f:21:12:fa:63:be:52:80:ee:ec:cd:65:07:bf:
         c5:cf:5c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:31:03 2026 by rpki-client