Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft
File:                     RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft (raw, json)
Hash identifier:          /NvzucObf9PqOPeEO+zIOF2cFwDN0ndppErsGtCHMto=
Subject key identifier:   DE:A9:F6:11:87:D0:1B:9C:FF:1B:6F:8D:56:5C:CA:49:63:04:DE:85
Authority key identifier: 45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E
Certificate issuer:       /CN=A91EE92F/serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E
Certificate serial:       0192
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft
Manifest number:          018A
Signing time:             Mon 19 Oct 2026 05:08:38 +0000
Manifest this update:     Mon 19 Oct 2026 05:08:37 +0000
Manifest next update:     Mon 26 Oct 2026 05:08:37 +0000
Files and hashes:         1: RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl (hash: flJCHwmym81SACnTxV6JzQg/4WbP9SjfiKlcVo5PPzQ=)
                          2: 2DFD4A1E740C11EFB881CE37C4F9AE02.roa (hash: IInDuG92MgBM/R/1sWNASwByUg/xqTFX5MGgVtF2hko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl
                          rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 05:08:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE92F, serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E
        Validity
            Not Before: Oct 19 05:08:37 2026 GMT
            Not After : Oct 26 05:08:37 2026 GMT
        Subject: CN=6ad5a5d6-cc80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:28:99:ec:4b:1b:9b:e7:ab:f2:9f:00:f2:21:
                    9e:53:e1:b5:de:fd:d3:da:54:a9:95:aa:31:38:2a:
                    1f:4f:6c:c1:4d:90:50:d0:0c:16:bd:16:ad:ed:17:
                    3a:ee:24:60:8d:5e:d2:9b:03:ec:25:0f:24:3a:0b:
                    e7:49:04:ec:ef:ba:bd:d8:fe:b9:dc:6c:9b:e9:84:
                    53:71:b8:23:61:e2:60:72:c9:92:8a:0e:1a:c9:04:
                    ff:30:f2:7d:38:c9:5a:82:0f:92:5e:24:17:16:36:
                    aa:3a:9b:5a:eb:8c:7d:30:03:06:d9:b4:f6:a8:2f:
                    0c:a0:60:20:34:1a:58:3a:b3:f1:ff:c1:93:30:5a:
                    99:79:4a:77:97:9d:9d:01:67:81:5d:c1:f0:81:99:
                    8d:9d:6b:a2:0e:2f:e6:19:b8:26:65:b9:22:81:02:
                    d5:8e:98:45:d4:18:f9:f6:62:3f:b6:93:c5:05:05:
                    d8:e2:07:82:e3:fb:f1:b7:bd:20:2e:b3:c6:3e:b5:
                    cb:67:49:f4:d3:a4:94:da:3b:5e:4f:96:2c:28:b0:
                    16:2f:e7:65:f9:d1:93:b5:19:f2:e3:e3:1e:73:17:
                    5c:97:a9:74:40:08:7f:45:71:d5:ed:15:86:70:8b:
                    a8:cb:ed:87:ca:0a:87:db:ca:0f:9f:b4:c7:2a:7e:
                    20:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A9:F6:11:87:D0:1B:9C:FF:1B:6F:8D:56:5C:CA:49:63:04:DE:85
            X509v3 Authority Key Identifier:
                keyid:45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:9b:59:41:1a:52:74:30:bf:55:09:67:63:1e:34:0a:66:0a:
         e6:0f:5f:95:90:38:3e:38:8f:20:9b:16:b3:e6:fa:9a:ae:5d:
         39:f0:92:15:3c:3f:6e:6a:f3:7b:ff:9d:0f:a8:35:db:ef:66:
         89:9a:8c:ca:31:11:06:a2:14:d1:a1:38:44:a9:c5:22:43:04:
         30:c1:1b:e9:72:78:8c:4c:92:3b:6e:f3:d5:c5:d3:c4:6d:df:
         c3:0e:37:8b:aa:0e:75:76:c8:37:2c:11:f0:c4:66:c8:de:dd:
         c9:fc:2e:e7:17:c9:af:0e:eb:85:e8:5f:46:50:45:d4:f0:47:
         6a:2e:c8:d7:a7:6f:fe:ba:bf:63:a9:57:33:62:01:e9:02:69:
         d1:ad:f1:83:81:ca:50:db:22:70:55:fa:a3:11:0e:cf:3f:96:
         2a:67:c4:20:ca:9c:c3:e3:a7:d8:4c:c9:f3:9d:c0:9e:9b:0a:
         86:bc:80:17:68:1a:8d:db:d4:ee:56:05:58:0e:45:bf:9c:6f:
         1d:70:b3:e7:98:57:71:8e:19:7e:ff:bf:20:ba:be:5a:71:ce:
         78:4f:a2:3e:93:25:3c:fa:a9:74:e4:61:63:5f:9b:2f:3f:30:
         69:90:83:82:ce:eb:19:6e:f0:06:0e:f2:be:27:7a:c2:54:d1:
         cd:de:f2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:59:12 2026 by rpki-client