Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft
File:                     aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft (raw, json)
Hash identifier:          GJ1TfKA9hwhHSutW0EAyUF041WgmpE7CoqmxkTq8Nk4=
Subject key identifier:   04:78:A9:BC:B9:38:47:75:B2:90:8A:84:A7:46:91:14:F6:B6:D7:F2
Authority key identifier: 68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56
Certificate issuer:       /CN=A91F231C/serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56
Certificate serial:       B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft
Manifest number:          AD
Signing time:             Mon 05 Oct 2026 07:34:48 +0000
Manifest this update:     Mon 05 Oct 2026 07:34:48 +0000
Manifest next update:     Mon 12 Oct 2026 07:34:48 +0000
Files and hashes:         1: aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl (hash: 0d7RhIVnJJUR/6TeedjYd4KdogNymeuuA62RW0d+1II=)
                          2: 7F29585EC43011F09039384AC4F9AE02.roa (hash: RzqxKvmQcOshBo/Ug1Mj842tyGjNfSYs0TkOvcUwxSs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl
                          rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 07:34:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F231C, serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56
        Validity
            Not Before: Oct  5 07:34:48 2026 GMT
            Not After : Oct 12 07:34:48 2026 GMT
        Subject: CN=6ac35318-351a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:05:d2:15:dc:38:c7:bc:3b:35:3b:55:3b:56:
                    bc:55:b5:f5:29:80:89:2d:f3:5b:67:30:97:8a:c7:
                    6f:76:1e:2b:78:2d:4f:67:84:8c:15:f3:ca:3b:c8:
                    20:a0:67:d1:98:ad:16:a6:66:ec:13:9e:58:8e:a6:
                    c6:d5:12:22:2f:8e:f5:51:27:a6:63:76:4f:b2:fd:
                    9a:f8:4a:af:fc:c9:c6:89:72:b4:58:5b:ae:04:e7:
                    bd:42:33:6f:85:76:c1:3d:fa:fb:dc:dc:64:f1:07:
                    4a:db:86:3f:0f:17:4f:7c:4e:e8:f8:be:b1:06:9a:
                    b0:26:ab:bb:bf:f0:1d:e8:e5:91:6c:cc:78:64:97:
                    9f:5a:7b:f1:40:56:96:47:80:3e:eb:bb:6b:30:e1:
                    29:61:41:92:12:d3:15:84:38:2f:11:7a:0c:a3:bd:
                    aa:dd:11:aa:8a:f7:3d:81:49:a1:34:1e:95:b0:bb:
                    09:3b:4a:a6:03:28:79:2b:c4:be:81:40:6d:09:97:
                    37:57:db:44:fc:cb:86:08:e4:d4:eb:c9:c8:65:77:
                    cd:26:cb:44:21:95:ef:e2:f4:50:41:93:a0:14:87:
                    d8:96:1e:e4:ac:be:09:37:b1:98:de:71:c7:b7:67:
                    02:6f:fa:22:c3:93:e2:d6:bc:39:04:93:d5:73:3a:
                    79:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:78:A9:BC:B9:38:47:75:B2:90:8A:84:A7:46:91:14:F6:B6:D7:F2
            X509v3 Authority Key Identifier:
                keyid:68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:cc:e6:af:77:e7:03:06:33:f4:da:48:1e:01:08:4a:36:b6:
         ef:cc:90:71:83:45:0d:a8:57:cb:1d:73:3f:6b:88:26:89:c0:
         e9:0b:e1:fc:95:54:62:a2:13:ce:a4:d8:7e:a6:bf:a6:d9:fb:
         87:2e:8b:b3:37:79:f2:bc:56:71:fd:cc:cb:94:99:2d:d8:d0:
         41:2a:75:ab:bf:06:dc:d8:65:83:9d:99:48:f0:f7:94:b1:71:
         cf:ff:9d:6c:52:b9:90:8c:39:15:d0:a0:12:89:42:c6:54:d3:
         da:85:d1:76:99:f2:5e:74:ab:f9:e2:65:bb:83:8a:6a:b5:50:
         0c:ed:4f:4b:ef:18:f9:70:1c:c3:1b:6a:22:1c:7c:17:c3:31:
         ca:9e:8b:8a:36:1c:e8:26:bf:3e:e5:65:39:89:38:65:91:f3:
         c7:c6:99:50:61:85:3b:72:b2:77:4f:f6:e9:7d:b1:fc:b7:fb:
         b5:a0:95:0f:aa:5a:b8:82:cc:ae:54:2e:82:1f:2a:d4:bb:09:
         74:9c:6b:a5:f0:dc:90:06:15:c1:82:14:99:ee:38:dc:dc:e7:
         b7:44:0a:18:da:f9:b8:b6:b4:6b:20:06:33:6b:fe:5f:ab:b3:
         23:90:f3:42:28:52:13:cd:d2:ff:a3:42:8c:48:e6:f2:11:d3:
         15:ef:9c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 13:31:36 2026 by rpki-client