Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F29DD/30BBA628B58D11F194D8DD3E6C11F970/78UG6JRNzO4_qk6fjwsoDFeg880.mft
File:                     78UG6JRNzO4_qk6fjwsoDFeg880.mft (raw, json)
Hash identifier:          WnlvFIslER3f/xZ0RCmM/Dce+/UPoX9yQw8H0ptPiWM=
Subject key identifier:   75:74:15:D7:56:BC:BE:65:8B:AD:AA:E7:54:70:2C:AB:B4:A6:01:DE
Authority key identifier: EF:C5:06:E8:94:4D:CC:EE:3F:AA:4E:9F:8F:0B:28:0C:57:A0:F3:CD
Certificate issuer:       /CN=A91F29DD/serialNumber=EFC506E8944DCCEE3FAA4E9F8F0B280C57A0F3CD
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78UG6JRNzO4_qk6fjwsoDFeg880.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F29DD/30BBA628B58D11F194D8DD3E6C11F970/78UG6JRNzO4_qk6fjwsoDFeg880.mft
Manifest number:          08
Signing time:             Sat 03 Oct 2026 09:58:20 +0000
Manifest this update:     Sat 03 Oct 2026 09:58:20 +0000
Manifest next update:     Sat 10 Oct 2026 09:58:20 +0000
Files and hashes:         1: 78UG6JRNzO4_qk6fjwsoDFeg880.crl (hash: F9coUA4o8IRzSj2hI/TfpiLHy2UmsHKevahMhh9jtgg=)
                          2: 2PpCQbD6BhxSmixpM6Ap4tGvIKs.asa (hash: qBVrVziK38z/Kn2MYIhisGwUzVP1dMdMqu39/KqQVoA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F29DD/30BBA628B58D11F194D8DD3E6C11F970/78UG6JRNzO4_qk6fjwsoDFeg880.crl
                          rsync://rpki.apnic.net/member_repository/A91F29DD/30BBA628B58D11F194D8DD3E6C11F970/78UG6JRNzO4_qk6fjwsoDFeg880.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78UG6JRNzO4_qk6fjwsoDFeg880.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:58:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F29DD, serialNumber=EFC506E8944DCCEE3FAA4E9F8F0B280C57A0F3CD
        Validity
            Not Before: Oct  3 09:58:20 2026 GMT
            Not After : Oct 10 09:58:20 2026 GMT
        Subject: CN=6ac0d1bc-87db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9a:4d:d9:bd:10:6e:ca:79:0d:fa:26:ef:68:
                    3b:d0:69:04:01:11:a8:37:c3:8e:70:e0:86:71:2f:
                    24:2b:9d:bc:7f:a2:70:2c:da:be:50:c3:67:f5:6e:
                    6b:16:be:2b:ed:97:ce:e0:48:17:96:44:da:c2:aa:
                    97:01:4f:bb:e7:11:96:0a:0e:c6:49:9e:47:30:47:
                    3f:a1:bd:75:7d:70:45:b1:47:11:86:df:36:bc:ed:
                    79:35:75:d3:06:07:b7:94:d3:fd:99:0e:6a:00:2b:
                    e6:5f:dc:e5:d4:31:70:d8:55:47:89:69:2f:ae:88:
                    97:a3:1a:af:f2:40:1f:97:de:c8:3b:f4:8a:90:8e:
                    f1:44:f1:4c:30:6c:b6:3e:32:d7:79:b0:1e:04:6c:
                    6d:47:f8:ff:c8:2f:e0:b4:e9:bb:b4:df:1c:05:7d:
                    92:00:c5:af:05:9a:62:b6:c7:74:2a:76:8d:93:4b:
                    0b:1c:da:80:94:4b:2f:61:2a:3a:f4:61:a8:f2:07:
                    76:de:0f:8f:32:0f:03:ce:27:49:b9:5b:9e:29:28:
                    ce:f9:9b:de:bb:31:58:a9:a7:fa:00:e1:7b:cd:7d:
                    8a:c6:6c:8c:9e:15:c1:02:c4:43:74:d1:e6:0a:40:
                    9d:92:46:cd:3a:cd:1a:81:86:ef:58:2e:d5:ce:da:
                    dd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:74:15:D7:56:BC:BE:65:8B:AD:AA:E7:54:70:2C:AB:B4:A6:01:DE
            X509v3 Authority Key Identifier:
                keyid:EF:C5:06:E8:94:4D:CC:EE:3F:AA:4E:9F:8F:0B:28:0C:57:A0:F3:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F29DD/30BBA628B58D11F194D8DD3E6C11F970/78UG6JRNzO4_qk6fjwsoDFeg880.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78UG6JRNzO4_qk6fjwsoDFeg880.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F29DD/30BBA628B58D11F194D8DD3E6C11F970/78UG6JRNzO4_qk6fjwsoDFeg880.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:60:5f:cc:ea:86:56:f9:e4:7d:31:2b:d4:2e:57:8b:54:d7:
         5f:8d:2a:4f:3a:b0:30:46:bf:d3:13:2a:a3:ac:1c:49:c9:40:
         14:48:85:63:aa:0f:93:74:a1:b8:70:02:0b:13:2d:7f:e9:a2:
         eb:88:70:d7:7b:67:b4:ca:3b:49:36:a2:fb:bb:68:0f:25:ef:
         87:e6:ae:c7:6c:76:3c:2f:86:d4:f8:e8:1f:6f:67:6b:2f:ac:
         76:7f:a5:ee:8f:da:d1:01:f4:60:c1:08:72:ab:9f:87:1b:93:
         79:0b:c8:26:de:10:61:70:85:a6:62:3c:fc:97:62:4a:41:6b:
         80:c7:ff:4f:23:39:bf:88:76:5a:c5:d8:5d:c8:cb:7b:fb:25:
         88:57:01:78:ab:b7:b2:b7:dc:e0:2e:42:10:80:47:0b:d7:44:
         10:0f:c9:8a:10:35:19:2f:a4:64:53:57:cc:3a:5c:6d:73:4b:
         69:67:3a:52:09:75:f9:ff:cc:82:99:ce:72:ed:68:24:77:c8:
         3c:f9:16:42:22:56:f1:d8:7a:7a:8a:23:fc:cd:bd:d3:1e:67:
         d0:5b:42:a2:88:07:d3:6e:d4:3c:fd:e2:5d:a3:03:df:7b:64:
         7a:a2:de:83:70:d7:31:40:4c:d3:ff:8f:3e:b0:fe:95:72:f5:
         60:e3:4d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:36:25 2026 by rpki-client