Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
File:                     q8dSj86PeUX0YPdSdIJB2tVnilo.mft (raw, json)
Hash identifier:          wf2A3wRmoBzwICrJxneLAiGI9RbLSa/6Ya1OChvMGb0=
Subject key identifier:   EE:2A:5D:C5:1E:87:86:FF:1F:A4:F6:D2:4B:D0:7C:87:01:61:86:20
Authority key identifier: AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A
Certificate issuer:       /CN=A91F367D/serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A
Certificate serial:       08AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
Manifest number:          08A4
Signing time:             Tue 06 Oct 2026 20:45:19 +0000
Manifest this update:     Tue 06 Oct 2026 20:45:19 +0000
Manifest next update:     Tue 13 Oct 2026 20:45:19 +0000
Files and hashes:         1: q8dSj86PeUX0YPdSdIJB2tVnilo.crl (hash: H6Q3zvfg7Ny+ryNG7fJ9OZx+x5aOXFjxGxc6YUAybtc=)
                          2: AC1CD860039511EBBE8C7F47C4F9AE02.roa (hash: qS1ZoDt2aNwKGyjoFIpFYDmjrousmLlYXDWuZSQ3NCA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl
                          rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 20:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2220 (0x8ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F367D, serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A
        Validity
            Not Before: Oct  6 20:45:19 2026 GMT
            Not After : Oct 13 20:45:19 2026 GMT
        Subject: CN=6ac55ddf-9934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:12:c7:00:9a:3e:c7:46:ac:e0:e5:46:7a:48:
                    c4:ca:5e:09:47:80:a1:c1:1f:71:94:07:db:8d:1b:
                    4b:df:5f:b0:3d:35:8b:a0:32:ae:1d:0b:46:6a:3e:
                    7e:7d:b1:1a:22:55:2d:66:62:60:cd:bf:a9:99:59:
                    7f:65:ef:32:58:54:69:de:c3:4d:9e:8b:95:92:5c:
                    54:9d:83:61:7e:c7:26:b1:02:75:af:8a:a5:e7:df:
                    35:f6:76:ff:fb:15:2c:62:e7:e1:c6:86:76:53:d2:
                    16:38:97:9b:b7:de:68:0b:bb:c0:62:d7:75:2f:21:
                    95:47:f2:fc:fd:44:e4:26:2a:56:bc:ea:73:06:75:
                    55:b4:27:af:c5:98:e3:56:1b:3f:9f:d2:fc:b5:4c:
                    e5:b6:1e:8a:b1:7a:d0:e1:a9:52:53:ca:99:58:80:
                    ed:14:85:cb:81:f0:f2:80:2b:8b:23:bb:1d:2a:e3:
                    b2:c3:26:0d:3a:7d:e5:ed:45:6e:07:83:31:39:a9:
                    22:da:be:55:d0:28:4e:e5:3f:ea:2e:f6:65:db:78:
                    0f:4c:b1:c1:3c:d0:f4:ce:70:9c:d8:10:6b:62:ac:
                    bf:73:3c:52:48:a8:cb:85:11:25:68:16:65:25:f9:
                    a6:de:27:bc:8c:39:da:5a:43:1f:3d:5f:3e:73:d7:
                    69:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2A:5D:C5:1E:87:86:FF:1F:A4:F6:D2:4B:D0:7C:87:01:61:86:20
            X509v3 Authority Key Identifier:
                keyid:AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a4:68:b0:a9:88:d5:72:2e:a3:84:6f:49:a2:c5:39:77:42:
         d0:d8:fc:68:4d:2a:72:84:f7:e9:89:23:cc:da:87:fe:16:cd:
         6e:97:ae:20:78:5c:67:3f:d0:8f:68:41:14:80:04:7a:2e:ee:
         91:2a:fe:b8:f7:03:b1:9e:b7:32:ec:34:a0:d8:fb:44:f1:19:
         df:be:d9:09:99:a5:f0:46:ab:6d:e8:e1:20:96:6a:31:f1:a3:
         d7:f9:d4:c4:3f:90:69:cc:9d:a4:08:53:67:c8:23:26:a6:14:
         d8:17:ef:0a:fb:15:02:9f:28:ee:6f:72:51:fe:4c:b1:57:6e:
         58:63:65:f9:c6:a9:85:e8:f9:ad:3d:e2:1d:1c:7f:5f:51:25:
         57:d8:ea:67:5e:6a:6a:40:43:b6:22:03:5f:79:f6:c1:2a:60:
         ca:fb:00:2c:aa:43:19:52:c8:28:30:26:6a:1b:ab:d4:46:35:
         fb:4f:bb:6f:00:c8:a4:e4:20:1e:71:e9:0d:8b:b2:26:57:0b:
         72:2a:3c:f1:4e:a1:09:f1:3a:75:62:ec:9f:f4:e1:8f:f4:1c:
         05:07:65:90:00:99:56:a0:6c:0e:cf:ea:d5:38:4e:0b:66:59:
         9a:d4:6f:7c:fe:fc:a6:9f:e7:2b:40:cf:1e:1c:40:76:26:22:
         cb:b3:4f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:57:48 2026 by rpki-client