Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft
File:                     hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft (raw, json)
Hash identifier:          X2BgMVwd55KQKE1fQVQiofUMbjiDFSwVW4JsPWFRBeQ=
Subject key identifier:   71:28:A5:F4:C6:8A:2E:D1:6C:B6:82:B7:E5:BD:0F:3A:84:A2:6C:92
Authority key identifier: 84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31
Certificate issuer:       /CN=A91F4091/serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931
Certificate serial:       01B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft
Manifest number:          01B6
Signing time:             Sat 03 Oct 2026 04:34:03 +0000
Manifest this update:     Sat 03 Oct 2026 04:34:02 +0000
Manifest next update:     Sat 10 Oct 2026 04:34:02 +0000
Files and hashes:         1: hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl (hash: +0YZ9qen+Zaym4NeIhYuK6ndAkd00Oi66Lv/J2c97iM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl
                          rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 04:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4091, serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931
        Validity
            Not Before: Oct  3 04:34:02 2026 GMT
            Not After : Oct 10 04:34:02 2026 GMT
        Subject: CN=6ac085bb-e504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b1:fa:54:9f:25:55:94:6e:67:4b:b7:00:94:
                    b2:ea:2b:ab:55:55:29:b9:87:d2:ff:2d:36:3e:50:
                    d7:d7:a3:eb:2a:5f:cb:db:52:8e:d8:bb:2f:55:a8:
                    9b:b9:20:0a:02:6e:0f:06:72:88:1f:15:f7:dc:f8:
                    7e:ce:cc:62:2f:ef:4f:30:6c:0a:af:3f:ba:1d:d2:
                    61:07:e0:11:a1:97:58:15:19:bd:e7:28:d2:72:5c:
                    73:55:7b:49:ab:c7:d5:f8:e4:68:0f:fd:8a:86:87:
                    bd:3c:9c:a3:75:29:9a:36:08:94:8f:24:22:eb:cd:
                    25:e4:4b:bf:4b:0b:69:e8:6e:4a:e3:4b:3f:68:ea:
                    7f:5c:e5:78:70:85:84:96:af:27:95:b3:e9:a3:52:
                    ee:2d:b7:8c:a5:c8:fb:17:12:3b:9c:a0:e9:da:01:
                    7a:8f:09:23:83:f2:92:32:db:60:b1:37:86:e4:ce:
                    6c:a2:3a:e4:7b:2f:a7:68:95:83:a2:95:16:f6:26:
                    35:04:0b:de:fb:8e:97:19:c8:54:15:48:c2:68:b2:
                    42:3b:6f:fd:e3:eb:3a:9e:4f:75:f6:d1:cd:ba:d5:
                    c6:fc:b5:fa:d9:38:ea:b3:af:a4:b0:e9:7c:f4:45:
                    00:97:8e:7a:ff:aa:ef:8e:9a:3e:4e:74:ca:72:d0:
                    d8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:28:A5:F4:C6:8A:2E:D1:6C:B6:82:B7:E5:BD:0F:3A:84:A2:6C:92
            X509v3 Authority Key Identifier:
                keyid:84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e6:d0:27:8a:78:7a:6d:ab:8e:07:4a:48:65:25:21:77:1b:
         d3:fa:43:02:8a:12:8a:41:d8:27:68:43:a3:8e:58:22:a1:e1:
         0c:32:46:0a:71:e1:f7:d6:22:d7:7e:18:bb:bc:32:d6:92:e1:
         9b:a2:53:a2:38:2e:06:da:3c:6b:df:f1:53:18:88:fc:6d:df:
         9f:a4:cc:e7:63:9f:9c:6a:e9:3b:70:6c:8b:63:35:31:59:b1:
         1f:af:54:e8:0c:77:10:6e:ba:4b:3a:59:ee:bb:a1:29:e2:80:
         8b:a7:70:e2:3f:3c:b9:bc:6a:2b:dc:57:9f:c7:ed:59:1d:6f:
         7d:da:2d:2e:b2:63:cc:01:ff:34:f8:e1:18:ac:50:ae:f4:e0:
         5d:c7:63:38:60:9c:d9:0a:7a:68:39:81:d8:3d:37:ad:c0:32:
         fc:6c:a3:dc:45:00:ed:c0:62:c0:72:a6:83:d9:3e:96:6d:76:
         cf:2e:93:59:4d:45:db:a3:67:0f:a0:c2:72:b7:00:50:ef:20:
         54:ee:bd:76:4c:15:e6:04:a4:61:d3:68:b8:0d:c8:e2:2d:99:
         37:88:95:b6:d6:93:b2:ca:1b:5f:56:9c:d2:3f:de:0c:39:35:
         17:da:ee:9a:2e:f9:26:7d:bf:fc:51:c8:67:a3:a7:8f:0b:f4:
         65:02:c3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:13:35 2026 by rpki-client