Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft
File:                     1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft (raw, json)
Hash identifier:          wGo0iYlB4T0MZ5yS78Ck1BSLuU6Sa+LWMrUL2i85lqI=
Subject key identifier:   05:F7:E0:0E:38:40:D6:1F:34:7C:7A:BC:31:BA:D4:1E:C9:77:83:A5
Authority key identifier: D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21
Certificate issuer:       /CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421
Certificate serial:       01B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft
Manifest number:          01A4
Signing time:             Mon 05 Oct 2026 04:32:05 +0000
Manifest this update:     Mon 05 Oct 2026 04:32:05 +0000
Manifest next update:     Mon 12 Oct 2026 04:32:05 +0000
Files and hashes:         1: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl (hash: qvsf0KvygU4mAqZuxueZMV+QuhqvIu5EPZ8YzUgAUPY=)
                          2: 084D41C6407111EFB0944C40C4F9AE02.roa (hash: NxzkE3G6k7uKaBQgTyXi96jp5VcOIi/OIHejJcnWXxw=)
                          3: 08FDDCFC407111EFB0944C40C4F9AE02.roa (hash: Q2XsaXqT+eyCPXvxi8zIHiMKLLmA95KKZabuPQOI/bQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl
                          rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 04:32:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F495C, serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421
        Validity
            Not Before: Oct  5 04:32:05 2026 GMT
            Not After : Oct 12 04:32:05 2026 GMT
        Subject: CN=6ac32845-5951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ac:e3:0a:d0:a9:ff:36:6f:36:2d:d5:f0:ea:
                    82:32:46:01:c2:cc:f3:11:0e:5c:0d:d5:2c:ae:11:
                    5a:e2:fc:75:5b:a6:83:9c:8a:60:0d:f9:30:1d:af:
                    dd:2b:ff:92:36:ba:dc:68:77:be:5b:0a:85:65:4e:
                    c9:09:cd:fc:7a:25:5d:a9:e8:0f:57:d6:41:d1:5e:
                    4c:ad:54:f5:01:9b:1b:79:d1:ed:4d:32:2d:92:58:
                    51:4d:74:f9:a6:f5:5c:bd:af:12:f2:16:ec:fb:3c:
                    0f:53:61:f1:36:39:23:b9:55:ae:f8:65:80:8e:fb:
                    2a:f9:61:08:d5:3b:ce:08:eb:ec:be:1f:c1:af:67:
                    42:94:f4:c7:c9:b7:22:ff:d2:b1:e4:92:b8:92:12:
                    60:5f:81:87:f9:6c:da:38:2a:71:1c:11:7e:f5:15:
                    9b:2d:3e:b9:8c:ea:df:f1:df:30:b4:13:68:18:00:
                    a5:a2:03:63:62:20:73:a1:45:28:1d:38:d3:d8:39:
                    54:c4:2d:cc:a3:96:16:b2:6a:72:66:10:43:5e:f6:
                    6f:e4:0a:b3:95:12:a4:fc:1c:34:57:d6:b9:55:14:
                    0a:37:54:fc:74:e8:e9:61:d7:09:c5:d7:53:fd:0a:
                    c7:f2:eb:b0:8f:16:d7:67:45:3b:d1:23:ed:51:eb:
                    34:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F7:E0:0E:38:40:D6:1F:34:7C:7A:BC:31:BA:D4:1E:C9:77:83:A5
            X509v3 Authority Key Identifier:
                keyid:D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:b7:9b:72:24:a0:5a:cd:a1:9e:1a:05:6a:6a:63:f0:ee:a0:
         03:4a:f3:4d:0c:24:68:76:61:c3:e3:12:62:54:ac:64:2b:57:
         4c:54:b0:14:85:06:7f:ae:6c:d2:a4:e4:d2:82:c2:ed:f5:24:
         96:59:72:4b:d3:82:f5:2d:1f:f0:12:12:99:19:a1:0f:c9:67:
         80:e9:24:da:3a:a2:bf:2e:25:25:45:a0:08:b5:44:22:c0:c3:
         2a:a2:d8:7a:2a:de:26:c3:b9:4e:9a:03:32:dd:9e:c2:6b:2c:
         48:4a:aa:70:02:ea:43:40:51:9e:a9:b4:90:64:56:ef:30:93:
         44:03:67:56:b1:63:cf:91:6a:d5:11:9e:b1:a4:38:1a:cd:c6:
         73:bb:4b:9e:c8:dd:fa:a0:d2:11:c2:b8:55:b5:13:6b:a3:1b:
         38:6d:99:01:d5:96:27:be:a9:28:ed:6b:5d:7e:24:f2:56:71:
         73:70:e5:b2:9f:dd:24:73:48:66:75:c7:5c:50:eb:23:d8:a4:
         c7:3b:f1:b2:39:56:af:64:ce:cd:11:03:28:18:5b:34:e5:5d:
         2a:bc:00:da:08:f6:7b:7c:70:3c:54:18:1a:9b:cf:41:5e:6f:
         1b:05:c5:e4:22:f4:25:64:9e:1c:98:24:96:dc:d0:b6:83:4d:
         ac:fd:67:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 00:59:05 2026 by rpki-client