Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
File:                     rHyecYIsBWGFGGRT-WCywejKlOM.mft (raw, json)
Hash identifier:          SDR+8lDhjd1dG+GCU7lMC7TayBsUApFpo0H9liEPE34=
Subject key identifier:   EB:5C:0B:79:AD:FA:2A:DC:28:1A:F5:FE:EB:64:DA:2B:77:76:15:17
Authority key identifier: AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3
Certificate issuer:       /CN=A91F4BB3/serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3
Certificate serial:       0554
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
Manifest number:          0548
Signing time:             Sun 04 Oct 2026 23:30:37 +0000
Manifest this update:     Sun 04 Oct 2026 23:30:36 +0000
Manifest next update:     Sun 11 Oct 2026 23:30:36 +0000
Files and hashes:         1: rHyecYIsBWGFGGRT-WCywejKlOM.crl (hash: 4cIXShH20RoPj6fDKLxnp5SqfhRmvAld/vdTySa5SDw=)
                          2: AFDD7E16DA6011EC9A304C24C4F9AE02.roa (hash: 9xagtFPDPDh7sP5RKvooGHMvmH3Edj6QzRlAg2sHVUo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl
                          rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 23:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1364 (0x554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4BB3, serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3
        Validity
            Not Before: Oct  4 23:30:36 2026 GMT
            Not After : Oct 11 23:30:36 2026 GMT
        Subject: CN=6ac2e19d-4675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9a:33:fe:ed:2f:9f:c0:a3:2a:5f:d1:81:51:
                    1d:0b:36:5e:c5:6d:65:17:14:64:17:0b:e0:31:5f:
                    fa:66:b1:90:21:38:9f:76:dc:8d:bb:6b:b7:90:8b:
                    f7:92:43:f7:7d:09:3c:a2:70:27:4c:17:63:c3:5d:
                    47:5a:87:57:ff:d4:fd:04:e0:0a:68:dd:a1:12:c6:
                    36:92:fe:da:56:a3:15:bb:95:88:b9:4b:f6:3d:87:
                    57:6b:c4:f9:8f:9c:c0:9c:1b:59:d2:10:97:63:72:
                    b6:b6:fd:a9:8d:6e:82:fa:61:72:bd:d7:ac:ab:94:
                    f2:22:0d:11:37:8c:4a:db:38:78:90:25:3f:74:25:
                    d2:90:bf:49:46:56:35:29:ab:15:db:1b:4f:db:74:
                    3c:ee:ec:78:fa:5e:6c:ec:19:e9:2c:85:39:2a:62:
                    d3:f0:b2:d4:e6:c8:0c:90:55:a4:e8:d3:8e:a4:3e:
                    bd:14:78:03:2a:52:f3:6a:54:ec:cb:03:7b:08:1a:
                    82:22:b5:79:d6:12:64:04:a2:54:67:81:60:8f:27:
                    38:26:ae:64:66:e3:cf:c7:2b:54:da:77:c7:f7:29:
                    63:58:d0:66:15:aa:e9:86:92:42:3f:1c:fe:27:b5:
                    4c:94:e9:ac:66:ba:d8:b4:70:cb:81:29:0f:0a:9e:
                    a7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5C:0B:79:AD:FA:2A:DC:28:1A:F5:FE:EB:64:DA:2B:77:76:15:17
            X509v3 Authority Key Identifier:
                keyid:AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:6a:22:a5:7f:69:24:ed:d4:90:a4:70:22:f5:39:bb:bf:c0:
         d4:08:bc:63:89:b2:9f:11:45:ed:5f:d4:da:87:d3:ab:79:e6:
         96:9a:03:6e:9b:cf:ef:23:b1:49:77:0f:c5:35:44:93:90:47:
         f4:20:23:b2:bf:8e:b5:aa:ca:be:71:17:0e:a8:a6:fd:26:e6:
         7e:e1:fe:19:53:7a:39:99:cd:c2:5c:af:6f:f4:f8:fb:12:28:
         94:30:b8:77:34:23:fc:8b:c6:b6:cb:2e:c9:44:36:e4:09:3b:
         c8:69:33:ac:d6:e1:5a:50:6f:be:25:b4:e7:dc:97:08:71:bc:
         be:06:0e:f7:76:5e:e5:06:fe:61:77:c0:f4:ac:5f:e7:fc:46:
         92:03:86:33:a4:32:ac:5c:68:1f:c3:59:1c:84:e0:e0:6a:dc:
         4a:86:64:8e:69:af:f6:83:55:95:a5:33:21:c3:c9:58:0b:90:
         77:3e:b3:a1:db:bb:5b:58:21:a9:bd:27:75:8e:8e:a9:9f:9e:
         8c:51:d5:4f:74:48:73:b0:a4:9c:cc:cf:91:8d:44:62:f7:be:
         da:75:9d:9d:4c:0b:a5:61:15:80:ae:4d:07:90:4d:b2:f7:8a:
         d2:12:24:b4:1c:fe:8c:77:55:8d:20:1d:0c:6b:9f:e1:4d:f1:
         0f:98:6b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:04:09 2026 by rpki-client