Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
File:                     4mhztF-I0fXYg8F-TM9wokUWIUI.mft (raw, json)
Hash identifier:          PorubeK5uqcpohHpardf7cS4HP5YJcoFHrYrEjnQ3nA=
Subject key identifier:   6F:B1:5B:CA:83:4E:C0:01:83:32:4B:7D:04:4C:0F:33:4B:68:B6:14
Authority key identifier: E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42
Certificate issuer:       /CN=A91F4C6B/serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142
Certificate serial:       09E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
Manifest number:          09CE
Signing time:             Sat 24 Oct 2026 19:53:30 +0000
Manifest this update:     Sat 24 Oct 2026 19:53:30 +0000
Manifest next update:     Sat 31 Oct 2026 19:53:30 +0000
Files and hashes:         1: 4mhztF-I0fXYg8F-TM9wokUWIUI.crl (hash: IkvCSFLLMFIqAX67wo9UTiuwJVxW3Wl2LbsPT3aNeFQ=)
                          2: E146B994B51F11EA9146DD58C4F9AE02.roa (hash: GufOAmUmbBgvjXc0J89UeBy8dF93N+oEnJbdHPQ6yc0=)
                          3: 7A54F40C4F8911F18D85090792833773.roa (hash: o6p3iw3rhONzEiNetLEQUPFvD7H7C0JPmrzCOJSNgfM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl
                          rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 19:53:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2530 (0x9e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4C6B, serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142
        Validity
            Not Before: Oct 24 19:53:30 2026 GMT
            Not After : Oct 31 19:53:30 2026 GMT
        Subject: CN=6add0cba-4e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:82:4d:06:fa:78:ae:d1:87:fb:b0:7c:02:41:
                    18:4c:ee:e2:74:63:0a:b1:ea:0c:5e:1a:6b:25:53:
                    ee:a7:cf:47:40:21:b4:b7:0c:35:b7:ad:da:0f:7f:
                    09:c9:e8:dc:cc:11:1e:52:d6:de:22:0f:18:60:a9:
                    54:4f:86:9e:24:1b:3e:96:a3:10:7e:7c:42:61:cd:
                    0e:43:bd:d5:51:46:e3:91:91:56:4d:f9:d7:53:9e:
                    ad:8c:5b:f8:e3:95:03:0e:21:4f:8b:ef:71:f4:10:
                    f5:49:94:2d:20:78:39:dd:74:ab:62:19:da:ff:55:
                    71:60:c0:c2:5c:68:0d:7c:29:1a:b6:6a:01:20:40:
                    d3:e1:4e:ce:cc:46:44:5e:cd:45:b6:9a:f2:1d:0e:
                    ac:06:38:83:86:d4:04:94:70:42:63:2e:e6:12:d0:
                    55:6e:45:ba:e2:be:63:29:f9:52:08:17:5a:6e:41:
                    27:aa:e1:86:44:bb:02:45:5c:44:fd:4f:32:e4:69:
                    40:06:be:b9:ec:84:bc:e6:cc:aa:28:d8:c7:2f:86:
                    e3:2b:7a:4f:e2:b4:e6:bf:d2:d7:94:ed:37:23:ce:
                    f8:94:fd:94:61:ee:b2:71:aa:9d:3a:8f:6b:5e:f2:
                    43:09:96:8c:69:5d:44:f5:54:95:15:6f:a3:34:88:
                    05:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B1:5B:CA:83:4E:C0:01:83:32:4B:7D:04:4C:0F:33:4B:68:B6:14
            X509v3 Authority Key Identifier:
                keyid:E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:df:53:4f:77:66:40:73:90:fd:96:3c:20:89:44:8d:b2:1c:
         84:b1:82:c0:df:b7:e6:c6:6c:12:a7:d7:68:fb:93:be:01:b2:
         1c:61:87:44:30:0b:8f:23:60:a0:84:7f:55:9c:13:fa:26:69:
         12:19:68:bf:11:13:38:22:68:79:00:01:69:6b:1d:77:14:0e:
         fa:dc:c3:e7:e7:f1:a1:0f:58:50:e9:05:0d:e5:67:3b:5f:e5:
         ac:11:09:e5:20:c3:a5:2f:e8:6c:b1:04:24:06:fa:c9:11:ed:
         07:81:00:3c:1e:5f:f2:b0:3f:0c:36:a7:9c:31:9c:77:5a:70:
         dd:3e:a4:c5:1e:65:98:74:65:c9:08:d9:2c:8d:2a:87:fd:09:
         0f:42:8b:cc:fd:c5:39:9e:bc:2c:2d:b6:31:e0:f5:88:82:a2:
         ab:df:a6:ec:76:ee:60:49:a3:72:76:d4:e5:a7:3a:8b:32:e3:
         4b:67:3a:01:79:a3:44:ae:cf:a2:94:f2:3f:86:ee:80:f2:72:
         e1:97:66:bf:20:ed:cf:b3:7f:07:6e:a5:f6:fa:eb:67:96:a2:
         d1:f2:a1:81:2e:d0:87:92:2a:c0:a7:30:d7:86:2d:df:c9:bc:
         fb:01:0b:2b:28:e5:f8:73:a4:e7:40:0f:dc:14:f1:1d:1f:f5:
         ee:ef:64:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:51:53 2026 by rpki-client