Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.mft
File:                     AWua7YGMT9MEeU6yQtiz5WdlpUU.mft (raw, json)
Hash identifier:          yt/00nXUj9ds3P00SviN5Os7IEcwftjcOP2c9dr5VsE=
Subject key identifier:   1F:55:BB:F4:8B:BF:B2:40:B3:1B:6C:11:89:AC:9E:AA:49:5F:00:7A
Authority key identifier: 01:6B:9A:ED:81:8C:4F:D3:04:79:4E:B2:42:D8:B3:E5:67:65:A5:45
Certificate issuer:       /CN=A91F53E8/serialNumber=016B9AED818C4FD304794EB242D8B3E56765A545
Certificate serial:       3D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AWua7YGMT9MEeU6yQtiz5WdlpUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.mft
Manifest number:          36
Signing time:             Sat 17 Oct 2026 09:26:17 +0000
Manifest this update:     Sat 17 Oct 2026 09:26:16 +0000
Manifest next update:     Sat 24 Oct 2026 09:26:16 +0000
Files and hashes:         1: AWua7YGMT9MEeU6yQtiz5WdlpUU.crl (hash: CBURfdRnebhJL3jR79h2Tb1Ir1tzd8UEcgTt72B8eSo=)
                          2: ECDD26C485F411F18488A9A174A30FBC.roa (hash: VW4iL+otXl2aCZSt2+vQ6u30LJgxp5dtKkbiclHRg5w=)
                          3: E9B1F1B8A91811F18EC286413C11F970.roa (hash: wImMWO9pGivt+ncg4d/fuAa6GL2v48XaohUBkLie4ao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.crl
                          rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AWua7YGMT9MEeU6yQtiz5WdlpUU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 09:26:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F53E8, serialNumber=016B9AED818C4FD304794EB242D8B3E56765A545
        Validity
            Not Before: Oct 17 09:26:16 2026 GMT
            Not After : Oct 24 09:26:16 2026 GMT
        Subject: CN=6ad33f39-03ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dc:32:03:fa:b4:db:1a:37:0a:88:9d:b7:3f:
                    82:ad:7c:2d:2b:c5:58:ce:69:97:68:8b:2d:b4:d7:
                    37:c9:25:c9:38:13:42:87:ae:c6:2b:b4:ea:3c:93:
                    8e:41:bf:f6:18:8b:80:02:5f:44:be:4b:d1:6c:f9:
                    3e:ae:d1:3d:18:bf:76:78:e8:c5:6d:b6:59:22:4d:
                    fe:e8:41:c6:9f:14:9d:89:08:ee:3e:c9:16:26:25:
                    27:6c:f8:90:db:46:cf:e7:6c:8b:f7:5f:ab:98:4d:
                    59:cb:d7:1e:b9:e6:87:f1:ee:19:ea:f1:a9:69:b8:
                    d3:30:86:a2:5b:a1:59:e2:c7:c0:3e:e1:a9:1f:66:
                    15:83:a1:ff:16:df:b9:7f:3c:9d:10:64:1b:67:ab:
                    55:85:97:b6:2a:c7:8c:6e:ef:ff:be:61:c1:9b:83:
                    c4:3f:d1:c8:61:22:a0:a5:c0:c6:38:50:c0:9a:51:
                    16:fa:78:3b:24:80:2e:1a:84:a8:0f:37:68:a6:06:
                    e3:9e:8c:b0:3e:4c:40:e5:85:72:eb:b9:af:28:91:
                    08:d8:c1:de:aa:d9:50:c9:f0:f4:35:a3:8e:1a:cb:
                    25:d1:0e:90:2c:6c:96:1e:49:bd:ab:47:6c:74:7b:
                    66:c5:41:33:e3:26:18:04:ad:56:83:2d:6d:73:13:
                    2f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:55:BB:F4:8B:BF:B2:40:B3:1B:6C:11:89:AC:9E:AA:49:5F:00:7A
            X509v3 Authority Key Identifier:
                keyid:01:6B:9A:ED:81:8C:4F:D3:04:79:4E:B2:42:D8:B3:E5:67:65:A5:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AWua7YGMT9MEeU6yQtiz5WdlpUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c4:12:9a:09:25:58:12:19:a0:77:04:30:dc:79:fc:4e:2d:
         f5:c6:3c:10:b9:99:25:68:ed:49:ce:1d:fd:90:44:db:2c:35:
         2a:52:f9:0a:d6:91:3b:3c:78:b3:21:45:28:ef:28:e2:4f:52:
         60:36:6d:43:2f:f7:c8:cd:da:16:a2:f0:9b:ed:ff:4f:f6:41:
         14:ea:86:98:17:1b:56:ab:80:c0:2f:cc:cc:d7:11:a8:ae:f7:
         36:62:3e:80:1f:ba:02:7c:7d:1b:f0:1c:ef:0a:5a:86:1c:f1:
         ae:31:11:d0:9a:43:bd:e0:33:8d:87:f1:23:05:9b:3b:ed:b1:
         b2:15:39:c7:1e:02:fa:73:48:25:49:2e:58:25:b2:fe:9c:2a:
         2c:82:d4:07:78:d5:37:d2:25:0a:09:d7:70:6b:27:89:a7:e5:
         5c:c9:7f:23:96:40:25:e5:5f:29:ec:37:37:86:4e:d0:01:f1:
         c5:d6:f4:fe:1d:08:83:a5:35:a2:1c:7a:13:f2:0c:55:78:17:
         fb:35:b7:24:f8:d5:e4:d1:c7:bc:15:8b:d1:bc:4a:9b:e9:db:
         a3:81:9e:56:8d:93:33:70:3f:f8:fc:69:a5:15:21:5d:cd:03:
         e2:23:4e:1f:2e:d2:09:45:74:66:7f:2a:f1:5c:18:d8:78:50:
         26:11:b0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 10:55:41 2026 by rpki-client