Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
File:                     h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft (raw, json)
Hash identifier:          Vl4U44vLjlc76cy4IBY9VnhDodONoO4kDa79yRL1D/I=
Subject key identifier:   69:D7:23:C9:D3:69:D4:51:4E:BD:AE:1F:34:28:B8:92:01:B5:68:1A
Authority key identifier: 87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C
Certificate issuer:       /CN=A91F65E4/serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C
Certificate serial:       161C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
Manifest number:          1607
Signing time:             Thu 08 Oct 2026 16:46:25 +0000
Manifest this update:     Thu 08 Oct 2026 16:46:25 +0000
Manifest next update:     Thu 15 Oct 2026 16:46:25 +0000
Files and hashes:         1: h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl (hash: al1GVvxz9NZOfaf8LR8POU+ppuzaNaPOTKTG8Bn0TCQ=)
                          2: F0326FAE4D0011E8A24EE324C4F9AE02.roa (hash: jueJlQIp/n088nFesAl2o/XwQiao4sKjxZsgZFyb2lM=)
                          3: 4A7E3036340811ED9D3D7620C4F9AE02.roa (hash: IPwUYf1i7UXpGfgy42YQLyz0KFiyyYobrDQbSdSHXgY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl
                          rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 16:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5660 (0x161c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F65E4, serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C
        Validity
            Not Before: Oct  8 16:46:25 2026 GMT
            Not After : Oct 15 16:46:25 2026 GMT
        Subject: CN=6ac7c8e1-4163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5d:8d:bd:9b:92:f6:4d:f4:a1:dd:0c:83:60:
                    66:55:e0:5d:d2:e4:c9:d7:11:da:db:61:67:2f:d9:
                    75:7f:0f:c4:6d:ff:62:f9:8b:10:30:b4:e0:81:cf:
                    aa:15:59:fd:c2:10:8a:74:25:3f:8c:4a:39:72:ac:
                    38:d7:f6:8c:37:43:33:66:6e:12:27:c1:9f:1e:53:
                    57:b4:d1:e3:6d:fd:3c:af:29:ac:a8:81:c3:aa:75:
                    c8:eb:43:21:3b:71:67:ac:40:d5:60:db:d7:a1:2f:
                    f5:55:31:25:dc:c2:b9:8a:2c:61:f1:cd:fa:21:3e:
                    11:b3:e4:2b:49:78:46:3e:87:0b:0a:b9:38:57:fd:
                    50:ff:59:77:67:c3:ab:d8:f4:bf:e8:10:c4:c7:bf:
                    4f:3e:cf:75:70:21:c4:c4:a9:85:2f:a4:15:b1:09:
                    ac:67:d3:da:ab:41:ea:36:9d:a4:82:0d:5c:cf:c5:
                    3c:3f:a7:77:93:03:e4:0e:d9:ac:8e:20:02:31:56:
                    cb:25:b0:ba:9a:a2:9a:41:a1:79:4d:55:03:d7:fa:
                    c1:b2:e0:b8:54:61:06:ad:5f:b3:a0:17:e3:99:b2:
                    2a:ca:fc:84:04:61:ed:d2:0f:e9:67:e5:cf:53:95:
                    4b:35:88:00:e4:bc:d7:c7:58:da:37:a4:5c:6c:87:
                    b5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D7:23:C9:D3:69:D4:51:4E:BD:AE:1F:34:28:B8:92:01:B5:68:1A
            X509v3 Authority Key Identifier:
                keyid:87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:07:d2:eb:f5:99:64:fa:08:33:ce:b3:cd:d6:7e:72:c5:51:
         ac:7a:89:02:cc:55:6d:77:e7:8b:a5:23:2e:59:ba:6f:97:aa:
         64:ca:a5:8a:f7:22:2a:2d:f2:b5:b0:56:e2:23:30:7a:5e:ce:
         bc:0f:42:e1:06:a4:01:df:a4:8c:63:d1:80:76:3d:d8:a9:7d:
         d8:9b:dc:ed:98:27:2c:d6:76:d1:35:3e:65:bb:fd:0a:dc:c6:
         b4:50:35:af:99:79:ea:0a:5c:2d:18:3d:d9:73:48:33:45:33:
         18:1e:34:1a:7a:7f:db:2a:5c:82:c5:b7:99:6e:89:6b:5e:df:
         8f:fc:6d:75:95:20:70:1b:c3:7b:93:0e:33:1e:f6:92:31:9d:
         db:5d:18:c3:4a:3c:fd:55:08:58:fb:b7:b9:50:7a:60:fc:5b:
         a1:31:c2:4b:fd:a6:24:7d:a6:45:93:f1:71:3c:39:3d:7d:51:
         79:93:3d:21:11:74:08:c5:41:fa:30:bd:cc:16:4a:77:2d:db:
         ec:34:d9:9d:9c:10:5c:d0:cf:b8:f9:bc:16:0f:b0:46:9a:bc:
         14:33:88:7c:5b:56:7a:91:6a:c3:fd:22:84:d3:e8:81:30:9c:
         7a:fb:4e:21:a4:bf:40:46:36:5c:da:a8:bf:a9:3f:be:2c:7c:
         b3:f3:06:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:45:25 2026 by rpki-client