Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
File:                     aBiEwMdVflJu8rxNHlq8M2rif54.mft (raw, json)
Hash identifier:          qxfhi0PwZuVRWlRbTcD8Jeop57nbcJWhzlPctyJZ63o=
Subject key identifier:   95:5D:CF:90:AC:BA:AB:A3:CA:C3:B6:8E:9E:99:85:BE:DF:8D:E5:E0
Authority key identifier: 68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E
Certificate issuer:       /CN=A91F9605/serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E
Certificate serial:       0765
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
Manifest number:          075A
Signing time:             Tue 06 Oct 2026 21:56:38 +0000
Manifest this update:     Tue 06 Oct 2026 21:56:37 +0000
Manifest next update:     Tue 13 Oct 2026 21:56:37 +0000
Files and hashes:         1: aBiEwMdVflJu8rxNHlq8M2rif54.crl (hash: 7tVYmO1v+dKTDUketQiMkLjIHlEh19fgcbQw2uZ/kLI=)
                          2: 9BC411EEA03F11F094CBF530C4F9AE02.roa (hash: KELxgiLDTZhlXFvFngFOfFbDFqtdPbkXc16UcXa81Vo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl
                          rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 21:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1893 (0x765)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9605, serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E
        Validity
            Not Before: Oct  6 21:56:37 2026 GMT
            Not After : Oct 13 21:56:37 2026 GMT
        Subject: CN=6ac56e96-34db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:fa:3c:f3:7c:fe:3e:1f:50:21:3c:89:15:5c:
                    ec:46:01:f1:85:80:9c:4d:71:2e:cc:8c:c5:b1:e9:
                    57:33:57:38:c0:2f:5e:64:ac:4c:69:f2:63:bc:aa:
                    f9:9b:c5:99:89:46:7c:61:a2:09:a6:a9:b6:61:24:
                    1c:6c:a1:69:21:c0:cc:09:9a:7e:11:28:43:de:58:
                    67:e3:1d:68:98:10:19:93:e8:db:88:5a:61:4e:6e:
                    41:28:ee:a1:63:25:9a:ca:90:03:1c:f9:67:b4:3d:
                    41:18:f8:99:4b:bd:e6:59:98:00:f6:25:8d:30:e9:
                    03:df:34:f6:fd:e6:c6:ba:83:ea:ba:f0:2f:80:69:
                    cd:35:40:22:75:82:c0:04:55:c4:ea:2a:10:b4:97:
                    4d:bb:c0:8f:a4:ee:86:52:4e:39:d7:23:69:7e:61:
                    20:c6:b7:70:ee:fc:86:4c:75:50:33:21:f7:df:51:
                    82:fa:80:d2:ed:90:bd:3f:7b:cb:4b:88:33:0a:50:
                    29:7d:3c:bc:c5:7b:27:d4:ee:26:c6:96:cd:c8:49:
                    76:7c:bc:fb:a1:98:0c:b0:a2:65:d5:d6:90:9f:35:
                    4d:88:d7:11:e0:1e:76:b2:80:1f:11:df:fd:c5:40:
                    e5:4d:cc:c7:24:7e:f1:64:8b:8c:4d:fd:42:83:89:
                    c6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5D:CF:90:AC:BA:AB:A3:CA:C3:B6:8E:9E:99:85:BE:DF:8D:E5:E0
            X509v3 Authority Key Identifier:
                keyid:68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:21:00:5d:09:6a:b8:74:d8:b0:04:fe:d9:0e:a2:6e:bd:c4:
         76:ec:a5:be:41:a1:06:a8:c4:d1:9d:44:6a:3e:fe:a9:da:71:
         46:b3:6b:9c:47:20:99:bb:57:bd:2c:84:0c:d7:71:1c:13:f1:
         52:60:85:2e:7c:f5:b6:4d:0e:79:05:ea:bb:fc:6d:c7:11:c3:
         86:8b:cd:b1:4a:a5:ba:0a:8b:c9:bd:4d:0f:b8:f9:0c:6f:e8:
         e0:e1:38:5e:37:bd:05:f5:78:af:a7:3a:38:2a:a8:f6:e9:58:
         27:1d:c3:7d:3e:0f:42:9c:44:78:0d:ec:f5:67:c3:bc:76:31:
         28:21:d3:ed:77:b3:d4:6a:1e:8d:c9:05:fe:2d:2a:f9:0f:32:
         e8:da:31:71:73:e5:89:be:04:69:9e:08:62:cf:41:0e:c2:23:
         b7:61:8f:4c:42:79:ed:e0:37:ba:f3:b7:16:25:31:bf:82:b6:
         92:62:b5:19:60:46:e1:3e:bb:47:24:15:cf:31:c9:1b:7d:a2:
         e8:7c:b8:c4:02:a8:6a:d6:1f:ce:7f:a8:a0:7d:59:7e:a8:d7:
         b4:2e:af:6d:9d:04:2a:a9:aa:00:aa:96:cf:9f:52:dc:56:a9:
         81:6b:bb:2c:dc:4e:a9:3c:65:6b:dc:47:4a:0a:29:26:25:47:
         eb:89:26:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:26:47 2026 by rpki-client