Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
File:                     Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft (raw, json)
Hash identifier:          VNeKNMP60r5Xe4whTbYHnyJTN1E/wbwgnxZgdJNWd0I=
Subject key identifier:   ED:A4:65:E4:5C:7E:8D:14:3C:0D:AD:C0:DC:F6:6A:A4:49:0F:F0:30
Authority key identifier: 52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B
Certificate issuer:       /CN=A91F9C95/serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B
Certificate serial:       0CB6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
Manifest number:          0CAD
Signing time:             Sun 04 Oct 2026 18:38:00 +0000
Manifest this update:     Sun 04 Oct 2026 18:37:59 +0000
Manifest next update:     Sun 11 Oct 2026 18:37:59 +0000
Files and hashes:         1: Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl (hash: 1z0OVhw8Um+kGBHDULlgFGVbv8Da4dyXsS8N5xelgWc=)
                          2: C7F8C83C217311EA93A29F82C4F9AE02.roa (hash: zVKPBOvgf5ZBPV/BL1nd0Q/b/L3Ds0nzM2EgbZq2Spo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl
                          rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 18:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3254 (0xcb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9C95, serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B
        Validity
            Not Before: Oct  4 18:37:59 2026 GMT
            Not After : Oct 11 18:37:59 2026 GMT
        Subject: CN=6ac29d08-84f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:e5:81:28:18:fb:c6:94:7a:41:06:81:be:
                    c6:5a:ff:c8:d1:35:40:6e:ed:6d:21:27:67:36:0c:
                    53:52:05:06:35:4e:15:e0:bf:94:6f:a0:14:aa:94:
                    a9:63:93:cd:33:7b:3a:7f:58:35:a9:ce:37:67:66:
                    84:63:eb:4b:14:ee:b9:b5:63:d1:4e:31:9c:ba:d9:
                    52:fc:39:e2:b7:82:d8:d9:cf:76:ca:58:08:f2:09:
                    7f:64:9a:3e:c5:ef:09:8e:55:94:e7:49:92:18:78:
                    b8:aa:c5:fe:6d:28:cd:c8:35:70:a2:bb:6b:1b:e9:
                    9b:48:b6:f9:5c:14:2a:fc:b8:d4:d1:ae:74:fd:ba:
                    e7:f1:45:6b:96:8f:ff:71:06:f3:9a:fd:8e:64:dc:
                    4d:7b:19:8d:4c:5f:cd:0c:d9:2c:86:ad:e3:59:aa:
                    29:58:83:8e:36:71:58:0e:33:d8:9f:e4:0d:87:ed:
                    13:d5:60:90:4e:87:9c:b0:66:4a:7a:c3:ec:01:2b:
                    14:41:c5:ac:b6:f8:7d:4d:b6:07:b1:1d:0b:92:ac:
                    04:14:0d:d1:75:84:b9:09:cf:f2:32:5e:af:d9:40:
                    65:25:4a:67:80:c1:d5:27:b1:08:82:79:94:f3:ec:
                    d1:ba:a8:2c:1d:04:e7:41:dc:57:ae:e1:23:3c:c6:
                    ed:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A4:65:E4:5C:7E:8D:14:3C:0D:AD:C0:DC:F6:6A:A4:49:0F:F0:30
            X509v3 Authority Key Identifier:
                keyid:52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c5:f1:e9:c4:ba:31:43:fb:3f:30:bc:92:ce:80:2b:1d:8f:
         e3:fd:f7:67:c8:8d:38:7d:8c:b6:4f:7a:3e:18:1d:55:4f:db:
         94:7c:32:a1:16:01:f4:38:b5:35:0b:16:63:11:7a:41:26:33:
         0b:49:30:71:76:28:3a:80:80:c0:f3:72:b9:c7:79:5c:57:1b:
         a9:dc:5c:0a:26:d8:6c:4c:6b:7e:0c:b4:86:5f:c3:93:04:96:
         61:9a:ad:3a:dd:31:da:c7:46:e6:d4:6f:2a:49:9d:df:3d:7b:
         0b:e2:ed:30:6d:5a:a9:d4:9e:13:a1:cf:71:3c:09:b3:9f:2c:
         3c:13:44:b2:14:ac:52:7f:79:c3:9a:be:a3:db:76:31:8c:09:
         90:dd:31:64:f2:92:e8:86:ae:50:be:88:3f:e2:31:e1:ff:29:
         86:9c:12:2e:ec:58:4b:7b:8e:26:d1:3e:cb:65:13:93:5c:32:
         f4:38:80:b0:4b:da:19:8d:13:ff:3b:a6:5b:c4:a8:20:f1:03:
         04:03:33:c3:f7:b9:f3:be:a9:61:6f:b6:0c:6a:57:88:bd:12:
         d1:e8:fd:61:fa:85:15:d3:f5:46:98:84:f8:17:6f:2b:f9:11:
         88:67:98:29:4d:de:6a:88:06:40:04:6a:d6:2a:a1:ca:42:4f:
         70:90:3b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:33:11 2026 by rpki-client