Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
File:                     rI34tAewexNnm3HFASus3eJQHnE.mft (raw, json)
Hash identifier:          Y8JmRU2hla7DeRCMs4dKqOPomdmlNjVZDXAkQFOmrSc=
Subject key identifier:   11:68:11:A1:A9:2B:AD:D5:D2:1B:EC:17:89:46:A2:97:E8:52:36:17
Authority key identifier: AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71
Certificate issuer:       /CN=A91FC43D/serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71
Certificate serial:       23B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
Manifest number:          239D
Signing time:             Tue 06 Oct 2026 15:49:44 +0000
Manifest this update:     Tue 06 Oct 2026 15:49:43 +0000
Manifest next update:     Tue 13 Oct 2026 15:49:43 +0000
Files and hashes:         1: rI34tAewexNnm3HFASus3eJQHnE.crl (hash: P9ulX+Hn4feqc46h1kg8ZJarpDeCJc0kZNI3AVdH+vY=)
                          2: 2D55F42CB0F611E5B464E359C4F9AE02.roa (hash: s8TTg9P3l8A2JinlhgnrgySiNnwBKzYcLgd2CwnP9lU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl
                          rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 15:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9136 (0x23b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC43D, serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71
        Validity
            Not Before: Oct  6 15:49:43 2026 GMT
            Not After : Oct 13 15:49:43 2026 GMT
        Subject: CN=6ac51898-347f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:87:44:d9:0d:01:84:3f:eb:8e:4f:46:34:22:
                    f6:fb:2c:96:b6:ab:6c:61:c0:4d:39:9b:93:93:30:
                    5a:01:55:16:eb:80:bd:84:f8:a6:71:82:5f:69:d8:
                    6e:5c:b3:35:f2:89:d9:6b:5b:d9:ae:9e:f9:28:13:
                    85:1a:6b:33:e0:fa:8c:b5:2f:5d:b4:33:0e:6b:3c:
                    75:ea:22:41:c0:ba:20:e6:44:54:5f:ab:45:2f:86:
                    70:af:57:e2:5a:84:8b:64:f7:65:f1:f9:e6:f6:40:
                    07:b2:ca:dc:f6:bb:cc:70:06:b8:38:2b:1d:3f:70:
                    b2:1f:e2:da:13:14:b1:9e:a0:a1:ac:63:61:d9:e9:
                    d0:dd:0c:a0:b8:98:97:0a:e6:33:21:54:65:b3:9d:
                    54:15:15:2c:cd:95:39:9e:84:66:0f:b6:fb:5e:d0:
                    67:32:91:b6:34:ea:0d:37:fd:39:c7:83:fb:d0:d4:
                    de:11:58:71:39:14:d7:e4:40:86:30:8e:a5:d8:df:
                    3d:7f:65:92:30:65:30:ae:33:95:9c:48:1c:9f:e8:
                    33:25:c7:1a:05:8d:f1:a9:64:bd:a6:5d:3b:dc:e1:
                    e5:4b:e1:5d:2e:f4:51:bb:e6:60:25:c9:24:c8:8a:
                    5b:f3:7d:ad:05:94:f5:c6:98:b7:45:d5:de:81:1e:
                    08:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:68:11:A1:A9:2B:AD:D5:D2:1B:EC:17:89:46:A2:97:E8:52:36:17
            X509v3 Authority Key Identifier:
                keyid:AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:22:ec:c9:55:46:f7:3a:40:6a:ca:45:81:1b:9a:59:a5:86:
         05:55:68:97:7f:6b:54:8a:82:54:1b:ca:60:83:94:fe:c6:4d:
         20:13:fd:9c:6c:f9:bb:11:32:9d:72:01:5b:16:6a:1e:50:80:
         d3:28:57:43:b7:ab:9e:99:86:d0:b3:56:67:ef:a0:33:3c:28:
         05:62:32:75:04:15:10:41:52:fa:98:de:c4:46:34:d3:e8:7b:
         4d:8b:f1:0d:fe:68:a1:18:74:3e:63:8d:72:c6:bd:b0:c4:b4:
         d0:07:5d:06:18:cd:c9:d9:9c:ad:b7:15:9a:54:d7:a9:51:84:
         ae:63:01:b2:f3:c7:05:34:eb:04:cc:e7:f3:a0:bc:68:24:11:
         47:cb:b3:03:5a:7f:44:cc:72:2f:fa:3e:44:7f:4e:19:43:8e:
         b7:9f:b1:d5:59:6f:5a:cc:72:66:30:05:61:b0:6c:d0:cf:41:
         91:a1:42:70:9a:60:04:91:dd:71:ca:18:e2:7c:3c:10:17:f7:
         f9:e4:b9:bb:28:5b:e3:28:2c:46:d7:cb:a6:38:03:07:2b:a9:
         58:c1:d8:35:22:2e:09:75:96:9c:60:ac:4c:cb:f7:ae:06:f5:
         88:18:64:26:a0:88:55:f0:62:41:d4:c1:b4:73:d3:2f:08:1c:
         62:e8:b6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:13:53 2026 by rpki-client