Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft
File:                     755Sv59IZcr4eHrZXObeT2R2hA0.mft (raw, json)
Hash identifier:          +uuE0HWZL82HHQamauwnW8XwMJ6cfAcUkuvUOzE2wuw=
Subject key identifier:   4A:FF:AC:AD:59:BA:AC:1C:EC:EC:32:F6:0A:2C:6D:9D:52:33:3E:2D
Authority key identifier: EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D
Certificate issuer:       /CN=A91FCA4B/serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D
Certificate serial:       0B95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft
Manifest number:          0B85
Signing time:             Tue 06 Oct 2026 19:15:20 +0000
Manifest this update:     Tue 06 Oct 2026 19:15:20 +0000
Manifest next update:     Tue 13 Oct 2026 19:15:20 +0000
Files and hashes:         1: 755Sv59IZcr4eHrZXObeT2R2hA0.crl (hash: x/1bAxkd6L73smSztvwYilP/tAmlYBWCW2xpeD5FVgo=)
                          2: 9E1721445CFB11EAA377D527C4F9AE02.roa (hash: hyQjscEo1jj0I5lMXuv6OJ6RmMigRvuR1H8n5/+x76M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl
                          rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 19:15:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2965 (0xb95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCA4B, serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D
        Validity
            Not Before: Oct  6 19:15:20 2026 GMT
            Not After : Oct 13 19:15:20 2026 GMT
        Subject: CN=6ac548c8-9082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:cb:2a:d7:43:cc:d8:0b:d8:7c:a8:79:5b:fe:
                    2d:82:7d:f5:78:3b:d6:3b:ba:b8:62:56:5e:a3:cd:
                    83:d9:f7:01:11:a3:65:3c:73:c9:1a:30:f4:c1:1d:
                    da:63:de:56:79:3e:3d:b2:76:93:ac:88:39:7e:cf:
                    6e:36:9c:82:a0:40:9b:85:6e:65:94:9a:14:d1:6f:
                    db:de:90:9d:4e:50:79:95:7b:65:cc:43:a7:96:18:
                    8a:58:47:4f:3c:42:cc:ca:5e:b5:8a:9c:f9:16:26:
                    0f:a5:75:56:7d:ec:76:25:09:da:5f:be:85:c5:1d:
                    a9:fe:7e:ba:e9:6a:d8:3a:a7:c0:38:a6:37:8d:86:
                    27:17:20:e5:31:ef:b2:e3:45:ad:f2:37:67:a0:6a:
                    c2:96:56:a0:ab:29:7d:bb:3f:b1:e8:b8:cb:fa:13:
                    77:2e:33:2a:e6:55:6c:25:ff:57:4d:9a:64:77:23:
                    10:52:29:42:53:d5:cb:fe:d4:79:ff:c5:79:37:ae:
                    df:a1:9f:97:a8:bc:96:85:b7:42:63:99:1f:b0:0d:
                    42:29:60:a2:ee:4f:ca:97:95:c5:ae:f3:a6:f3:90:
                    05:19:d8:bf:18:ea:a8:f6:75:9a:48:ff:0f:9d:6e:
                    6f:12:c6:bc:66:07:37:e7:2c:c7:4a:b5:5d:e7:36:
                    38:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FF:AC:AD:59:BA:AC:1C:EC:EC:32:F6:0A:2C:6D:9D:52:33:3E:2D
            X509v3 Authority Key Identifier:
                keyid:EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:68:46:d0:fe:31:7a:6c:38:54:89:c5:0e:70:ee:80:0d:e7:
         cd:3b:c0:49:dd:69:6e:a9:d4:f5:11:bf:d8:b5:85:3d:f3:05:
         7b:f9:7b:1b:52:e7:a5:72:ac:0a:d7:7a:ea:13:78:49:5f:73:
         6a:b6:75:24:8c:62:b9:80:3b:5c:0a:95:9e:da:7f:93:c2:ea:
         a0:35:62:82:16:f3:85:c8:7a:68:99:2f:9e:52:17:a2:b5:ad:
         e4:3a:b0:69:d1:e2:2f:d4:bb:a2:9f:a1:68:73:69:b9:d1:42:
         0b:bb:65:0e:fb:23:b3:1e:1e:c1:47:af:69:2d:8e:b6:b4:d9:
         14:7c:be:c8:b4:eb:1e:19:c4:71:19:40:57:ed:14:7b:2c:71:
         f4:66:01:c6:67:37:db:d2:a6:1c:df:62:01:e7:d7:60:99:59:
         ee:44:fc:66:09:ba:bc:b1:88:83:8e:e3:00:3a:b7:4b:75:70:
         95:1a:02:ca:30:4b:56:53:18:46:c2:21:ee:14:ba:1e:a9:31:
         d7:6f:c8:ee:6a:b8:81:a2:50:56:40:4b:99:e9:41:31:7b:f8:
         e6:97:4e:5b:0c:16:e5:b3:59:7e:c8:0c:d9:de:e2:96:ef:be:
         ff:3e:2d:de:ac:ec:14:fb:9c:93:6a:f9:aa:d6:d7:26:15:d2:
         94:e6:2e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:57:59 2026 by rpki-client