Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft
File:                     sE3Hq0gjM4kMKKdlddit5kKcP8s.mft (raw, json)
Hash identifier:          uir1y8vxRGdRAMX6A78SWfzAQxfBS7Snz4d6Ce4yDpw=
Subject key identifier:   DE:3E:A9:AE:7F:A3:D3:96:1B:8B:6B:16:B0:CD:35:BE:55:23:CB:02
Authority key identifier: B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB
Certificate issuer:       /CN=A91FFBAF/serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB
Certificate serial:       BA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft
Manifest number:          B6
Signing time:             Sun 01 Nov 2026 08:05:08 +0000
Manifest this update:     Sun 01 Nov 2026 08:05:07 +0000
Manifest next update:     Sun 08 Nov 2026 08:05:07 +0000
Files and hashes:         1: sE3Hq0gjM4kMKKdlddit5kKcP8s.crl (hash: hvBbo6Xsar74NeprBqj6B2AtXtzU6rz/vG6EF6xL4Ro=)
                          2: F29881C82D2811F19656BE60B9833773.roa (hash: j49xZ/pNE+6bd9Li6teEM+llvM2db9Ji2DZmBv8OAyg=)
                          3: 961A909E2D2811F181F3AA41B9833773.roa (hash: dYzmlzKtC22HQCzv3r68DO5+DJnISkpljTZWCe4Wn+k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl
                          rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Nov 2026 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFBAF, serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB
        Validity
            Not Before: Nov  1 08:05:07 2026 GMT
            Not After : Nov  8 08:05:07 2026 GMT
        Subject: CN=6ae6f2b4-63ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f5:54:f5:e9:f5:69:23:49:57:32:0c:45:42:
                    08:4f:97:39:b0:ee:ce:76:b1:4d:60:d0:21:69:0e:
                    73:56:a5:5b:1c:e2:a9:70:2d:69:d6:d6:e8:28:9c:
                    6a:a1:c7:15:d7:f1:16:3b:65:83:f0:a4:f9:52:0c:
                    24:86:78:dc:e6:6f:7c:f2:75:7c:92:1a:e9:00:05:
                    f3:05:e0:21:49:30:cc:0c:4f:1b:e8:99:12:dd:d8:
                    ba:7d:b3:0d:38:fc:68:09:fb:dd:e2:51:73:98:5b:
                    e6:57:29:51:28:d3:92:fc:fb:ff:e4:55:14:15:f2:
                    15:75:90:cf:54:ad:a1:3f:5d:68:0b:1d:3d:dd:13:
                    f7:dd:fc:86:37:fd:b4:04:2f:98:6e:ea:f6:d6:54:
                    4a:14:02:b3:e7:ad:9a:90:1f:03:15:e0:f1:ba:c9:
                    a2:42:28:26:6b:77:30:d9:f0:ed:de:5e:ee:41:e5:
                    c0:c8:09:d6:f7:1c:96:fb:dd:7d:2d:7a:d7:d1:aa:
                    66:24:e0:c9:8f:8c:67:ef:d5:56:d8:69:93:44:01:
                    14:aa:c0:10:66:da:46:d0:89:25:9a:f2:6a:19:8f:
                    f5:3c:ed:71:5e:0f:79:c7:3e:a3:45:a6:d1:7b:7c:
                    5d:f6:f9:e2:76:aa:26:e5:4f:d1:2f:99:d3:5b:9a:
                    f4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3E:A9:AE:7F:A3:D3:96:1B:8B:6B:16:B0:CD:35:BE:55:23:CB:02
            X509v3 Authority Key Identifier:
                keyid:B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:8c:46:d4:e3:b0:cd:40:c3:62:b8:a0:3c:0d:fa:07:f0:b9:
         97:20:27:41:06:99:9c:f3:d8:04:22:1c:13:6d:58:47:bc:29:
         d9:33:e5:23:17:f5:ef:c1:ea:c9:0e:fc:9b:f0:12:d7:34:cd:
         06:ac:96:d6:bf:b6:36:cc:65:79:a1:da:e0:90:ae:61:39:90:
         09:96:41:8c:4e:fb:4d:78:95:66:bf:52:f0:2e:65:4d:11:cd:
         a8:d3:b1:cc:28:ff:cd:99:66:45:6e:f5:91:af:8e:04:01:b2:
         11:0c:2b:0f:25:0c:25:3b:16:16:28:da:03:77:f4:c9:62:37:
         dd:25:54:57:9c:70:e3:b5:21:40:19:75:04:ff:93:5f:ce:78:
         45:95:13:08:45:94:41:d5:67:a1:61:da:c4:cc:fc:e6:aa:fb:
         99:9b:4c:2c:c3:78:5c:3a:13:c6:39:3e:b7:62:54:4c:b8:44:
         2d:43:3b:d1:24:94:58:ea:09:08:6a:82:5e:d2:c0:fb:46:a9:
         de:c5:c9:a7:1f:b0:23:ca:e3:cd:c0:06:eb:6b:05:8d:31:ad:
         f4:e5:5b:92:8c:33:f2:dd:66:ce:c7:14:3f:c7:63:fa:e5:d3:
         6d:85:81:0e:d3:59:02:2d:99:7c:2a:44:9e:b0:2b:e9:11:4d:
         ed:93:ae:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:46:52 2026 by rpki-client