Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
File:                     AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft (raw, json)
Hash identifier:          B5MkHiLb8QkGNjj8LXVzY15AduKaF67/aDzuv6bi6gg=
Subject key identifier:   2D:24:72:6B:5B:47:CF:B0:15:37:B8:77:3A:E1:67:2E:F9:0C:03:EC
Authority key identifier: 00:AF:60:18:5D:1F:B9:A0:8A:58:B7:7E:F4:04:81:AC:38:0A:F1:B1
Certificate issuer:       /CN=A91FFBAF/serialNumber=00AF60185D1FB9A08A58B77EF40481AC380AF1B1
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
Manifest number:          B4
Signing time:             Sun 01 Nov 2026 08:05:05 +0000
Manifest this update:     Sun 01 Nov 2026 08:05:04 +0000
Manifest next update:     Sun 08 Nov 2026 08:05:04 +0000
Files and hashes:         1: AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl (hash: v5OYlN6QkyXxXZDGxx8VKTbtQUr/X7YQ7UPblaqEJsM=)
                          2: C7200E0EC37D11F09171F578C4F9AE02.roa (hash: E6omI9lqZzM/PwLCS0UMdFdpwNRWOrVUdR04/HJ2Es8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl
                          rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Nov 2026 08:05:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFBAF, serialNumber=00AF60185D1FB9A08A58B77EF40481AC380AF1B1
        Validity
            Not Before: Nov  1 08:05:04 2026 GMT
            Not After : Nov  8 08:05:04 2026 GMT
        Subject: CN=6ae6f2b1-5604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:25:10:76:c6:5a:cd:84:64:10:d6:95:2f:f0:
                    88:42:15:14:a7:a4:a2:72:80:d0:fd:07:fd:e6:42:
                    20:e8:e5:ff:d5:56:d3:d7:b3:95:b5:21:5c:51:22:
                    eb:3a:a0:cf:ee:d3:9d:95:f4:62:aa:8a:8a:ba:b1:
                    14:73:0c:95:7e:93:65:1b:81:1d:df:dd:cd:3d:e9:
                    70:34:c2:aa:72:33:5d:68:60:d2:45:ef:4a:6c:e3:
                    ff:3d:49:1f:ab:5a:1b:ab:fe:9c:c9:6b:b9:e9:62:
                    93:eb:71:fd:2a:71:85:c9:3d:a0:2a:39:ef:65:7b:
                    c2:a3:3a:28:6d:2f:54:0b:cd:dc:ab:dd:3a:c7:ff:
                    55:dc:48:1a:59:60:12:cf:78:35:d9:59:de:a4:41:
                    91:d0:9b:21:55:bb:1a:88:31:e8:c0:40:bf:8e:13:
                    40:b3:7d:08:85:59:a8:74:b5:db:e5:f2:85:af:8b:
                    3c:34:4e:38:bc:a4:f1:c4:b5:15:89:25:ee:4c:fa:
                    af:65:b9:e3:22:49:c4:9f:e1:1f:a1:4f:7b:f4:74:
                    8c:89:d3:ce:28:91:8b:c9:50:5f:d5:43:f7:2f:22:
                    32:e8:83:31:da:33:5c:d0:cd:ec:87:df:cf:4e:3c:
                    50:d9:b9:10:6c:41:2b:c2:b3:11:bd:81:5b:50:c1:
                    1d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:24:72:6B:5B:47:CF:B0:15:37:B8:77:3A:E1:67:2E:F9:0C:03:EC
            X509v3 Authority Key Identifier:
                keyid:00:AF:60:18:5D:1F:B9:A0:8A:58:B7:7E:F4:04:81:AC:38:0A:F1:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:3e:25:06:67:34:4b:88:e1:6e:b5:2e:28:8e:a9:0a:78:82:
         20:98:f1:bf:29:32:54:42:a5:b1:87:92:cd:1c:99:f5:ab:c5:
         7b:32:20:d3:86:f9:be:97:e8:04:1e:e2:7f:0e:13:bd:98:4e:
         6b:44:62:33:e4:5d:d9:c9:a8:cd:78:87:88:ac:50:de:30:0f:
         1d:da:64:b7:4d:ff:61:fa:da:44:bd:e2:b8:5e:a5:11:9e:30:
         9a:66:0a:9c:b4:39:67:6f:86:e3:a2:11:38:f6:b9:4e:12:30:
         48:25:bc:ea:82:e4:f6:d4:38:66:9c:67:db:d3:03:e6:61:6c:
         cd:96:06:ae:db:3f:4c:19:3c:b9:e7:f2:9b:2c:73:14:43:fd:
         ad:ba:5d:ac:70:81:b7:f1:bc:3f:6f:60:ce:3e:84:53:6e:a1:
         ca:39:00:79:0f:71:ba:d7:c8:4e:49:aa:09:0a:ce:5b:13:8f:
         bb:97:e0:a3:6b:86:05:32:e8:cd:37:4e:ff:1a:af:91:7c:7d:
         b5:96:e5:b4:10:e7:d4:b1:e2:e0:73:a9:90:2b:29:c3:2d:06:
         f3:d5:5a:06:3f:9c:ec:66:74:cd:ec:4b:29:8a:8c:c5:7f:45:
         1c:32:6c:83:fe:61:87:c3:84:85:b2:45:a8:a3:02:60:64:f9:
         7d:b9:05:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 10:52:39 2026 by rpki-client