Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
File:                     aK5b6xu35ELO4KfgFAKf9y49tB8.mft (raw, json)
Hash identifier:          2ctqkMYMDDeZP4Ak9iFGuNhnBBgV1tpu7HzysOco9GI=
Subject key identifier:   8F:69:EF:92:12:6D:FC:0F:81:7E:DA:AE:2C:28:D9:C7:06:DB:2E:D6
Authority key identifier: 68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F
Certificate issuer:       /CN=A91104C9/serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F
Certificate serial:       0D05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
Manifest number:          0CF6
Signing time:             Fri 02 Oct 2026 19:35:57 +0000
Manifest this update:     Fri 02 Oct 2026 19:35:56 +0000
Manifest next update:     Fri 09 Oct 2026 19:35:56 +0000
Files and hashes:         1: aK5b6xu35ELO4KfgFAKf9y49tB8.crl (hash: K8bCmLrNvaie8aYCfuPvdKH+zDZzYN2m1dkzBotZOgM=)
                          2: 4C1F013E5AF511EFBAB1F86CC4F9AE02.roa (hash: r7Y9fnCxdSyyH2A4hgDRG+pQ+bI6QrGfxRhy4uVO9qQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl
                          rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 19:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3333 (0xd05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91104C9, serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F
        Validity
            Not Before: Oct  2 19:35:56 2026 GMT
            Not After : Oct  9 19:35:56 2026 GMT
        Subject: CN=6ac0079d-b80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:df:1c:6c:0b:09:18:88:21:c8:bb:2a:cf:49:
                    bf:b1:38:17:5a:37:2d:6c:44:c1:27:79:dc:fb:6b:
                    df:ce:fc:87:7e:19:5b:a9:97:12:0d:e5:f1:b0:cf:
                    e5:54:b3:ca:a7:d1:d6:44:c2:d4:85:32:42:20:a6:
                    42:71:a2:a2:af:34:2b:be:1e:13:30:e4:c1:ee:ec:
                    36:1a:a3:36:e7:d4:01:b3:98:7f:59:24:e1:b4:66:
                    ea:a9:cd:e8:ed:6d:86:8b:a7:44:cf:91:3b:7f:ed:
                    3e:bd:75:82:9a:de:a6:ff:7f:a7:26:b7:4d:c0:ab:
                    86:26:7c:d8:5d:dc:9e:f1:e8:5f:20:b0:f2:b3:72:
                    94:8c:15:0f:f8:cd:61:fa:ea:36:41:7d:98:aa:8e:
                    8b:e5:cf:78:cd:ad:51:c2:cf:63:a7:fd:e8:c8:5e:
                    e5:f3:a9:33:be:62:9e:49:f7:87:4a:a9:b7:d8:b6:
                    2d:de:cf:d4:5d:24:65:a0:0c:cc:bb:f8:eb:c1:d5:
                    08:c6:16:14:5e:2b:15:b2:9e:40:df:eb:48:d8:2f:
                    92:ea:51:f6:da:e0:96:f8:bd:c3:0b:16:b9:fc:04:
                    a4:1d:6b:bc:96:a4:8e:43:db:c9:f7:e8:c8:1a:89:
                    d9:cc:cf:af:87:e7:2e:79:cc:d1:82:0e:19:42:c7:
                    14:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:69:EF:92:12:6D:FC:0F:81:7E:DA:AE:2C:28:D9:C7:06:DB:2E:D6
            X509v3 Authority Key Identifier:
                keyid:68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:4c:ee:c0:d3:c0:90:7d:ad:73:ce:92:02:c5:1d:24:f0:81:
         bb:95:a9:64:32:3a:ce:d6:e6:4e:99:79:6d:36:e1:68:d9:e4:
         99:7b:c3:08:02:62:56:84:1a:24:e0:c9:25:e1:37:02:25:40:
         a6:88:f7:c9:f9:1c:87:08:79:cb:5f:06:b3:a1:32:a5:93:4a:
         fd:62:15:d8:ad:fa:92:2d:4a:0e:42:1e:ae:e2:40:90:76:18:
         c5:2b:24:26:34:6d:2f:84:30:ec:5b:98:2f:5b:cf:ec:ad:14:
         9d:d9:9a:0a:b0:62:9f:86:11:47:6a:7f:4f:6b:20:58:a6:cb:
         83:7a:bc:1e:d3:58:5e:5f:ee:59:13:7e:17:78:30:f3:01:a4:
         ae:1b:13:a4:9b:45:99:99:46:6c:f8:3e:83:7d:35:8d:55:c5:
         d7:d3:4e:a9:3f:50:8f:3a:b2:92:06:39:0f:27:d3:34:3a:29:
         4b:4c:fc:55:51:05:ea:01:04:05:87:8f:19:7c:7a:bb:1f:a7:
         30:ab:d5:13:e3:1c:78:fa:e1:1c:06:76:d4:73:c8:f7:b0:5a:
         a1:96:36:36:d8:f0:d0:a3:56:c3:fd:83:a9:cf:ec:33:19:bf:
         c6:a1:51:24:48:18:ad:8a:e9:35:f2:60:57:ae:af:4f:1a:f9:
         39:fd:fa:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:25:55 2026 by rpki-client