Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft
File:                     xDm8101kBSuyA1McRgSa1ANYj8c.mft (raw, json)
Hash identifier:          MOKoClAZc+tbIz+/xd4T7K2+bOwc+d1CCGafdsBsEU4=
Subject key identifier:   9F:7C:66:C9:81:CD:B9:56:7A:93:30:BA:E7:26:3F:0A:72:8C:9A:5B
Authority key identifier: C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7
Certificate issuer:       /CN=A91775D8/serialNumber=C439BCD74D64052BB203531C46049AD403588FC7
Certificate serial:       07A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft
Manifest number:          0797
Signing time:             Sun 04 Oct 2026 21:36:18 +0000
Manifest this update:     Sun 04 Oct 2026 21:36:17 +0000
Manifest next update:     Sun 11 Oct 2026 21:36:17 +0000
Files and hashes:         1: xDm8101kBSuyA1McRgSa1ANYj8c.crl (hash: ScMLs4DLOEIunVGy91HDM1yejfZ8+cKHkFwNzG4a8nE=)
                          2: 18D9E13C5CE611EC80EC7E76C4F9AE02.roa (hash: PPR6I7z3DbbmL+I131mljAThTVcJvZDWVc9EyKNvaNI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl
                          rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 21:36:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1954 (0x7a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91775D8, serialNumber=C439BCD74D64052BB203531C46049AD403588FC7
        Validity
            Not Before: Oct  4 21:36:17 2026 GMT
            Not After : Oct 11 21:36:17 2026 GMT
        Subject: CN=6ac2c6d2-b309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:07:7a:d2:42:df:ff:9c:f8:6d:a1:12:e7:99:
                    a8:2a:94:bf:3d:df:09:6e:db:ec:3e:b9:a8:06:9f:
                    fe:11:68:a9:bf:bb:59:6f:56:42:64:75:50:0a:c6:
                    e7:b3:e6:47:92:97:14:88:dd:81:3c:e3:1e:a8:83:
                    0c:e0:93:a8:41:30:e4:e6:72:8f:e3:ab:ff:f7:83:
                    c9:66:ba:ef:2b:2e:4e:86:8f:bd:99:ac:5d:57:82:
                    b2:7b:3a:02:c2:0e:a2:56:60:e2:76:87:88:39:f9:
                    de:f7:21:c9:82:79:dd:76:9c:f6:f4:72:ba:c2:f6:
                    42:23:fa:bf:43:fd:78:15:e8:96:fe:64:5c:ad:78:
                    26:e8:c0:73:fd:6f:56:43:e3:b0:06:20:1e:94:5e:
                    e8:0a:af:36:d1:e6:46:c2:84:47:55:cc:1f:6a:7f:
                    6d:e7:8d:01:28:50:f5:36:56:58:89:5a:52:9b:d2:
                    49:09:24:f1:83:c9:63:13:52:2b:15:91:32:da:3d:
                    b8:b4:50:b3:91:d3:e8:5c:e0:6e:a5:83:a1:f8:18:
                    43:db:29:fc:2d:69:36:b8:b2:de:1e:f4:cb:11:af:
                    d7:3b:4d:53:5d:95:6c:41:3b:3d:1f:7d:9b:81:55:
                    27:e6:27:40:12:5d:66:ce:96:d1:29:0f:31:ee:b6:
                    c3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7C:66:C9:81:CD:B9:56:7A:93:30:BA:E7:26:3F:0A:72:8C:9A:5B
            X509v3 Authority Key Identifier:
                keyid:C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f5:bb:1c:7b:60:b7:a7:9e:69:af:b6:04:7c:6b:95:75:bf:
         26:38:98:e1:6f:94:72:51:04:ef:4c:d9:3c:74:89:fa:fc:f1:
         1b:09:d6:71:14:b8:be:db:51:9f:ae:a6:6b:d0:ae:bf:29:4b:
         e9:e1:ec:96:4b:e2:6f:3a:9c:73:a0:6a:55:33:e1:69:12:7d:
         22:33:d6:32:5d:a2:50:dd:a9:66:be:01:23:ff:e5:0e:6a:85:
         b4:8e:6f:ad:80:ca:64:ed:35:bf:34:9f:5c:d5:b7:7b:a1:bd:
         ca:a2:79:85:78:e7:c4:31:8d:bd:af:54:32:a8:c6:7b:e8:ae:
         d3:a2:5a:cb:25:44:54:70:a8:c4:f0:68:40:85:af:7b:23:3b:
         df:ec:e7:53:76:c6:77:d0:1c:1e:1d:4e:36:f4:a9:d8:aa:09:
         41:c2:6b:cc:69:7a:7c:58:18:a2:1f:ed:e5:e2:5c:2c:27:59:
         29:1d:46:71:1c:0f:eb:ce:7c:9e:5e:1d:17:c9:88:06:6a:71:
         6b:a8:40:52:1d:3f:73:3d:8c:f8:12:cc:24:23:e2:b8:9c:18:
         dc:8a:9c:79:d1:d7:1a:8d:11:57:25:b1:61:01:35:63:9f:c2:
         cf:d0:f0:2e:6b:71:24:05:eb:33:9a:5f:87:1f:23:73:e7:11:
         09:88:c7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:27:28 2026 by rpki-client