Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
File:                     aj72cYLbsPbM88pBN4wBGYBq6b0.mft (raw, json)
Hash identifier:          pI2TpbvuKw78sUxvDyncwruCop/pSkPQGjvBVhhYEZ8=
Subject key identifier:   76:73:87:7B:83:12:B8:02:01:8D:6B:3B:4A:7A:EB:3C:B5:04:29:84
Authority key identifier: 6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD
Certificate issuer:       /CN=A91A0A2E/serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
Certificate serial:       0141
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
Manifest number:          0136
Signing time:             Thu 01 Oct 2026 06:46:20 +0000
Manifest this update:     Thu 01 Oct 2026 06:46:19 +0000
Manifest next update:     Thu 08 Oct 2026 06:46:19 +0000
Files and hashes:         1: aj72cYLbsPbM88pBN4wBGYBq6b0.crl (hash: QQokYW/GqfwYyGdj6awhlIFmKvtCWiQUtK0NB2GzJ1E=)
                          2: FD63D5BEE90C11EFB9D98326C4F9AE02.roa (hash: VJiboECQcz4EPJ3s89go0nGoquID30lt86NixvuBLSQ=)
                          3: FDE6938CE90C11EFB9D98326C4F9AE02.roa (hash: uOYxYsUyV5d201wkHKNC5KliU1I0MfAZOgIjo4393UM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl
                          rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 06:46:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0A2E, serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
        Validity
            Not Before: Oct  1 06:46:19 2026 GMT
            Not After : Oct  8 06:46:19 2026 GMT
        Subject: CN=6abe01bc-91e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ae:74:ee:e2:77:90:77:9a:09:0f:86:35:f7:
                    a1:0c:79:c8:1d:3d:4a:9b:74:a2:b2:6e:5e:50:bd:
                    e6:4e:1e:c1:52:d1:f8:34:1c:83:8b:2c:2f:f2:50:
                    42:da:d6:0c:8a:d8:91:e7:ec:b3:d0:94:6e:8e:43:
                    74:6a:10:b5:dd:2b:49:91:56:92:35:f4:6f:6c:f5:
                    25:fe:bc:a6:57:11:c4:4d:38:d0:5c:ab:f0:88:57:
                    4e:b2:20:e1:35:6b:9b:1b:0d:30:e4:41:fb:89:3c:
                    be:ef:91:11:ce:6c:07:5b:67:46:ed:1c:08:5f:4b:
                    b6:d7:57:4b:d1:78:2d:7a:84:cc:da:70:0d:8b:b2:
                    62:5e:2d:a0:b0:35:99:ef:72:01:74:0d:cf:bc:cb:
                    cd:97:e6:fa:b4:d2:52:22:41:7e:8e:b6:83:07:55:
                    ea:d1:87:64:05:9d:6e:1d:29:b8:7e:db:52:94:b2:
                    ab:cf:c3:74:36:13:75:33:22:73:63:d6:bc:d3:b7:
                    9e:1f:2d:50:b9:e2:0e:d7:c7:f4:80:e0:ab:ec:bd:
                    12:a3:16:59:5b:fc:e6:15:0e:f0:1b:d4:3f:7d:a6:
                    75:88:33:4d:21:20:a4:93:f7:49:65:8d:af:4e:ff:
                    03:26:5a:ea:7a:54:34:d0:73:b6:65:4d:a8:a7:9e:
                    f2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:73:87:7B:83:12:B8:02:01:8D:6B:3B:4A:7A:EB:3C:B5:04:29:84
            X509v3 Authority Key Identifier:
                keyid:6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:5b:d1:82:92:0d:2b:6b:44:f5:d9:ed:99:b7:2b:4f:66:e5:
         8d:2c:76:d9:fa:ac:5e:f2:d1:07:03:40:12:e3:73:77:2f:da:
         a3:d4:1b:de:e8:09:70:15:75:3d:6e:a3:bb:7c:23:4b:1e:e3:
         3a:a5:8c:f5:d8:a3:8c:4b:3d:2e:31:0c:42:63:7e:8f:57:52:
         e1:d5:f1:b0:ae:da:12:a7:e0:b0:0f:b7:c4:d1:fa:f7:72:e4:
         2f:a5:4c:f8:ea:40:83:73:b6:d4:2c:2a:f8:c4:41:ed:f5:63:
         7a:fe:37:de:f0:1c:ef:61:e5:f4:62:e1:f7:1d:fb:a0:1f:ef:
         be:8d:ff:cc:28:c6:01:89:e9:f1:43:fa:14:99:98:f5:53:6d:
         09:88:43:aa:3c:77:1c:af:19:f2:43:f7:7c:91:65:46:2a:82:
         2f:79:e3:5f:5f:bb:bd:95:4d:75:82:e2:2a:17:c0:94:cc:ef:
         35:88:74:6f:ed:f2:e7:12:5e:46:9b:d6:21:ad:29:39:11:08:
         14:69:a2:1f:c2:a7:26:62:dd:64:14:9c:1f:4e:a2:7e:e2:1a:
         96:aa:99:30:31:5c:7f:02:cf:18:b1:60:c2:b4:06:3b:16:66:
         1b:48:d5:10:68:b8:3a:cd:5c:7c:71:3d:82:b1:f9:82:8f:e8:
         17:41:f8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 18:58:51 2026 by rpki-client