Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft
File:                     crVJ4D_3UKU5edANyx2mRLtSrKw.mft (raw, json)
Hash identifier:          uMY40p0IMAs20kJy+thmULhL2do0XtkfQCCHDGUW9ew=
Subject key identifier:   28:72:42:FA:FE:EF:9A:89:5E:F5:49:0A:77:9A:F4:FC:D6:96:02:77
Authority key identifier: 72:B5:49:E0:3F:F7:50:A5:39:79:D0:0D:CB:1D:A6:44:BB:52:AC:AC
Certificate issuer:       /CN=A91BFDE1/serialNumber=72B549E03FF750A53979D00DCB1DA644BB52ACAC
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft
Manifest number:          75
Signing time:             Tue 13 Oct 2026 08:35:39 +0000
Manifest this update:     Tue 13 Oct 2026 08:35:39 +0000
Manifest next update:     Tue 20 Oct 2026 08:35:39 +0000
Files and hashes:         1: crVJ4D_3UKU5edANyx2mRLtSrKw.crl (hash: BG5oOifDc5qa1CeG5S1DS73Lg80UwyUoCNtZJkV1SYs=)
                          2: 00B077D6187D11F19A5CAFE7383D8C67.roa (hash: mW9wCzHROG2faL3zV7IIUqQz5qp+XENd/4NuYNOgCwo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.crl
                          rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 08:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFDE1, serialNumber=72B549E03FF750A53979D00DCB1DA644BB52ACAC
        Validity
            Not Before: Oct 13 08:35:39 2026 GMT
            Not After : Oct 20 08:35:39 2026 GMT
        Subject: CN=6acded5b-83bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5e:75:0b:a0:06:8b:8a:c2:41:f1:68:3c:0d:
                    03:16:43:0e:65:6e:d5:7d:fd:cf:ca:48:a1:9d:28:
                    6c:b3:1b:79:44:13:bd:ea:c6:20:88:9d:aa:23:c0:
                    c9:51:a4:e8:5d:b8:40:93:51:ca:38:93:7f:36:a4:
                    cc:4d:7d:1e:06:b8:f0:d9:03:37:28:88:d6:c2:7a:
                    ff:ed:41:1d:05:60:f3:65:36:33:3a:f0:ee:f4:4e:
                    8b:e1:fa:fc:b3:f5:ee:99:84:a6:4e:a0:16:01:9c:
                    ea:2e:a8:60:b3:46:5e:aa:f2:ae:df:54:b1:14:70:
                    66:45:a6:09:eb:d9:76:18:76:b0:5a:1a:84:0d:a5:
                    5f:2c:b4:39:d1:3e:89:18:8b:ec:45:20:80:67:df:
                    c1:b4:1d:94:b4:b6:1c:28:66:3e:9e:2e:ea:a1:be:
                    ac:9f:4d:54:73:35:0e:b3:11:e7:e5:49:bf:77:07:
                    bd:50:46:4e:8f:76:dd:81:f3:f2:8a:87:e3:68:cc:
                    a3:b1:34:bf:b7:8d:1d:27:37:0d:21:de:45:87:d0:
                    86:10:37:40:b5:01:66:08:99:4d:b3:66:f8:d6:c7:
                    2e:71:8f:96:f5:bb:10:51:80:40:ef:cb:29:c4:97:
                    69:d7:c9:1b:75:3c:bb:df:26:ac:72:31:82:41:21:
                    6a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:72:42:FA:FE:EF:9A:89:5E:F5:49:0A:77:9A:F4:FC:D6:96:02:77
            X509v3 Authority Key Identifier:
                keyid:72:B5:49:E0:3F:F7:50:A5:39:79:D0:0D:CB:1D:A6:44:BB:52:AC:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:45:c1:aa:40:ad:53:6d:56:27:63:8c:85:f5:fb:31:6b:cd:
         97:9f:bd:ea:73:3d:16:d7:ea:92:e9:9e:11:b3:30:78:3b:45:
         17:de:3f:c0:cf:b2:b4:b5:4a:83:16:51:ea:45:39:fd:8c:8e:
         6c:43:bd:d9:f4:c4:42:13:46:c2:4e:98:26:3e:6e:af:61:4c:
         a2:f0:0b:95:1f:2d:80:b3:7a:86:0e:c0:16:79:e4:87:73:ad:
         04:c7:7a:12:13:17:da:9f:d3:6b:f7:15:a4:db:91:19:82:42:
         d4:ad:32:fc:60:ca:80:77:a6:c8:73:26:48:df:c2:db:c0:46:
         98:52:a3:87:07:58:ba:cf:bd:3e:e2:58:a4:c6:16:d2:61:a7:
         d4:88:e9:14:c1:1b:51:73:b3:d4:e0:ac:67:58:07:a2:9f:58:
         bc:89:c3:d2:55:62:c5:34:31:f8:9a:e8:86:94:a2:fd:eb:08:
         d8:4d:f2:25:e3:fb:18:79:cf:00:c5:df:83:80:1c:b7:ef:3f:
         02:60:c5:98:78:ae:b9:f8:1c:61:86:f1:e4:0d:67:52:5f:03:
         0b:a9:e8:b3:5c:ea:34:15:e4:01:fd:c1:1f:09:cb:c8:96:29:
         a0:04:fb:e2:d2:1d:6c:52:72:a3:70:50:cc:00:9d:45:a6:e7:
         e1:7e:a9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:56:30 2026 by rpki-client