Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
File:                     McvtHUoCFwgxgH13RKxKr_JqBuY.mft (raw, json)
Hash identifier:          k+3UWGAqR7hIoGuS+nlL6iWP+Q8/Vpg0alChpvchBJw=
Subject key identifier:   4F:8E:49:CD:CC:4E:96:EC:01:83:E1:68:B8:2F:E0:E0:3D:70:2E:7A
Authority key identifier: 31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6
Certificate issuer:       /CN=A91C607C/serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6
Certificate serial:       023B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
Manifest number:          0235
Signing time:             Sat 03 Oct 2026 03:16:14 +0000
Manifest this update:     Sat 03 Oct 2026 03:16:13 +0000
Manifest next update:     Sat 10 Oct 2026 03:16:13 +0000
Files and hashes:         1: McvtHUoCFwgxgH13RKxKr_JqBuY.crl (hash: ByT2QpE5Pv5kdWoxjY6oebAHVw18XUWF+dhbWZKOMYU=)
                          2: 6F94DE3C628911EEA2D58C10C4F9AE02.roa (hash: ikPMKuaPv3O9li0UmdRfo3QhOBtyL4n4r3spbr+lypM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl
                          rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 03:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C607C, serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6
        Validity
            Not Before: Oct  3 03:16:13 2026 GMT
            Not After : Oct 10 03:16:13 2026 GMT
        Subject: CN=6ac0737d-98d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:32:df:0b:ba:d2:22:c2:7b:b7:09:04:41:b6:
                    94:90:57:29:d3:b6:7e:55:1c:b6:4b:44:a9:12:3f:
                    d5:ca:41:4c:2f:74:24:e1:4b:1c:71:1a:f1:02:85:
                    ad:d5:cb:ed:ce:03:8c:48:70:2e:37:c5:88:b9:3e:
                    d7:92:8f:29:af:a3:6e:59:5f:a8:34:bd:b3:fb:e4:
                    6c:36:ac:89:eb:56:29:24:4e:10:0b:be:13:4f:44:
                    eb:a4:ed:03:f5:9a:42:97:45:eb:d1:af:ba:67:ac:
                    90:da:e0:89:e8:f4:5d:56:bc:dc:25:ae:55:b1:eb:
                    4f:cc:b4:8a:a7:f0:a5:e1:37:e4:66:78:1c:57:0a:
                    bb:fe:2a:58:cc:39:0f:07:0a:77:ec:c0:06:7c:c6:
                    da:3b:d3:84:ce:f3:97:7a:c0:e8:18:4b:59:80:47:
                    dc:d7:ae:be:a2:c4:91:0e:d2:bc:4a:47:d2:83:3a:
                    b5:85:49:86:1c:bd:f5:60:9b:28:21:29:f6:70:04:
                    b2:a4:fd:2d:3e:57:b6:49:ff:76:5b:48:88:25:10:
                    8f:ea:d0:24:e3:9c:75:d8:4b:a4:ea:7c:11:bc:fc:
                    81:83:fd:fd:97:d7:1d:ca:36:ce:de:9e:11:3e:5c:
                    39:f4:24:9c:b3:12:ad:79:a1:52:a8:53:7e:4a:67:
                    97:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8E:49:CD:CC:4E:96:EC:01:83:E1:68:B8:2F:E0:E0:3D:70:2E:7A
            X509v3 Authority Key Identifier:
                keyid:31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:90:f8:f3:ab:6e:cc:1f:6f:dd:c1:b9:3f:e7:5b:bd:31:f9:
         78:e9:15:1a:e0:3a:2b:f0:9e:eb:51:95:74:26:03:b8:e7:89:
         2c:c6:bd:11:fd:8a:d2:49:52:ea:3c:24:ea:39:d4:a8:44:c8:
         45:f6:c3:12:f7:48:8e:01:91:3f:51:b0:46:5b:58:c8:1e:ba:
         62:e5:db:e2:70:b3:ae:fd:0c:4e:cb:76:c4:d1:97:4f:d1:11:
         a4:ab:61:91:e8:2a:33:f0:03:d6:f1:37:15:b1:92:ec:8c:d1:
         96:c0:90:e3:36:8e:ad:14:2d:f5:55:f0:29:c9:2f:36:39:23:
         35:d0:32:01:b1:7d:b1:63:51:18:00:b0:bd:63:15:61:58:9c:
         78:a8:3a:61:71:56:d5:fa:bd:99:25:ab:ab:88:a8:ab:b7:a5:
         86:0d:16:90:6f:15:d6:b9:1a:59:36:db:24:3d:c9:cb:93:48:
         a7:24:15:d8:64:0c:6b:a9:14:91:99:bd:4f:56:4a:ad:c9:be:
         6b:f8:7e:2d:00:93:8e:ba:76:fd:bc:49:ae:d8:c1:8e:c6:4a:
         32:03:c8:a3:16:b5:12:05:d6:c5:ed:7d:e1:57:65:aa:ee:a7:
         72:dd:26:9f:c2:cb:8d:28:4a:eb:3a:75:93:3b:d5:8d:30:a0:
         9d:a0:98:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:12:38 2026 by rpki-client