Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
File:                     XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft (raw, json)
Hash identifier:          qaJyAMFapDTxZUH0voqWyVIU8YYXsVSauSAhA05Ku60=
Subject key identifier:   7E:67:13:FD:09:8A:17:3D:B9:D8:0E:1C:86:45:9A:B8:8C:08:A0:4C
Authority key identifier: 5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32
Certificate issuer:       /CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32
Certificate serial:       0AA3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
Manifest number:          0A99
Signing time:             Mon 12 Oct 2026 19:40:06 +0000
Manifest this update:     Mon 12 Oct 2026 19:40:06 +0000
Manifest next update:     Mon 19 Oct 2026 19:40:06 +0000
Files and hashes:         1: XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl (hash: HImP6DXktLEI/iecpZMT4HacEss2ZTo4Fxpir00wlhw=)
                          2: B01A5D448A0E11EAA8C40916C4F9AE02.roa (hash: uL14OpfP32+5y3tA0ivSjK4NgQZZVX7Ob3/KlBQRVf0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl
                          rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 19:40:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2723 (0xaa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D83B3, serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32
        Validity
            Not Before: Oct 12 19:40:06 2026 GMT
            Not After : Oct 19 19:40:06 2026 GMT
        Subject: CN=6acd3796-1d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:73:e3:d3:d7:6c:c7:ab:3d:38:7e:72:cb:a7:
                    46:87:e8:97:4c:3a:59:3f:b8:54:ed:e1:98:7f:a5:
                    53:c3:ca:76:9b:c7:68:81:35:0f:f1:28:68:f5:89:
                    2b:20:02:5b:bd:66:b3:75:49:ed:de:a1:b2:41:7d:
                    af:9e:e1:04:c0:31:f2:9e:2a:31:6c:ff:a7:c8:08:
                    af:87:38:c7:32:aa:4f:83:f7:35:0a:4f:c2:fd:04:
                    54:df:50:e5:94:29:c6:a7:bd:a4:e0:b4:28:75:d1:
                    7f:1a:26:22:74:6f:ce:6f:e0:ed:7f:53:22:a1:5c:
                    50:40:e5:30:26:5a:dd:f1:1d:c3:de:f9:06:f8:81:
                    51:45:8c:0f:ba:9d:82:b3:9b:d0:48:25:99:d9:25:
                    09:c4:53:7b:42:04:b4:98:78:e6:67:e2:3d:bc:fa:
                    ce:fd:de:07:ff:ca:d2:dc:06:3a:d9:45:4e:64:c4:
                    70:42:c2:a6:41:1b:5f:5d:be:b4:b9:d4:66:90:80:
                    f0:25:69:0e:8a:47:42:4a:70:1a:e6:47:7b:cb:8e:
                    81:fe:41:cb:b7:38:b4:48:0f:3e:67:b8:a5:ab:e3:
                    6b:21:93:9e:6b:e8:70:12:f0:7c:30:19:84:69:9a:
                    28:a5:5a:41:bc:45:1f:40:72:e7:12:87:dd:f7:64:
                    60:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:67:13:FD:09:8A:17:3D:B9:D8:0E:1C:86:45:9A:B8:8C:08:A0:4C
            X509v3 Authority Key Identifier:
                keyid:5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:70:49:5c:dc:d4:71:c7:0c:7b:1e:ab:4e:3d:2b:fb:26:1e:
         82:0d:c3:86:40:94:a6:6f:0e:26:f4:13:f4:56:c5:10:ef:1b:
         56:c7:87:6a:6e:6a:3e:d1:b1:b7:e1:de:12:71:b4:59:9b:6f:
         96:1d:76:aa:24:7b:47:e0:97:8f:6c:8e:d9:d1:3e:9a:76:b6:
         93:94:01:20:a9:f2:7b:64:3c:ff:6c:b0:3e:c5:a9:63:7d:9f:
         27:34:0d:6a:4d:ed:20:37:7d:f4:4f:c9:e4:22:ea:d2:86:c8:
         e9:b3:12:5c:9b:b3:7e:e4:78:2a:02:2f:6b:b6:49:31:82:b0:
         2d:bf:14:05:39:33:c9:4e:d4:05:ed:d3:38:ad:c7:0f:b2:fc:
         47:d5:43:71:eb:9c:ae:01:01:27:55:7f:60:d9:4d:ac:5c:ec:
         9b:cb:b1:ab:74:69:b4:49:90:1a:26:c1:c9:37:86:ee:56:e6:
         bf:fd:4a:d7:de:64:08:46:d8:ce:b7:1a:f5:88:b8:84:f1:d7:
         34:46:48:49:36:12:12:79:c7:f3:56:b7:20:c6:86:c2:ff:9c:
         2f:3a:dd:cf:e5:64:be:c5:b8:ba:10:af:cb:c4:73:f2:13:ef:
         83:a7:3d:9b:e5:b3:e3:e2:32:66:13:83:8f:2c:bc:96:e9:2f:
         16:c0:24:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:16:25 2026 by rpki-client