Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft
File:                     P5liYas9HvBBZhs6732JMrVwJjc.mft (raw, json)
Hash identifier:          9QIbB2mCYFfxs0AE3sWNHQRuF2MYNimGWATIb2Pa6zU=
Subject key identifier:   A2:E0:2B:9F:11:BA:E2:E9:0C:7B:A7:75:64:12:EA:6D:5C:7C:3A:42
Authority key identifier: 3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37
Certificate issuer:       /CN=A91DC2A9/serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637
Certificate serial:       0279
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft
Manifest number:          0265
Signing time:             Sat 03 Oct 2026 02:56:55 +0000
Manifest this update:     Sat 03 Oct 2026 02:56:54 +0000
Manifest next update:     Sat 10 Oct 2026 02:56:54 +0000
Files and hashes:         1: P5liYas9HvBBZhs6732JMrVwJjc.crl (hash: 6+nVjwkKbiN8xbTvoKUfgL0mDDI+cD3pwt/80wWoCwY=)
                          2: 8A7A9F7AA50C11F18BB0BE293611F970.roa (hash: CZPrNICGMMjA739lq2TDOVb5grDlm/kE1n5Njcl+iio=)
                          3: 7266A7C492EE11F1B04CCA456811F970.roa (hash: t4GZ18QI4oTf6DHwQOcgAYxGRqo9r2jFkCr7Ti8hMTo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl
                          rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 02:56:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC2A9, serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637
        Validity
            Not Before: Oct  3 02:56:54 2026 GMT
            Not After : Oct 10 02:56:54 2026 GMT
        Subject: CN=6ac06ef6-fed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7c:b6:91:25:68:11:f2:2f:e7:5a:dd:1a:d9:
                    0b:c6:6b:2f:4c:62:39:2c:2c:04:72:56:74:2a:4f:
                    ec:44:0f:d0:a0:fe:5c:dc:66:5c:84:b3:a8:f6:51:
                    31:4d:4d:78:05:f0:62:d0:31:36:11:01:e9:fb:0e:
                    76:00:26:21:fd:1c:8a:1b:d1:16:a6:0c:f2:81:0e:
                    72:f3:b2:d3:e5:31:64:1c:6d:1a:20:07:45:a4:b1:
                    db:c8:b6:81:37:d9:f9:50:30:00:f4:8f:44:24:19:
                    14:a0:0c:f3:9f:e9:b4:cc:18:8c:b1:4c:df:2c:50:
                    3b:44:0d:ac:6f:b2:a1:c1:11:73:8c:16:01:97:24:
                    df:3a:4f:d0:99:67:f6:64:b0:05:75:aa:0a:8b:3e:
                    d8:1c:cc:11:53:06:83:a1:c7:32:48:9f:cb:bb:38:
                    98:9e:e0:9b:13:39:20:1c:ea:5d:6d:a8:e2:ba:9e:
                    7a:bd:5f:b7:61:20:4c:ac:f8:07:4c:45:1c:2d:a1:
                    18:14:bf:02:43:a1:cc:1c:9e:ed:e8:b7:c5:5d:8a:
                    7b:8e:6c:e1:c2:2e:b3:19:71:c1:52:5a:20:29:70:
                    f6:1f:56:f3:39:d3:2e:c8:d7:f8:9d:41:0d:1d:b7:
                    e7:cf:cd:4f:df:91:ec:ca:de:b9:68:4e:b8:0c:26:
                    c5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E0:2B:9F:11:BA:E2:E9:0C:7B:A7:75:64:12:EA:6D:5C:7C:3A:42
            X509v3 Authority Key Identifier:
                keyid:3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:df:cf:65:22:c8:e9:e8:b3:05:a3:3a:5a:06:83:6d:9c:8c:
         4e:92:7c:25:52:8d:9e:f5:81:06:f7:f8:c7:d9:99:8a:11:49:
         d6:ba:7b:12:b5:6b:5a:6b:18:58:90:26:23:92:d7:71:eb:03:
         f4:d3:33:6b:2f:fb:56:28:5d:71:0f:2e:98:d3:0b:36:d9:bf:
         36:5f:f8:de:6d:6c:2a:57:54:a5:9e:fb:fb:4b:7e:99:ec:e1:
         0a:7e:16:ea:0e:76:e2:22:00:29:63:70:8a:3f:7c:a7:3c:7b:
         1a:0e:ea:6f:d3:40:73:f7:8b:ca:dd:74:71:58:6b:4a:b4:c0:
         2a:21:a8:7c:fa:08:b1:9f:5b:4e:76:41:7b:b8:c3:bb:75:12:
         ed:cc:c2:9a:dd:5b:63:36:19:99:75:8e:72:aa:cb:24:6a:36:
         5f:30:c2:20:78:fd:21:37:39:97:25:f9:d1:e3:3b:2a:b9:85:
         29:ae:a5:3b:f2:65:10:06:cc:81:18:4b:16:3f:20:e1:66:c8:
         f7:98:b3:8a:13:cb:82:d9:d8:99:e3:41:c0:b4:6d:5f:f6:46:
         20:b3:66:96:56:6a:f4:f2:27:d5:af:c7:2c:bc:bf:72:3e:36:
         23:40:bc:7c:6d:86:79:e9:aa:bb:62:d2:cc:87:d9:2f:18:88:
         06:aa:55:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:53:27 2026 by rpki-client