Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
File:                     aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json)
Hash identifier:          FhZzRjVi90tBigajmigaBVagkEh1AKDdXztpMyd3aBE=
Subject key identifier:   A7:15:14:96:05:ED:9B:5B:7A:91:92:BE:34:6E:98:38:BD:45:8D:E0
Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9
Certificate issuer:       /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
Certificate serial:       02FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
Manifest number:          02D7
Signing time:             Mon 05 Oct 2026 01:36:52 +0000
Manifest this update:     Mon 05 Oct 2026 01:36:52 +0000
Manifest next update:     Mon 12 Oct 2026 01:36:52 +0000
Files and hashes:         1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: Eu4B8xYp+sCUO7vLfE/OuBfdcswMX0QAFvN5w0c1twQ=)
                          2: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: XbLvpieZLxPD8FqUNOF2czHZzpbSV3R5GXAyN7YF/l8=)
                          3: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: 4jtKn5a6oeJ2ZvZ6jOhbyJ8NLFyq6vJ1Ql8J7L6gxEQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl
                          rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 01:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 763 (0x2fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
        Validity
            Not Before: Oct  5 01:36:52 2026 GMT
            Not After : Oct 12 01:36:52 2026 GMT
        Subject: CN=6ac2ff34-2406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:83:d2:e2:71:55:d9:38:7e:49:3d:5d:89:6d:
                    39:f4:1e:5b:7b:89:91:da:d2:14:3b:e0:c5:52:4e:
                    2a:2e:8e:cc:9c:36:f2:01:e9:6a:25:f9:1f:0f:be:
                    da:bc:a8:89:19:0f:a9:60:0e:94:9e:d9:9e:0d:d0:
                    e1:f0:ef:c4:a6:fc:ca:16:c3:3c:97:2f:1e:06:8f:
                    e5:b4:b9:4d:1a:d1:9c:e4:8f:47:9f:36:70:bb:e9:
                    59:0c:e6:32:67:6a:c4:12:b2:f7:6d:0f:b0:db:96:
                    a7:e1:73:63:4c:4a:93:4d:98:73:09:e5:49:f8:bc:
                    35:05:93:64:54:b0:91:01:d8:9a:9e:94:4a:fe:d6:
                    63:e9:b0:29:9e:a5:8f:3f:8a:d4:f0:3a:13:4c:26:
                    67:fc:05:5b:35:00:f4:09:53:e4:30:3a:49:5e:7b:
                    2e:1f:2e:cc:3a:49:5c:38:3b:4c:5b:76:4c:d4:09:
                    0a:18:0e:fb:05:16:92:82:17:1e:c3:a3:ed:a8:37:
                    6c:e8:1d:ec:a0:ae:51:12:f5:c6:4d:f0:f8:27:93:
                    c6:54:72:7f:e5:de:88:4d:e7:18:b9:f2:61:13:73:
                    91:d9:a7:72:36:1e:10:47:bb:cf:e4:2a:01:40:bb:
                    da:4c:be:c9:76:35:f4:f3:d0:d1:a6:1a:f9:ab:4d:
                    f1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:15:14:96:05:ED:9B:5B:7A:91:92:BE:34:6E:98:38:BD:45:8D:E0
            X509v3 Authority Key Identifier:
                keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:81:ac:eb:07:3d:75:7b:77:5e:1e:18:a5:91:04:3b:17:6b:
         07:71:80:84:af:4e:eb:af:21:ba:f2:62:99:ad:37:9f:3f:4a:
         46:e1:71:09:8e:be:51:cf:68:09:63:4c:a5:dd:dd:f2:56:a5:
         41:d9:1c:98:43:38:ef:2c:10:cd:74:4a:1d:68:0a:9f:1d:26:
         89:5b:68:4d:08:50:ba:74:8c:c2:46:d5:29:89:29:13:bc:0b:
         19:cf:b0:38:33:29:90:49:c9:94:f3:48:db:7a:79:ed:69:0a:
         b1:e8:88:cd:1e:d1:7b:ba:3b:7f:8a:58:bd:47:c9:68:c7:67:
         1f:9b:60:fa:ea:0d:6f:8c:34:cf:5f:55:ac:fc:83:64:f0:ab:
         c5:0a:0e:1c:0a:83:d4:22:c4:18:6a:ff:97:af:fd:a7:2a:5c:
         f4:3c:70:d2:1f:0b:01:38:ac:48:dc:e7:50:22:11:4e:6a:b2:
         8a:41:49:26:ce:5e:31:a8:c0:02:04:e4:07:4c:f0:8c:ba:e3:
         83:e7:d8:8f:93:84:96:6f:2e:c1:b9:f6:0b:29:ed:a2:b6:f4:
         14:9c:1a:db:1a:7b:c7:3e:10:95:82:11:8e:67:b7:2e:94:a7:
         14:06:fd:36:84:92:47:64:cf:93:44:9d:cc:1f:51:a1:ee:25:
         d5:a9:be:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 22:25:55 2026 by rpki-client