Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft
File:                     rQUyxqhtSiMdAK5R-tgo9qK2qos.mft (raw, json)
Hash identifier:          r3qPAGN0rZkEaOhEw0lbPIxgJ5niANjXaFdUISvrqMk=
Subject key identifier:   31:B8:09:4B:85:E0:A2:15:5F:08:80:F8:F4:7C:80:52:30:09:FD:67
Authority key identifier: AD:05:32:C6:A8:6D:4A:23:1D:00:AE:51:FA:D8:28:F6:A2:B6:AA:8B
Certificate issuer:       /CN=A91DE334/serialNumber=AD0532C6A86D4A231D00AE51FAD828F6A2B6AA8B
Certificate serial:       A4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft
Manifest number:          9C
Signing time:             Tue 13 Oct 2026 08:08:06 +0000
Manifest this update:     Tue 13 Oct 2026 08:08:06 +0000
Manifest next update:     Tue 20 Oct 2026 08:08:06 +0000
Files and hashes:         1: rQUyxqhtSiMdAK5R-tgo9qK2qos.crl (hash: L4UVBpowMH1CsxVpnL3SEIB21BAFQIN0XGg+wQZVq6Q=)
                          2: 38D21898F49411F08DD0DDBA746F56BC.roa (hash: 2TmQLP3BLhtpTJZcn16jZ9UXy19wv2rakTfjxerLpXo=)
                          3: 81346F96F49411F0BFEF52BD746F56BC.roa (hash: KtQdT3wKXi5XLWS0IbUBySou/W4dYxSu83urtoPZVvw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.crl
                          rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 08:08:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE334, serialNumber=AD0532C6A86D4A231D00AE51FAD828F6A2B6AA8B
        Validity
            Not Before: Oct 13 08:08:06 2026 GMT
            Not After : Oct 20 08:08:06 2026 GMT
        Subject: CN=6acde6e6-eea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:34:a8:37:65:ca:b1:a6:ca:c2:db:a5:42:a1:
                    b2:ce:ef:39:0c:1e:6c:36:20:fa:b0:81:05:2b:2d:
                    37:7c:de:08:8c:69:7c:33:60:41:74:29:50:51:ca:
                    7c:17:19:01:33:81:7e:b6:86:88:4c:f6:da:dd:84:
                    fc:d8:de:4d:59:94:75:3c:9d:36:e2:18:41:ab:56:
                    c1:0c:95:e9:23:a8:e2:84:41:c5:74:19:ba:e5:e7:
                    59:6e:bb:8f:d2:17:14:ad:b1:be:e2:09:2e:19:21:
                    b3:33:69:f3:e6:73:46:65:fb:d0:a8:18:6d:d1:fb:
                    52:37:f0:44:0d:4f:42:af:9b:f0:7d:23:fd:0c:bf:
                    f2:1a:5d:ba:4e:7e:7c:b8:d0:c6:55:6c:a0:d4:f3:
                    e0:15:90:99:5a:47:6f:2e:01:0a:84:31:89:af:23:
                    60:27:3f:d6:c6:b3:13:7a:6a:41:1e:e5:c3:7f:99:
                    5d:9d:ae:fd:93:d4:8f:b4:15:b6:49:06:4b:e1:01:
                    11:45:56:1e:52:ec:e4:8e:d9:66:f3:70:de:ee:90:
                    7a:2e:d4:4d:a4:f9:c5:b8:c8:1f:b0:7b:ea:27:60:
                    77:38:b8:3e:0c:b1:1e:01:c0:b7:91:e9:af:a2:89:
                    f5:90:2c:91:19:9d:0b:88:4b:41:db:7c:d4:3b:5b:
                    31:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B8:09:4B:85:E0:A2:15:5F:08:80:F8:F4:7C:80:52:30:09:FD:67
            X509v3 Authority Key Identifier:
                keyid:AD:05:32:C6:A8:6D:4A:23:1D:00:AE:51:FA:D8:28:F6:A2:B6:AA:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:9f:48:e9:5c:e1:0f:4b:aa:22:5b:05:52:89:4c:89:85:15:
         cf:f1:6f:56:b7:83:94:a8:30:bc:3b:db:22:20:eb:9e:70:72:
         d3:97:7c:2b:9b:f8:c1:4b:d4:b6:96:e5:33:87:25:2c:af:8b:
         a7:bb:57:4c:ba:04:6c:57:99:27:d1:8e:2e:c7:45:19:61:14:
         52:db:d7:55:50:59:4d:57:35:52:ac:e9:e6:21:7c:e1:b5:ee:
         b9:f7:7e:36:f2:91:d4:16:f6:a0:22:7d:a6:3a:86:fa:22:92:
         89:37:1e:b0:4a:ef:13:f2:f1:d5:4b:f2:65:f8:dd:41:25:60:
         61:0c:0a:c2:25:74:cb:d1:11:d9:e1:c8:29:57:4e:82:ad:e6:
         e0:e7:82:66:35:03:fc:69:80:71:34:86:0b:d7:92:41:ba:d2:
         0b:01:fd:34:2b:91:bc:cd:f0:e4:c0:b9:fb:5d:78:28:20:46:
         9f:18:a7:63:30:b1:28:4e:a4:b6:09:7d:14:7f:b8:2a:d9:95:
         6a:01:2b:4f:d2:e5:6c:9f:39:6c:65:65:63:43:21:29:b2:4d:
         d2:69:06:4f:f1:17:e5:8b:cb:09:75:7b:22:24:db:66:4b:77:
         da:10:7c:95:4d:1e:61:83:3b:40:54:4f:00:2d:67:29:ce:f3:
         ad:56:61:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 23:15:18 2026 by rpki-client