Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft
File:                     V02z1iXehCAuOsnBw9Wwd01reOM.mft (raw, json)
Hash identifier:          m7fsujTdcMDkmzeS0WvYAVGh0IlqCQSq61aZEZrIOGk=
Subject key identifier:   9A:48:7A:1D:1E:02:16:D5:29:AF:E5:C6:9A:F6:FA:56:A2:EB:F4:CC
Authority key identifier: 57:4D:B3:D6:25:DE:84:20:2E:3A:C9:C1:C3:D5:B0:77:4D:6B:78:E3
Certificate issuer:       /CN=A91E33AA/serialNumber=574DB3D625DE84202E3AC9C1C3D5B0774D6B78E3
Certificate serial:       FD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft
Manifest number:          F5
Signing time:             Tue 13 Oct 2026 07:01:58 +0000
Manifest this update:     Tue 13 Oct 2026 07:01:57 +0000
Manifest next update:     Tue 20 Oct 2026 07:01:57 +0000
Files and hashes:         1: V02z1iXehCAuOsnBw9Wwd01reOM.crl (hash: yUGLGGdnWb9keMV4C45PyMWfGpH62ZNMIyxSCV8CY9o=)
                          2: A5E6E422A8E511F0A46A7729C4F9AE02.roa (hash: VOEGBBPwOHH7RWSeFdVb+qSkT0fmCuL9yLhrNNsYEBw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.crl
                          rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 07:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E33AA, serialNumber=574DB3D625DE84202E3AC9C1C3D5B0774D6B78E3
        Validity
            Not Before: Oct 13 07:01:57 2026 GMT
            Not After : Oct 20 07:01:57 2026 GMT
        Subject: CN=6acdd765-159c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:94:a3:4e:0c:20:a6:13:55:89:2c:06:a4:aa:
                    83:88:ae:9c:da:42:a6:c6:93:fd:d7:ee:a9:8a:a0:
                    69:4b:b3:35:1a:e6:cf:d0:78:12:fa:51:b3:dc:29:
                    a2:33:6f:27:3f:06:bc:6c:ad:e8:08:36:9e:0f:07:
                    09:50:16:2d:af:1f:bc:7e:3f:c9:66:20:ba:1e:5e:
                    ff:1f:78:84:60:3f:9e:66:37:16:94:1b:b2:f9:7b:
                    2f:24:1f:1e:08:9b:00:9d:51:8b:2b:d8:48:f8:0e:
                    60:49:94:10:72:89:13:6b:20:b0:f0:6f:43:53:be:
                    63:e4:96:4f:47:71:09:77:a8:bf:4c:4f:ff:eb:f1:
                    18:bb:d0:36:5c:22:79:7e:38:62:c7:b1:38:8e:23:
                    64:ce:76:3e:93:04:70:ad:ca:51:4c:5a:00:64:4a:
                    a7:06:3c:0c:e1:b9:70:4f:73:ac:3c:82:e8:54:e4:
                    c7:ad:58:24:d1:aa:88:13:09:13:57:42:c1:18:ca:
                    c4:3e:ac:bc:ad:87:e5:0d:1d:fe:4c:0c:40:bb:a8:
                    c2:69:6e:24:3d:a4:5c:3e:0c:be:4a:81:ac:a9:45:
                    5a:2b:47:0c:53:29:35:54:8a:95:64:fe:f1:51:de:
                    d8:1b:85:68:aa:af:51:9e:86:01:c0:31:2e:10:ee:
                    79:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:48:7A:1D:1E:02:16:D5:29:AF:E5:C6:9A:F6:FA:56:A2:EB:F4:CC
            X509v3 Authority Key Identifier:
                keyid:57:4D:B3:D6:25:DE:84:20:2E:3A:C9:C1:C3:D5:B0:77:4D:6B:78:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:41:32:64:f2:02:6a:6a:06:fd:66:83:bb:5f:25:51:6e:73:
         ad:22:94:f6:f5:c2:c1:3c:b3:ad:c1:3e:27:05:f5:1a:9e:9c:
         1a:15:7d:bf:57:92:28:00:d8:1c:5b:b6:94:40:56:81:b5:64:
         34:15:80:32:bd:02:8d:be:10:5a:71:93:c0:90:36:28:70:52:
         4c:33:bd:2b:af:5e:c5:5c:ec:dd:d7:81:85:70:a5:b8:01:c5:
         97:6c:46:4c:f1:8e:65:13:1c:08:2b:7a:79:3e:1f:19:7f:19:
         fc:f2:7a:78:b3:4b:58:4f:ee:e4:35:a5:aa:4f:95:1a:38:61:
         6a:dd:4c:a3:14:3a:a8:c9:a6:a6:f6:64:ce:e4:9b:fe:b8:87:
         b8:8b:7e:6c:23:c4:71:df:1f:08:de:0b:e9:2d:db:94:84:14:
         67:49:80:d8:d8:a6:54:4f:c1:dc:fd:65:d7:22:6f:ea:33:bc:
         5a:e8:fe:d6:af:37:a2:e9:50:70:5b:0a:8d:56:28:c9:5f:e1:
         33:6c:de:81:74:70:7b:c3:fb:b8:30:8e:a4:01:b0:08:e5:d9:
         af:a0:b5:60:99:9a:fc:a6:af:cf:88:e1:7b:c9:ab:83:2c:53:
         10:73:70:9d:a3:fa:56:3e:c5:28:12:04:cc:90:c5:28:aa:9b:
         34:a4:23:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:16:48 2026 by rpki-client