Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
File:                     jSAgfR7bX1wtZjsKahC81AutOt4.mft (raw, json)
Hash identifier:          U6AH0eV7zv0ZldmT5BuSwMaDm4niTZngMb0nVa4OJQI=
Subject key identifier:   DC:FB:71:8A:76:91:AC:D3:74:01:54:73:0D:87:C9:CB:96:57:5F:C2
Authority key identifier: 8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE
Certificate issuer:       /CN=A9185D6E/serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
Certificate serial:       050A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
Manifest number:          04EE
Signing time:             Mon 26 Oct 2026 22:25:51 +0000
Manifest this update:     Mon 26 Oct 2026 22:25:50 +0000
Manifest next update:     Mon 02 Nov 2026 22:25:50 +0000
Files and hashes:         1: jSAgfR7bX1wtZjsKahC81AutOt4.crl (hash: FIzW/CxQ41tEGhdXgH95Udd2B+P7+t+9ZprHCQS8G6s=)
                          2: A97B2098C70811ECBAECCC78C4F9AE02.roa (hash: 2bQYhSZcJ4BtlNj5FI7uxu6AOJTLtYVvnOaTPN177HE=)
                          3: AA14FB00C70811ECBAECCC78C4F9AE02.roa (hash: RkUrfqNf2DLM9GOP2QwpY5DxbEqC3xiylu4xOiLmvVU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl
                          rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 22:25:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1290 (0x50a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D6E, serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
        Validity
            Not Before: Oct 26 22:25:50 2026 GMT
            Not After : Nov  2 22:25:50 2026 GMT
        Subject: CN=6adfd36f-e74e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0f:ba:24:93:bf:20:9e:cd:a3:a0:f9:50:d3:
                    c2:7a:58:72:73:f7:4d:05:92:cd:e7:86:07:9a:7e:
                    6a:d3:06:09:ee:39:88:b2:68:67:cc:52:7a:5f:9e:
                    05:9e:d4:7c:cc:0d:b4:33:7a:9a:14:f0:8e:88:02:
                    73:e8:52:3f:ef:d1:7e:48:84:d1:94:57:db:6e:02:
                    88:54:f6:7c:9e:33:02:f1:59:8e:4c:8b:27:92:6d:
                    70:14:73:dc:1d:94:32:31:6a:a1:32:06:91:c7:e1:
                    2c:6f:66:32:d7:bb:4a:91:62:9d:e9:f6:20:81:54:
                    6d:81:f3:82:de:88:1a:42:30:df:eb:e6:91:40:7e:
                    b6:0f:5d:0f:17:3d:65:9b:bd:2c:72:cd:07:b2:07:
                    70:fa:93:92:1d:e9:5f:7b:d9:24:fb:99:23:9f:c1:
                    16:36:81:97:b2:ca:e7:33:2c:b4:ab:af:8e:32:83:
                    9a:98:ff:67:16:45:cf:80:2a:2d:b2:81:a0:cf:e8:
                    57:8e:51:15:c8:af:dd:35:54:c0:5c:93:db:41:82:
                    13:2f:a5:5d:12:29:94:69:e2:92:25:bb:36:4b:58:
                    a3:ad:b0:59:6c:78:a6:f8:08:ea:f6:27:41:25:ef:
                    8e:c6:2c:66:5d:82:fd:b2:69:71:b4:f8:38:31:1b:
                    3d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FB:71:8A:76:91:AC:D3:74:01:54:73:0D:87:C9:CB:96:57:5F:C2
            X509v3 Authority Key Identifier:
                keyid:8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:60:74:68:5b:7f:43:8c:ab:6a:00:3c:87:47:1e:99:a8:f6:
         15:44:6a:23:1f:b7:3e:03:95:f8:3a:3e:60:76:b5:fa:6e:b9:
         c6:1c:0e:2a:f3:fa:9c:32:5f:27:80:94:08:5a:c1:02:37:91:
         9c:a8:8a:ab:ac:4a:44:18:6c:ea:48:d8:7c:7d:25:aa:59:06:
         59:73:c8:37:ab:93:7f:ce:15:59:cd:cc:7c:e8:6f:06:75:e2:
         8d:6d:b2:e9:9f:df:14:0a:1f:ac:7f:ba:e0:4a:79:c9:4b:17:
         54:68:b4:52:23:f0:3c:34:c5:de:2f:f5:43:a2:b1:00:38:40:
         c8:b5:a8:7c:0f:78:4a:00:c5:36:43:bd:63:9b:38:2c:ef:08:
         9e:96:8b:47:7d:98:4c:44:c5:93:61:8a:f6:4b:bf:a9:e1:cb:
         df:bc:45:cb:18:41:1b:a9:23:c2:a7:fd:8a:da:9c:fc:c4:a2:
         1a:39:11:8d:41:b6:7a:ba:fd:da:b7:7b:05:0b:17:bf:82:35:
         59:84:92:5c:bb:a9:e7:b3:4c:cd:ec:49:42:86:ed:17:7f:80:
         53:24:c0:b5:b1:39:1c:64:68:5b:65:74:56:b4:ec:7c:8a:60:
         3c:9c:e2:6d:1f:0f:41:7e:cb:62:b2:9f:22:fd:45:92:3c:ff:
         79:1a:3d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:54:32 2026 by rpki-client