Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
File:                     G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft (raw, json)
Hash identifier:          9hOMYJWfE2W80QOEmooCIEnGJ02DXzKWXQ1OLsYSZ4A=
Subject key identifier:   44:B5:DE:70:76:D9:1E:B9:93:E4:23:2F:3F:0D:A7:A5:3E:83:C2:24
Authority key identifier: 1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90
Certificate issuer:       /CN=A9110A69/serialNumber=1B6E3292C835654E491492E5584CF993F05BD990
Certificate serial:       0CBD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
Manifest number:          0CB4
Signing time:             Sat 10 Oct 2026 18:37:28 +0000
Manifest this update:     Sat 10 Oct 2026 18:37:27 +0000
Manifest next update:     Sat 17 Oct 2026 18:37:27 +0000
Files and hashes:         1: G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl (hash: C3r3pjLHYbPb6rp1MXuqWlZEZKEOPU9YurEkROPxBEM=)
                          2: 1407117C216311EA90D74C52C4F9AE02.roa (hash: rmYnuMOnsWqJ1EMxIYJ3/6l6BUhvQSL5XzWmFrIJCBU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl
                          rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 18:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3261 (0xcbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110A69, serialNumber=1B6E3292C835654E491492E5584CF993F05BD990
        Validity
            Not Before: Oct 10 18:37:27 2026 GMT
            Not After : Oct 17 18:37:27 2026 GMT
        Subject: CN=6aca85e7-307d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a7:36:0e:c3:97:67:cd:19:71:59:0d:04:38:
                    13:4f:d4:50:fd:43:69:0c:dc:19:cd:e1:cb:ff:82:
                    d4:a9:7f:9a:35:75:84:33:32:6c:b7:36:bb:ff:9e:
                    ee:c2:29:47:54:86:76:c8:dc:c3:0a:3f:0f:57:7f:
                    27:05:24:ca:a7:0e:7e:a4:ae:19:d2:59:1f:80:cd:
                    ee:34:12:4e:4f:81:ae:6d:15:bb:ec:d2:1f:50:d6:
                    7a:34:7f:86:42:05:8b:be:8c:c6:1f:20:84:6e:97:
                    b1:9f:9b:77:02:da:84:4c:b0:b8:bc:da:45:a3:7c:
                    c3:5a:55:13:e6:44:f0:72:fc:54:fd:63:78:10:53:
                    84:aa:50:31:8d:67:6e:91:f5:bb:e0:9d:bd:7d:7a:
                    fb:a7:6a:84:6f:4b:90:c2:48:1b:b3:9e:20:16:ee:
                    61:2f:1f:60:39:b9:b7:7f:9b:1f:c1:77:d7:44:ef:
                    9e:d1:1f:3b:7d:f0:59:67:73:2b:31:5d:03:df:bd:
                    34:43:02:45:6b:88:c2:11:17:8d:14:2b:b9:2e:c6:
                    c3:64:45:2f:91:65:0f:d7:c5:4e:52:87:2f:1e:1d:
                    72:9e:44:1d:8b:30:d8:b2:ab:08:25:7a:61:6b:25:
                    87:38:6c:60:b4:e9:0a:13:00:21:0f:81:d3:2e:d3:
                    d6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B5:DE:70:76:D9:1E:B9:93:E4:23:2F:3F:0D:A7:A5:3E:83:C2:24
            X509v3 Authority Key Identifier:
                keyid:1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:be:18:e4:7b:1e:8b:8c:1f:a5:18:48:8d:b4:5f:59:27:31:
         c9:f3:30:99:76:01:37:27:0d:6b:e6:b5:0b:d1:70:14:02:bf:
         b3:70:2f:fa:65:2f:26:8f:51:1b:ba:4f:d6:71:2c:ca:22:ab:
         e6:b8:e6:26:f7:fe:90:7f:fe:dc:6f:59:dc:57:e4:10:6a:be:
         dc:21:3a:5b:78:5a:f2:02:8e:c1:8e:c8:2e:8e:ab:c8:d9:73:
         89:f9:13:e5:48:6b:ff:72:d9:01:e6:3c:d9:a3:e7:ce:3e:4c:
         22:c1:91:a2:c9:9c:2c:85:8a:40:f4:ba:26:33:1b:03:32:7e:
         34:18:ff:f1:88:b5:23:39:a1:2d:83:f0:72:d8:50:c0:db:ed:
         f5:ac:03:bd:08:a1:fe:2d:04:f1:f0:08:73:64:e1:59:33:e7:
         e4:03:c1:84:e7:a6:21:0a:40:ff:88:4d:8f:c2:6b:bf:66:ad:
         de:4a:b3:ce:3d:cc:38:13:65:ab:c0:33:6d:31:df:a0:a1:65:
         55:9d:31:91:fb:d5:af:79:b6:23:78:17:66:33:8c:ed:c4:5e:
         79:6d:d4:1a:3a:41:6a:ff:2e:c7:c2:99:0f:b1:21:51:e7:ee:
         2c:fa:66:d1:17:1e:f5:c0:4c:16:17:e1:76:81:07:1d:20:01:
         f0:a9:8e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:34:54 2026 by rpki-client