Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
File:                     rtuffjhfpkQ204S8t7kuCUaVVDM.mft (raw, json)
Hash identifier:          bOUTPOb9ZA/quEHmi9BEVIXGL9clly1Lv/Y7CAZUtFw=
Subject key identifier:   60:63:64:5F:DC:68:CB:2A:E1:C1:B4:5D:A8:D6:48:54:3F:AA:24:06
Authority key identifier: AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33
Certificate issuer:       /CN=A911424D/serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
Certificate serial:       0FEE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
Manifest number:          0FE3
Signing time:             Fri 02 Oct 2026 17:39:32 +0000
Manifest this update:     Fri 02 Oct 2026 17:39:31 +0000
Manifest next update:     Fri 09 Oct 2026 17:39:31 +0000
Files and hashes:         1: rtuffjhfpkQ204S8t7kuCUaVVDM.crl (hash: JPa+jshc73uWzw2CNxLhi1ZZym2hK9hQgx9QfZE9X7I=)
                          2: 87625FC0812011E9890A4533C4F9AE02.roa (hash: u4b39LERYxtHengB62eXizRE7PkAX3ZeqYrkbaC1gEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl
                          rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 17:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4078 (0xfee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911424D, serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
        Validity
            Not Before: Oct  2 17:39:31 2026 GMT
            Not After : Oct  9 17:39:31 2026 GMT
        Subject: CN=6abfec53-2fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:ff:c7:a8:fc:88:9c:2e:78:08:43:07:4b:
                    d5:b9:d6:46:88:1b:17:95:9e:f8:54:0c:c3:53:4d:
                    de:e2:89:c8:52:a0:f7:63:73:a8:76:9e:58:ed:f1:
                    86:67:79:23:b2:e9:e5:90:93:d4:cd:5b:ae:53:00:
                    e5:21:4b:91:21:92:01:51:05:93:be:76:07:19:55:
                    20:14:cf:3e:d6:e2:6e:3e:eb:13:1c:2e:fa:24:73:
                    9e:e2:4c:05:58:1e:c1:39:22:8c:c5:a3:40:72:3d:
                    c8:6b:86:7c:94:24:c3:8a:18:ec:cc:1f:56:31:79:
                    73:7f:81:1c:c3:31:02:d2:6a:4d:ba:ac:71:82:ba:
                    d0:55:c0:e4:5b:04:03:96:0b:b4:33:66:ee:f4:46:
                    f2:69:61:8f:58:f5:f8:6b:6e:02:18:c3:66:64:23:
                    30:5d:ea:42:fb:76:43:45:da:93:a8:27:25:45:73:
                    67:a9:07:e4:55:62:27:bc:63:02:93:21:b1:15:ec:
                    d1:10:90:90:42:ce:37:ed:cd:73:18:ce:ab:d3:fa:
                    00:4e:fd:44:e5:32:1b:3d:2c:3b:75:88:3a:67:43:
                    33:c9:fe:8e:76:16:98:ae:24:c4:a5:8d:eb:63:f8:
                    a0:06:03:9f:f8:a5:86:99:ae:62:b4:39:9a:4f:16:
                    2a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:63:64:5F:DC:68:CB:2A:E1:C1:B4:5D:A8:D6:48:54:3F:AA:24:06
            X509v3 Authority Key Identifier:
                keyid:AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:98:8c:3b:c4:7b:a7:c9:1c:9f:ef:12:1b:67:91:9a:2e:4a:
         d2:01:78:81:31:7a:85:e4:cb:3e:0a:56:c6:ed:70:03:06:d5:
         f9:1d:e0:56:c5:be:2b:f0:34:1d:13:9a:aa:57:d7:09:6c:64:
         50:a7:73:88:3e:21:68:3b:20:c6:62:cb:70:dd:67:05:43:c2:
         80:17:59:27:10:3e:97:75:c7:3d:c1:5f:df:37:16:b5:fa:90:
         ed:cc:22:0a:28:ec:df:05:b6:b1:e6:04:f7:ce:7a:bf:fb:18:
         05:5d:6f:83:6e:40:bb:b3:0f:0b:39:c3:a2:71:6f:fc:01:11:
         bc:93:66:17:ce:71:0c:ce:c3:06:58:68:ff:2f:ab:5d:3a:75:
         e3:01:a2:28:5d:dd:d9:36:fd:43:78:05:99:02:94:8d:e0:d1:
         75:60:99:57:2d:85:37:e6:3d:ef:c1:bc:cd:e3:17:64:5e:d7:
         d4:8d:0d:59:25:1b:5b:a2:5a:33:8f:ae:91:77:39:0a:cc:d9:
         44:e6:7a:98:c4:53:7e:23:a6:b1:0d:89:b4:1e:67:8c:38:a2:
         81:2f:3b:62:8c:9a:17:88:47:8a:2f:ee:01:76:4f:61:ad:ba:
         d0:88:35:21:f2:79:bd:15:6e:c2:b0:56:bc:18:01:14:aa:0e:
         7a:12:34:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:43:14 2026 by rpki-client