Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
File:                     aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft (raw, json)
Hash identifier:          wz0T/vAz/Njq+TitD2y8GAdnNlONooQH5wJh1HCUGz4=
Subject key identifier:   0D:18:13:AD:FC:71:9C:22:28:A4:69:26:B9:0C:C5:61:29:EA:1F:40
Authority key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3
Certificate issuer:       /CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
Certificate serial:       019B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
Manifest number:          0195
Signing time:             Sat 03 Oct 2026 05:03:07 +0000
Manifest this update:     Sat 03 Oct 2026 05:03:07 +0000
Manifest next update:     Sat 10 Oct 2026 05:03:07 +0000
Files and hashes:         1: aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl (hash: 2aEdOKd5/iZNaCVFpeqiVeaRE8jZ6pNjgDGR+/njmH8=)
                          2: B70A38DCABD111F08E516516C4F9AE02.roa (hash: ej0+6PRzXsgl/obiA4CQWCET70nEM66QMDL6LuBaewE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl
                          rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 05:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114D4F, serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
        Validity
            Not Before: Oct  3 05:03:07 2026 GMT
            Not After : Oct 10 05:03:07 2026 GMT
        Subject: CN=6ac08c8b-7a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c1:67:84:41:66:89:86:e4:81:c5:f5:e2:04:
                    c0:34:ba:ab:f8:52:03:16:c1:dd:fb:84:57:3b:a4:
                    06:82:6f:03:d0:ca:2f:2b:ac:6a:0f:ba:e6:f6:74:
                    0f:92:e6:1b:70:bb:49:63:14:09:80:01:b5:ab:93:
                    ff:8b:0f:fd:4c:c7:ce:21:3a:f0:66:c9:06:34:70:
                    80:01:c0:fa:f1:6d:12:cf:94:94:af:1d:ed:a3:9e:
                    a1:f0:bd:05:81:66:03:d3:28:c2:ee:91:11:02:63:
                    49:a4:f8:6e:f9:5b:61:f4:ed:03:e9:9d:af:f6:da:
                    d2:8d:67:14:bd:66:26:e2:6c:d4:d9:17:b6:91:21:
                    49:9a:e9:d6:46:bb:fd:82:0d:7d:b8:c1:bf:6e:86:
                    c5:cb:a5:0e:8d:ec:91:9c:d7:1b:33:90:47:81:90:
                    a7:a6:24:32:f8:91:52:34:0e:b9:f5:83:cb:8c:00:
                    af:07:e5:02:8e:c4:87:45:30:32:42:17:bc:59:bf:
                    fe:8b:af:bd:50:e6:25:38:b5:05:50:a3:b4:e5:37:
                    1c:09:88:eb:46:60:38:4a:37:f0:5e:4f:00:e7:dd:
                    b4:71:1b:b3:95:ea:b0:30:3b:36:55:3f:f9:6f:56:
                    5a:80:26:26:fd:66:44:66:20:0c:36:7d:e4:85:b8:
                    6b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:18:13:AD:FC:71:9C:22:28:A4:69:26:B9:0C:C5:61:29:EA:1F:40
            X509v3 Authority Key Identifier:
                keyid:68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:51:62:6b:5b:bc:cd:7f:9f:df:d4:a2:ef:69:4b:cd:9e:cf:
         73:20:74:b3:27:69:ff:c8:11:2a:ed:2e:15:24:4d:11:32:4f:
         12:79:9e:5d:79:08:2e:69:df:6e:b5:95:d8:f4:a5:e4:3b:45:
         a4:a3:c3:7b:f9:99:c9:80:16:7c:7b:44:a9:a0:ed:5d:fe:04:
         4d:79:c1:f6:bd:ef:0f:54:a4:41:7b:2b:12:41:ca:e9:6d:d7:
         43:42:b1:f3:3a:8d:b8:e0:b4:e8:7a:98:44:33:6d:ca:c3:2a:
         44:16:af:73:e0:4b:80:46:fd:3b:c1:8b:c7:78:35:0c:b7:a2:
         7d:bb:f2:28:4e:59:9d:d4:28:e9:ec:00:8c:fd:44:61:f5:5f:
         3f:14:5b:de:33:ba:3c:9e:cb:45:d2:66:8f:35:c1:43:44:14:
         6d:19:d1:64:6a:01:1b:23:ee:7e:4b:ac:42:6a:b5:58:63:3c:
         63:cc:cd:81:49:5e:a3:3b:31:0a:4c:a0:70:7f:1f:3d:84:5d:
         69:bc:24:a2:20:a3:8a:32:ed:32:f7:df:d2:51:e4:4c:e5:6c:
         20:9a:2b:98:e1:3f:52:a0:39:07:dd:ac:f2:8f:39:2e:7d:46:
         13:d5:1b:3f:3c:36:6b:7f:16:33:f0:9f:66:7c:70:16:77:85:
         f8:3e:7a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:39:11 2026 by rpki-client