Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.mft
File:                     rYQ8jfSRtv8A6PnztRksOZYqSM8.mft (raw, json)
Hash identifier:          izIGEr/WEdbVvM1BX869qPLB/r2ZbH7YtkQZK+yBWUM=
Subject key identifier:   C9:76:A9:7D:27:D3:53:CA:B7:8D:16:F7:16:5B:FF:4E:DD:D3:DB:7A
Authority key identifier: AD:84:3C:8D:F4:91:B6:FF:00:E8:F9:F3:B5:19:2C:39:96:2A:48:CF
Certificate issuer:       /CN=A911583F/serialNumber=AD843C8DF491B6FF00E8F9F3B5192C39962A48CF
Certificate serial:       2A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYQ8jfSRtv8A6PnztRksOZYqSM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.mft
Manifest number:          28
Signing time:             Sat 17 Oct 2026 09:32:18 +0000
Manifest this update:     Sat 17 Oct 2026 09:32:18 +0000
Manifest next update:     Sat 24 Oct 2026 09:32:18 +0000
Files and hashes:         1: rYQ8jfSRtv8A6PnztRksOZYqSM8.crl (hash: hZQEOQOEobZ2uAA7M15O3NV1kD7//dUiC9fiEYU9pdY=)
                          2: 72D413B290EC11F1A202C1754A11F970.roa (hash: Arcy6owVvYDgskgZwg06kTzf4YUjIwfvXCvbOmqa3OQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.crl
                          rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYQ8jfSRtv8A6PnztRksOZYqSM8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 09:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911583F, serialNumber=AD843C8DF491B6FF00E8F9F3B5192C39962A48CF
        Validity
            Not Before: Oct 17 09:32:18 2026 GMT
            Not After : Oct 24 09:32:18 2026 GMT
        Subject: CN=6ad340a2-23c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f3:32:75:60:6b:29:b8:57:3e:5e:a1:14:af:
                    2c:f1:ea:20:fd:04:c9:41:be:af:17:2f:08:c9:cd:
                    aa:19:73:63:a1:34:4c:2f:4d:f2:e3:67:94:96:42:
                    bd:aa:ca:36:5b:0f:7c:23:6e:f5:a7:8f:69:96:d0:
                    27:df:db:0e:8b:59:b1:b3:6a:cd:22:ae:9b:78:6e:
                    ed:63:63:85:1e:c2:b8:cc:83:12:f1:fd:e1:f0:c5:
                    7f:67:3f:f4:79:fb:c7:40:41:82:69:c2:a4:c9:2e:
                    50:6a:9e:06:c9:5b:0c:d4:24:c1:1b:d4:a9:69:0f:
                    d7:10:d6:52:13:27:03:a0:2d:c2:07:78:f9:3b:74:
                    89:79:7d:76:a4:fd:b9:a2:53:ab:42:aa:9f:a3:da:
                    09:71:f1:3b:ce:8c:a7:97:f5:99:be:66:24:20:44:
                    c3:f5:70:f0:04:0a:d8:9f:b2:be:80:79:5a:6e:a8:
                    25:d9:7f:57:4e:36:b2:5a:ec:a2:50:a2:dd:c3:b4:
                    ca:f1:e6:07:1a:cd:c7:69:f5:6b:8e:a5:67:b6:55:
                    c3:84:a8:82:92:90:9c:11:9d:8e:bb:bf:ca:b1:f7:
                    c6:24:a4:db:df:57:08:14:b9:db:00:c6:cd:ce:8d:
                    a3:93:47:85:cb:5c:e4:f6:99:37:2a:4e:b9:b6:f1:
                    57:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:76:A9:7D:27:D3:53:CA:B7:8D:16:F7:16:5B:FF:4E:DD:D3:DB:7A
            X509v3 Authority Key Identifier:
                keyid:AD:84:3C:8D:F4:91:B6:FF:00:E8:F9:F3:B5:19:2C:39:96:2A:48:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYQ8jfSRtv8A6PnztRksOZYqSM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:c9:44:4e:67:45:15:72:e7:63:4e:c8:2a:00:f4:1d:c1:8a:
         43:63:7a:53:1a:29:23:56:c1:f7:9f:fd:01:02:cf:53:80:9d:
         42:82:0d:3a:33:9e:aa:69:5f:12:e6:46:0f:08:91:11:8b:23:
         21:12:36:07:0e:a7:0c:34:24:63:6e:73:33:c7:fe:32:3a:1c:
         b8:26:f5:80:51:50:1d:5b:3e:c8:7a:ad:12:7c:e5:fc:2d:00:
         8e:e3:43:e4:2a:7d:d8:26:65:47:76:bc:89:87:e6:60:af:a1:
         a7:88:b5:43:9a:0a:a0:7b:49:09:16:92:d6:92:af:80:97:f4:
         7a:79:b5:79:8b:72:b6:f7:e5:44:04:76:aa:35:44:41:e1:30:
         25:a9:de:f7:e5:09:46:02:74:bb:b7:63:79:27:11:41:8c:26:
         4a:35:cd:78:c5:1b:01:cc:60:72:14:e8:5f:96:c5:1b:c5:ee:
         ca:b0:b4:e0:99:f5:54:dc:49:99:cc:c1:13:db:29:07:04:ea:
         95:f7:06:ef:e5:e4:24:21:94:de:d5:d9:04:f1:86:54:a5:c8:
         8e:ba:25:4e:35:59:75:89:e7:e8:5b:4f:8b:78:41:38:60:fc:
         a6:59:0f:b2:f3:d4:71:5f:13:c0:49:a8:62:7c:4b:0e:f6:a0:
         c2:54:5c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 18:09:37 2026 by rpki-client