Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft
File:                     j8P43lI68p2yShWQ_UCgRHWuCiU.mft (raw, json)
Hash identifier:          uGvWz6tyeukiwKBIaEBBpw77zipFhNQJ9zBkKUGTiTU=
Subject key identifier:   CE:DB:4F:BB:5B:1B:10:73:36:2E:FD:DE:F2:7C:39:7C:24:F2:24:C0
Authority key identifier: 8F:C3:F8:DE:52:3A:F2:9D:B2:4A:15:90:FD:40:A0:44:75:AE:0A:25
Certificate issuer:       /CN=A911AB93/serialNumber=8FC3F8DE523AF29DB24A1590FD40A04475AE0A25
Certificate serial:       1F45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8P43lI68p2yShWQ_UCgRHWuCiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft
Manifest number:          2138
Signing time:             Tue 06 Oct 2026 16:01:58 +0000
Manifest this update:     Tue 06 Oct 2026 16:01:58 +0000
Manifest next update:     Tue 13 Oct 2026 16:01:58 +0000
Files and hashes:         1: j8P43lI68p2yShWQ_UCgRHWuCiU.crl (hash: 16gF7AR6Sc9pl/vKYKT/n36ptY/ACcLGg9zyoexuqaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.crl
                          rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8P43lI68p2yShWQ_UCgRHWuCiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8005 (0x1f45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AB93, serialNumber=8FC3F8DE523AF29DB24A1590FD40A04475AE0A25
        Validity
            Not Before: Oct  6 16:01:58 2026 GMT
            Not After : Oct 13 16:01:58 2026 GMT
        Subject: CN=6ac51b76-73cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a2:bc:fe:c2:ce:f3:c1:9b:51:12:4e:61:8b:
                    37:c9:be:be:35:61:5c:dc:8a:3e:28:19:2f:cb:0b:
                    bf:51:49:73:29:0d:30:c4:3c:6b:08:8f:98:12:57:
                    96:42:1c:5e:18:41:b7:55:3c:63:0b:16:ca:7d:24:
                    4d:25:63:30:ef:57:e2:d4:43:c8:5e:5b:f4:7c:4d:
                    fc:6a:ab:8a:5e:b8:e1:96:f2:80:3b:6f:cb:60:5d:
                    7b:44:eb:2f:32:4c:7f:79:88:94:5a:65:39:7e:a8:
                    8c:25:ec:bc:3a:89:19:12:04:9b:1a:66:8e:c4:4b:
                    78:44:a9:6e:6c:71:94:54:e1:a0:1d:45:bb:70:f8:
                    3c:3e:10:4d:6c:78:e2:3f:86:9b:80:bf:50:9c:4c:
                    04:44:e9:cd:ea:c0:03:6f:c4:b7:31:2a:1d:5c:0a:
                    93:46:08:41:74:58:e3:42:79:2a:7e:8f:0f:e3:96:
                    cd:b6:ed:82:d6:86:af:4f:4e:c1:8c:d3:cf:e0:83:
                    0c:c0:13:4e:7c:c5:76:20:f6:91:3e:8a:da:af:f1:
                    17:00:6b:15:b9:85:31:18:d8:28:e7:d2:a4:d2:e5:
                    03:d4:21:fe:6f:b7:ea:64:ed:d4:61:3c:32:cc:01:
                    d9:95:29:88:73:64:87:43:7a:f3:a1:11:d9:91:55:
                    d1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DB:4F:BB:5B:1B:10:73:36:2E:FD:DE:F2:7C:39:7C:24:F2:24:C0
            X509v3 Authority Key Identifier:
                keyid:8F:C3:F8:DE:52:3A:F2:9D:B2:4A:15:90:FD:40:A0:44:75:AE:0A:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8P43lI68p2yShWQ_UCgRHWuCiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:87:39:12:e1:81:ea:d1:32:25:1f:cb:32:e6:2f:22:ce:02:
         cd:c1:b1:12:20:eb:1e:6d:32:df:01:cc:aa:8d:fd:69:23:46:
         86:e3:f3:f3:0f:ff:79:2b:3c:3c:e4:17:3b:29:0d:7e:f6:c0:
         c0:8a:00:80:ea:a1:47:3c:83:a1:0c:6c:50:be:15:6b:90:17:
         3f:e4:66:6e:cf:71:a0:71:69:91:48:aa:e0:17:86:6d:15:3b:
         a6:80:29:0a:c6:13:32:21:27:e6:59:ea:91:83:1f:2e:5d:e7:
         59:d6:b6:17:3b:4c:db:6a:03:8f:75:c2:fc:34:c2:eb:f3:6d:
         f8:a4:4d:a8:d4:38:5a:e2:c8:6f:bd:e7:83:b8:e9:2f:01:74:
         ba:be:ed:c1:67:54:87:e1:2c:3e:1e:84:15:9f:c4:13:23:60:
         dc:79:c1:5b:14:ba:74:f6:fb:fc:1e:f6:5d:b7:b2:8d:f4:45:
         d9:28:32:3a:9a:40:44:32:61:09:f8:9c:bc:78:e2:b7:5e:96:
         ef:f0:15:94:8b:01:4d:4d:fb:51:53:23:18:a9:a4:05:7f:63:
         a4:14:76:bd:ba:1a:ab:2f:cc:86:b3:cd:75:ac:7c:9a:19:c6:
         ee:43:a9:d5:d8:e6:9f:c1:78:de:ba:c8:e4:8b:0e:f4:38:fb:
         39:ce:7d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:10:16 2026 by rpki-client