Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
File:                     40soVCBWzp4GUP78CrEkIWy1-cE.mft (raw, json)
Hash identifier:          lytYR0lMhtlPFkaqVShAK573O8ah2oNRA5j6tSc9PcE=
Subject key identifier:   19:C6:B9:BD:ED:B4:B7:3F:02:D2:11:D8:97:FB:EE:85:AC:26:EB:65
Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1
Certificate issuer:       /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1
Certificate serial:       03F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
Manifest number:          03E3
Signing time:             Sun 25 Oct 2026 00:25:12 +0000
Manifest this update:     Sun 25 Oct 2026 00:25:11 +0000
Manifest next update:     Sun 01 Nov 2026 00:25:11 +0000
Files and hashes:         1: 40soVCBWzp4GUP78CrEkIWy1-cE.crl (hash: +jTS7PsirW1b9Q/Zbk2VUHozy49/F2rbQSciIjzuo68=)
                          2: FB1BF574E7E411EC84283679C4F9AE02.roa (hash: bukBEThLb8LLsXrODRbnH9Gix64A0cuXZRIF6w/C3PQ=)
                          3: FBB9FE90E7E411EC84283679C4F9AE02.roa (hash: EnYUnwhxxmGS1rufxU7RsXLHu/nIHXPSapF4Xv6tzXQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl
                          rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 00:25:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1013 (0x3f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C6E1, serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1
        Validity
            Not Before: Oct 25 00:25:11 2026 GMT
            Not After : Nov  1 00:25:11 2026 GMT
        Subject: CN=6add4c68-2351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:96:6f:a8:95:80:56:d6:ca:c0:bf:9d:67:0c:
                    be:a3:ce:23:ab:2c:5e:09:b0:1d:fd:0a:66:1c:91:
                    04:ae:42:91:94:4e:2a:b9:47:e0:07:06:ec:9e:89:
                    32:65:7b:0c:91:12:11:ea:1c:83:a4:a8:28:64:ab:
                    01:83:d4:0e:13:af:1e:3d:47:f9:e0:1d:6e:6b:e0:
                    e0:d7:8c:7b:59:62:b4:15:f1:40:8a:c8:7f:3f:d0:
                    e9:46:4b:f5:4a:d4:09:ea:ea:bb:08:fa:52:0d:04:
                    72:aa:e6:de:86:cb:ea:06:ec:2c:84:26:d7:6a:d6:
                    5b:fd:df:6e:79:ab:24:78:e9:b4:a5:29:30:3e:3f:
                    0a:e8:72:2a:d3:1b:38:2b:be:18:bb:2f:f6:9f:8d:
                    fb:d1:9f:ac:bf:1e:54:d4:6b:89:f2:4e:71:4c:38:
                    98:0d:2a:32:65:f6:e3:46:7a:d2:66:6a:97:bb:84:
                    71:a5:b7:eb:48:7f:dc:93:67:c8:04:69:19:06:aa:
                    1e:86:2b:eb:84:66:e7:e1:d4:52:b5:b1:7a:f2:a3:
                    c5:2d:7c:a2:73:45:e7:f6:7b:d2:39:25:d6:4b:23:
                    fa:11:e0:1b:0f:0e:0d:c8:95:b2:4f:f9:df:39:6c:
                    20:1b:c8:a9:3e:d9:65:e0:5a:98:fd:29:8f:ae:9e:
                    c6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C6:B9:BD:ED:B4:B7:3F:02:D2:11:D8:97:FB:EE:85:AC:26:EB:65
            X509v3 Authority Key Identifier:
                keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:90:c0:c0:b1:01:fe:7f:97:55:90:55:f4:f0:d9:ed:88:83:
         60:1b:ee:9f:5d:d4:c7:67:91:bd:e3:f5:53:3d:dc:15:96:f1:
         12:6d:e0:a5:7f:31:d1:b3:4a:0f:62:c7:27:0e:f3:53:42:47:
         9f:7f:a5:a5:c2:1c:3e:66:23:2e:ae:94:07:09:71:f7:6d:d6:
         c2:39:96:e1:e4:91:9b:90:42:a1:29:f9:70:b3:e8:4e:98:59:
         d4:7a:a5:8b:11:d5:dd:1d:47:fa:6e:6c:21:9d:7f:ef:4a:25:
         6f:6b:fa:65:d7:0e:0b:ad:09:5e:cb:9d:84:d7:b1:18:17:a2:
         24:49:71:86:8b:3d:2b:2e:d4:25:de:66:4d:f1:b8:40:fd:57:
         a8:de:7d:33:f3:d9:76:cd:65:8f:fc:1b:25:a0:d6:50:6a:85:
         57:11:a7:74:5f:56:32:79:ee:66:c7:a0:68:b5:92:ad:cf:c1:
         b9:66:14:26:f3:e4:b0:9d:6a:8d:81:06:6b:b9:71:6d:d2:d9:
         b9:ff:88:36:c8:42:57:57:b4:fc:90:41:23:e4:9a:b1:64:1d:
         d3:22:e8:46:6e:e1:13:da:5c:41:d7:2d:42:3d:1a:63:df:8e:
         68:bd:08:10:5e:30:01:69:39:3e:55:dc:e5:45:30:19:3a:f2:
         b4:8d:9f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:44:02 2026 by rpki-client