Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
File:                     0qCHG82DdsEajwSaOYVa_NsYMGQ.mft (raw, json)
Hash identifier:          ZIm+4BrfSdjaYTiGsW1XLymp9oNmDFw21TE8RiW92tE=
Subject key identifier:   87:6A:70:03:A2:8C:03:55:01:D3:B6:61:04:48:E8:10:88:4A:F2:25
Authority key identifier: D2:A0:87:1B:CD:83:76:C1:1A:8F:04:9A:39:85:5A:FC:DB:18:30:64
Certificate issuer:       /CN=A911CA82/serialNumber=D2A0871BCD8376C11A8F049A39855AFCDB183064
Certificate serial:       0736
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
Manifest number:          0718
Signing time:             Thu 22 Oct 2026 22:24:07 +0000
Manifest this update:     Thu 22 Oct 2026 22:24:06 +0000
Manifest next update:     Thu 29 Oct 2026 22:24:06 +0000
Files and hashes:         1: 0qCHG82DdsEajwSaOYVa_NsYMGQ.crl (hash: clpzGpDLJT/hP4Jn8lT/E0u73/j/MCn9MGOYrg02Ccs=)
                          2: CB304C36307111EDB0CBD946C4F9AE02.roa (hash: OsHIZ98gQcVy38hupLpiePN5LNP1PLEubxZX6vOjRUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.crl
                          rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 22:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1846 (0x736)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA82, serialNumber=D2A0871BCD8376C11A8F049A39855AFCDB183064
        Validity
            Not Before: Oct 22 22:24:06 2026 GMT
            Not After : Oct 29 22:24:06 2026 GMT
        Subject: CN=6ada8d07-0f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:16:30:63:00:16:1c:e2:0b:b6:4f:f6:8e:de:
                    25:19:2b:13:bb:4e:9e:45:ec:6b:58:3e:69:07:f6:
                    a0:58:53:ee:a0:08:15:a4:25:e4:60:2c:a3:ec:ec:
                    15:91:ba:01:64:9c:35:75:97:ab:23:d9:63:56:16:
                    2d:15:cc:d1:c8:73:6f:9d:a4:b8:9a:92:2f:0d:0c:
                    37:bb:be:89:17:ee:68:78:dd:8d:36:11:c9:4f:aa:
                    cd:90:c8:de:4c:e8:cb:40:41:0f:7c:e0:bc:40:1b:
                    33:bd:5c:ba:9b:ed:58:75:c8:18:3a:2a:f1:d9:b8:
                    db:03:9e:ce:f6:15:28:d3:ec:7e:d5:5f:3e:40:e5:
                    1d:e4:6b:20:ae:37:c7:da:a8:d0:41:4a:90:c9:48:
                    36:5a:d8:22:2b:2c:2a:2f:ef:b0:87:ce:26:85:40:
                    05:b1:fa:d0:06:a4:d5:9e:16:3d:f1:6b:c9:f1:b5:
                    86:d1:4e:c6:a7:e3:86:b6:eb:4e:fc:87:16:0b:3e:
                    bd:6f:e4:d0:a1:dc:4e:6f:27:82:fc:ed:58:5f:37:
                    54:6a:e0:65:2d:fa:07:30:f5:04:cc:69:b2:e6:42:
                    04:c8:ca:86:9e:1e:41:5c:10:ae:22:ea:df:35:34:
                    1f:8e:f5:ff:ad:5d:18:5f:e4:ba:93:54:b3:47:d3:
                    ac:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6A:70:03:A2:8C:03:55:01:D3:B6:61:04:48:E8:10:88:4A:F2:25
            X509v3 Authority Key Identifier:
                keyid:D2:A0:87:1B:CD:83:76:C1:1A:8F:04:9A:39:85:5A:FC:DB:18:30:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:8d:90:3a:3e:aa:c6:a4:ea:41:98:13:26:56:46:6b:53:0b:
         53:46:06:73:b0:17:c0:ae:f0:39:f6:c0:91:9b:26:11:f9:44:
         5a:3c:d1:e5:8c:01:be:88:54:7d:6d:37:93:66:d4:79:0c:c3:
         4b:99:1d:f7:b0:8d:bd:21:2c:34:84:8d:12:0d:d9:06:dd:a5:
         bd:11:ff:d7:98:be:96:86:6c:cc:06:4a:d2:fa:8f:16:82:05:
         fd:24:5d:e8:c0:74:b9:c7:cd:fa:58:3a:e3:9e:4e:ce:b9:2f:
         4a:eb:60:37:ed:53:23:8c:08:42:fb:ad:24:a3:ea:1b:20:2a:
         cf:ae:97:b8:39:56:dd:98:ef:f3:29:b0:13:50:f8:9d:f0:3f:
         57:11:07:17:79:19:7f:aa:58:dd:7f:ec:06:ad:af:d0:5f:92:
         3a:37:e7:f3:11:7f:de:50:8b:59:53:f8:15:13:b7:db:ca:27:
         83:c8:67:83:17:8e:46:d4:86:62:51:4e:d6:96:f5:7f:7a:a4:
         3e:ab:3e:f5:34:52:b8:e7:19:b6:45:57:cc:f4:0f:b3:d6:64:
         b5:1b:5b:57:b1:ec:8b:28:2e:20:19:96:f9:c3:bc:8d:3c:8f:
         3b:d5:92:43:cd:80:c8:f4:fc:02:ff:ec:d0:91:e8:67:f1:cd:
         00:62:ec:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:42:52 2026 by rpki-client