Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft
File:                     X-MMr29aMskZ0zWqlNDnMzzQVDU.mft (raw, json)
Hash identifier:          niKea1fblF73H1PYea0W14r9S2pUeL7UdtQdzlxr07U=
Subject key identifier:   F9:39:AC:81:64:74:BE:23:CF:3B:D4:E0:BE:05:F2:D3:AC:71:11:B0
Authority key identifier: 5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35
Certificate issuer:       /CN=A911E403/serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435
Certificate serial:       08EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft
Manifest number:          08D6
Signing time:             Fri 02 Oct 2026 20:47:46 +0000
Manifest this update:     Fri 02 Oct 2026 20:47:46 +0000
Manifest next update:     Fri 09 Oct 2026 20:47:46 +0000
Files and hashes:         1: X-MMr29aMskZ0zWqlNDnMzzQVDU.crl (hash: t1qgtXNnVvHahaBHCt01QqH0s50hUHwr1Yo2HU2bCro=)
                          2: FE02E774CFFD11EC8CFDFF68C4F9AE02.roa (hash: 2Maf3v2VZsNOpIAQqqccO19G1/PtM5yi2MTvmVK+OA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl
                          rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 20:47:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2287 (0x8ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E403, serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435
        Validity
            Not Before: Oct  2 20:47:46 2026 GMT
            Not After : Oct  9 20:47:46 2026 GMT
        Subject: CN=6ac01872-ddf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fa:75:46:42:25:3c:74:25:71:60:a9:a9:dc:
                    49:94:7d:7c:9c:cf:35:2e:ea:38:cb:1f:90:82:d9:
                    0b:24:b0:a3:c0:f9:b1:53:b8:0a:04:48:2e:89:8a:
                    dc:eb:41:ad:94:3e:28:22:cb:a6:77:db:43:86:e3:
                    f0:3c:9a:e8:35:ba:36:ee:2c:f9:24:c9:89:bc:c4:
                    bf:72:f2:0d:3a:a3:12:f7:8d:7a:3a:88:f8:4e:68:
                    f0:30:f6:d9:3d:d0:e5:82:b6:65:b9:be:af:8a:01:
                    ed:09:dc:42:b6:ba:c0:00:59:e8:fd:db:73:c8:e3:
                    1b:37:40:4e:53:84:6e:ac:1a:4e:5d:fb:22:7e:0d:
                    6d:38:39:8c:9b:8b:c7:6b:64:2a:3b:ac:3a:69:62:
                    b5:43:bd:04:05:11:3f:95:e8:d3:5d:0a:82:3b:14:
                    5a:00:9f:9d:78:d6:c4:78:c7:51:0c:08:b7:16:41:
                    19:05:83:0e:61:c4:d5:0b:3c:41:a0:ee:c3:7a:84:
                    98:fd:99:58:74:67:0c:9b:3f:4a:3f:4e:b0:2e:01:
                    8d:48:28:6c:9e:eb:fd:71:cf:4b:2d:82:b0:c3:eb:
                    f5:2d:1d:37:14:9d:6f:84:70:13:37:46:e7:88:85:
                    4e:bd:fa:60:fc:07:08:ef:b3:a5:c2:15:a0:56:ff:
                    8d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:39:AC:81:64:74:BE:23:CF:3B:D4:E0:BE:05:F2:D3:AC:71:11:B0
            X509v3 Authority Key Identifier:
                keyid:5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ca:e6:dc:57:4f:8a:cf:d8:4f:59:d5:37:80:59:20:7b:a9:
         9e:de:74:fc:a7:f6:14:60:5d:38:5a:8d:58:cd:11:af:88:7d:
         db:d2:a8:64:7d:a4:85:29:1e:fd:03:76:1d:7e:9d:c8:ca:d0:
         fc:f5:c5:51:ab:f4:d2:66:5e:3c:7a:df:09:f9:21:da:3a:4f:
         59:c3:53:7e:3d:62:61:78:bd:39:f0:6f:e5:d2:11:c2:3a:d5:
         21:a0:80:ec:d7:60:a6:c2:76:ac:e4:44:56:9b:75:ab:19:f1:
         ec:c6:34:66:b6:b4:a0:ab:58:4d:d5:07:e8:86:f1:5c:71:e9:
         75:ec:c5:86:fa:03:b2:41:84:ed:3a:00:9c:0d:e8:34:30:01:
         ed:2f:18:65:33:99:aa:38:43:96:b4:c7:aa:1a:61:f7:b0:45:
         7d:a8:4e:bf:c7:b2:ab:21:bd:34:b9:8c:f1:f7:1a:a0:3a:56:
         f7:b0:c2:ba:d3:c8:6b:f8:e3:b2:aa:3e:e4:91:d4:40:ae:db:
         d7:1e:e0:7e:51:19:bb:3e:8b:9b:6c:40:79:64:01:29:02:eb:
         21:62:81:c6:73:dc:f1:68:9d:50:c7:8d:c5:30:cd:69:93:d4:
         39:e6:ad:53:5b:c8:95:3f:71:12:00:b3:3f:3e:c5:fa:8c:2d:
         ce:91:33:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:14:36 2026 by rpki-client