Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
File:                     diAma5iRohjA5fLvKI94LVcX8rw.mft (raw, json)
Hash identifier:          AJ2/JWo2YSvJ9rOXmSUNqchcLWCUyd/fJoAhIqSrcIE=
Subject key identifier:   92:46:C5:51:99:54:F4:02:61:6B:C9:96:74:8F:CD:5D:AE:9A:6C:50
Authority key identifier: 76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC
Certificate issuer:       /CN=A911E660/serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC
Certificate serial:       014C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
Manifest number:          0148
Signing time:             Fri 09 Oct 2026 06:02:16 +0000
Manifest this update:     Fri 09 Oct 2026 06:02:16 +0000
Manifest next update:     Fri 16 Oct 2026 06:02:16 +0000
Files and hashes:         1: diAma5iRohjA5fLvKI94LVcX8rw.crl (hash: c8QQqyDHKOc/1PySwJwjYiwOxrtQikk6kHTpL+UPB3s=)
                          2: 4ECE44B0D24311EF919B6D12C4F9AE02.roa (hash: Duer1WVGQHeYZI/Azd1wOhsGz2PF1wG4VU8KdNzFWQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl
                          rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 06:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E660, serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC
        Validity
            Not Before: Oct  9 06:02:16 2026 GMT
            Not After : Oct 16 06:02:16 2026 GMT
        Subject: CN=6ac88368-dea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8c:ed:c4:b9:42:f9:34:78:3b:d5:63:4d:ca:
                    89:e1:37:6c:f3:89:ab:47:d4:8d:1f:5f:ee:78:e9:
                    76:f1:87:9f:9d:1a:12:66:83:17:ca:ac:44:b6:24:
                    8c:7e:0d:af:12:c4:2e:5b:82:11:e1:b8:61:1f:2c:
                    cf:62:5f:c9:1e:6a:bc:5e:ef:45:16:fb:fa:5a:59:
                    0e:13:93:01:ff:d0:6e:ca:84:d6:1b:94:71:ad:d8:
                    b6:66:7b:49:ab:d3:e9:ae:c0:fc:72:9c:bb:9d:fc:
                    b0:68:09:71:4d:8b:dd:df:61:12:44:6f:67:ff:42:
                    80:bf:6a:2a:d0:83:c0:30:52:1e:e9:32:b6:96:81:
                    a2:20:75:2f:78:c0:f0:da:57:ab:f3:b8:3b:eb:93:
                    47:26:84:0d:7a:61:32:42:9b:95:a3:2a:67:eb:42:
                    f3:5e:ab:04:7f:5b:fb:23:e4:95:ff:91:85:e3:91:
                    23:dc:f5:f3:ef:f1:ef:8a:e5:c0:59:39:98:6f:0b:
                    dc:89:b5:a6:6f:d1:e8:97:70:dd:a4:dd:35:53:08:
                    ab:01:8f:ba:59:42:cc:0a:95:c0:2a:a7:74:d5:25:
                    97:ef:47:c2:e0:8c:0a:f1:73:d7:8b:7e:bf:78:ba:
                    3f:3a:43:0a:1f:f7:23:3f:ce:6c:38:e6:43:e3:4a:
                    a2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:46:C5:51:99:54:F4:02:61:6B:C9:96:74:8F:CD:5D:AE:9A:6C:50
            X509v3 Authority Key Identifier:
                keyid:76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:47:85:c4:87:96:99:54:60:9f:a6:a7:6b:ec:1f:0e:0f:cf:
         12:f7:73:7d:14:88:cd:18:05:bb:f8:aa:4d:65:23:d4:c7:40:
         91:5e:45:9b:55:91:45:3b:72:f5:c7:df:b4:14:68:12:74:b5:
         8e:1d:41:ce:f5:da:16:c4:56:8a:de:67:19:e4:a4:b4:30:b7:
         e6:d7:52:88:0a:73:8b:90:76:58:ea:a5:37:1c:c7:4b:67:37:
         2a:78:32:a6:87:40:95:b7:5d:91:2e:3f:34:f5:fa:44:97:3c:
         0e:82:53:c3:be:77:d9:93:3b:5b:3b:21:b7:38:11:9b:e2:03:
         66:85:b8:d1:cf:e3:43:d8:24:a4:14:13:30:1e:65:92:08:4e:
         83:b0:c6:79:1c:46:a1:8b:85:eb:ef:ac:0e:4b:f8:13:db:f5:
         6c:f4:75:41:76:11:e1:dd:65:5b:17:c8:25:9b:6a:cf:ee:61:
         30:d0:51:1f:42:48:d4:a1:99:6a:9e:91:64:62:f4:01:1f:d8:
         f8:d8:a9:04:96:ab:6d:20:cb:e2:d5:64:d9:f6:8a:5e:d6:4f:
         d9:50:49:81:7a:a5:c6:f7:c7:ea:cc:d1:d0:d8:02:46:b0:74:
         7e:01:49:6e:10:9f:95:7b:af:20:21:03:63:a4:b1:bf:56:29:
         4b:57:6b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:44:32 2026 by rpki-client