Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
File:                     mkQDBAPVC3G5mEY7OuVoQ7klleE.mft (raw, json)
Hash identifier:          zPFLWswl8Kqc3Mbb0qyStmrW5RGQ4PK6mo67d4u0fWI=
Subject key identifier:   3E:66:6C:B7:98:93:87:4E:CA:85:F8:9E:EE:97:8F:A5:3F:04:15:17
Authority key identifier: 9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1
Certificate issuer:       /CN=A9120119/serialNumber=9A44030403D50B71B998463B3AE56843B92595E1
Certificate serial:       08F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
Manifest number:          1AF3
Signing time:             Sun 04 Oct 2026 17:10:31 +0000
Manifest this update:     Sun 04 Oct 2026 17:10:30 +0000
Manifest next update:     Sun 11 Oct 2026 17:10:30 +0000
Files and hashes:         1: mkQDBAPVC3G5mEY7OuVoQ7klleE.crl (hash: DuhGTHhERNvpdVa2J0D51rkLTPipZF328/tCG7K8Hpk=)
                          2: AD46C158EDA911EA977E1C36C4F9AE02.roa (hash: pFivcl6/2LaS0iSbDcUyygHwyMDGedaAY+O1WaW+9u8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl
                          rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 16:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2295 (0x8f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120119, serialNumber=9A44030403D50B71B998463B3AE56843B92595E1
        Validity
            Not Before: Oct  4 17:10:30 2026 GMT
            Not After : Oct 11 17:10:30 2026 GMT
        Subject: CN=6ac28887-71b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4e:5e:bf:fe:09:e3:39:87:ed:60:4c:7b:b9:
                    42:06:a5:ae:9b:d7:7d:17:bc:70:58:54:ae:b0:fd:
                    4f:ee:b2:c0:2c:0c:62:c5:6d:e6:79:fb:1b:60:60:
                    02:4b:53:03:dc:a4:e6:07:66:1f:2a:1e:56:c6:61:
                    1f:4c:48:52:3a:97:96:76:3a:b0:da:e0:14:c4:e7:
                    37:de:8d:70:73:79:ab:55:2b:d6:2a:0e:77:51:28:
                    9e:e3:cf:07:c0:66:8c:e9:45:43:20:e5:13:1c:49:
                    17:6c:1b:2f:97:a3:91:2e:05:3e:74:de:db:4d:91:
                    57:4f:be:09:dd:e8:00:66:c2:1c:e0:5b:84:5b:8c:
                    76:93:ae:5a:b4:1b:61:89:ef:b7:c7:e2:08:16:85:
                    63:4c:d0:36:78:34:55:10:d4:09:00:15:34:e7:b2:
                    22:d7:bf:85:ef:57:3a:89:d8:ef:b7:7f:14:10:b0:
                    02:90:37:1b:da:75:13:d9:fc:ba:e3:2d:d5:fe:fc:
                    ed:1b:ca:40:9b:f5:05:02:a6:1f:42:e0:64:86:53:
                    8a:e6:7c:dd:2f:a2:7b:31:d4:99:3e:d5:48:2d:1a:
                    16:fb:5e:3c:71:e7:7b:97:87:94:c4:ed:fa:d0:d7:
                    1e:3c:59:a5:5f:6d:8e:07:f4:fd:6c:af:86:8f:86:
                    17:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:66:6C:B7:98:93:87:4E:CA:85:F8:9E:EE:97:8F:A5:3F:04:15:17
            X509v3 Authority Key Identifier:
                keyid:9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:2c:11:c8:a9:bf:05:a4:d2:f2:a8:8d:9a:0e:da:12:fd:e3:
         e4:95:9a:a9:cd:3a:80:3a:68:3f:43:f5:d8:ff:5b:07:7c:28:
         cd:32:57:10:6a:95:81:cb:51:17:b8:83:d4:3e:bf:47:d1:9e:
         d4:7e:ca:cf:23:8c:5e:06:b8:3c:a9:9c:c3:47:34:c2:09:e5:
         9d:ba:9e:6e:98:99:dc:a7:6e:50:76:97:78:f6:eb:5f:a4:57:
         aa:a3:6f:bb:97:bc:e0:de:e4:46:57:2a:26:fa:8c:72:dd:c7:
         b9:f7:7f:2b:cc:a5:e8:5a:ed:c7:38:31:da:ec:9c:b3:d0:e4:
         33:5c:b8:32:61:b0:cb:e3:b9:15:0e:ad:3d:e9:02:2d:25:ab:
         aa:91:b9:d4:1c:74:70:7e:d7:1e:e1:b4:5b:55:e0:a0:69:b5:
         41:31:98:be:ec:45:5e:b6:7a:a0:91:1b:5a:14:de:f7:c4:2f:
         c9:68:f6:6c:42:74:58:a5:13:1b:c5:af:72:75:57:e3:9a:18:
         77:5d:ca:44:32:68:0c:34:d0:26:be:44:4e:88:e2:e4:bb:db:
         b2:a4:e8:f5:a9:f0:3e:a4:70:08:0b:de:95:46:96:0f:37:d3:
         69:78:21:d0:45:ae:10:bb:e4:1e:45:fe:22:1f:f5:5b:26:28:
         b8:60:12:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:54:55 2026 by rpki-client