Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
File:                     r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft (raw, json)
Hash identifier:          L3Dl673WBNUzfKbnPyLSo3Kvf3OKgAUvx0XcQXhaavs=
Subject key identifier:   BF:88:11:57:53:15:B1:15:C1:9E:2A:04:FB:85:DC:0D:A1:69:C3:E7
Authority key identifier: AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32
Certificate issuer:       /CN=A9123BFF/serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032
Certificate serial:       088A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
Manifest number:          0880
Signing time:             Thu 22 Oct 2026 15:55:41 +0000
Manifest this update:     Thu 22 Oct 2026 15:55:40 +0000
Manifest next update:     Thu 29 Oct 2026 15:55:40 +0000
Files and hashes:         1: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl (hash: guGtvGbPlIIJ7rxVFu32WE2LW5k7kXgQqB1+ZuYzYcg=)
                          2: A3744A28149A11EDB9CF2F70C4F9AE02.roa (hash: zMVM5XvHUSFuCWzCvYIz2LcqG9igaxxQSY0E3/h4FG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl
                          rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 15:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2186 (0x88a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123BFF, serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032
        Validity
            Not Before: Oct 22 15:55:40 2026 GMT
            Not After : Oct 29 15:55:40 2026 GMT
        Subject: CN=6ada31fd-b5c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d2:b7:4d:83:cb:09:74:f1:c6:fd:27:a2:00:
                    f9:02:d6:0c:f2:88:ba:84:53:ab:2e:1f:1d:ef:74:
                    10:7c:d3:1b:00:04:ec:d3:20:a2:71:2b:15:87:9c:
                    2d:05:e9:68:2a:0f:11:91:73:02:05:85:ea:77:c4:
                    39:ce:21:17:41:67:48:5d:2f:94:49:ef:b7:43:88:
                    e9:aa:c0:d1:0b:53:c7:46:d3:cd:b0:f4:d5:af:b1:
                    07:2d:5c:71:b8:ff:e9:4a:26:44:e9:f7:d3:90:f0:
                    ae:a4:86:52:83:2a:a3:6d:00:52:eb:8a:1f:07:49:
                    46:c7:82:21:d2:50:35:54:8f:91:9e:16:92:21:59:
                    74:0a:6a:45:51:5d:9a:c9:1a:8a:42:65:54:8c:83:
                    57:12:a6:8d:a7:ae:96:05:a2:63:26:62:6c:ab:bc:
                    10:c0:62:b6:fd:79:7d:7c:68:20:c8:c3:94:cb:c1:
                    23:ca:ad:ce:1d:87:cb:0e:86:c3:2d:99:f7:05:3b:
                    14:f7:c9:53:b0:b7:a9:e2:c1:3f:f4:fb:77:5e:e8:
                    e8:56:10:76:46:13:42:31:cb:5e:c3:84:97:fc:c9:
                    a8:47:9f:39:13:54:04:eb:bb:93:36:17:59:cd:42:
                    c4:71:98:08:4f:14:38:67:12:26:ee:94:da:09:48:
                    ce:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:88:11:57:53:15:B1:15:C1:9E:2A:04:FB:85:DC:0D:A1:69:C3:E7
            X509v3 Authority Key Identifier:
                keyid:AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:5d:a1:c8:7b:b1:2b:39:3f:b2:fa:6b:93:4a:7b:2c:a0:e1:
         65:f6:19:84:3f:6d:74:5d:bd:92:38:eb:36:32:92:d5:0b:ef:
         11:5a:f4:8b:46:ee:89:c9:1b:c3:ae:38:8b:e9:15:b0:46:1e:
         81:16:e5:b3:9c:5a:b0:dc:e6:d0:e9:0e:d5:cb:2b:3c:af:53:
         1b:ba:7d:8a:6d:52:18:53:c5:df:73:9c:45:54:91:d9:77:88:
         29:76:6a:a2:a4:3d:9f:1e:99:21:6b:bf:99:96:34:7b:f2:50:
         c3:80:c2:6f:14:56:68:2d:0c:34:36:9b:15:c6:04:1b:72:59:
         87:a2:f2:39:66:40:e6:df:d9:4a:b4:91:b6:e9:77:2f:c8:7d:
         27:92:44:46:59:06:48:84:49:7c:bf:30:32:e9:33:e4:4a:f2:
         a6:02:5a:36:bf:90:99:01:33:82:b8:f0:98:41:0e:cb:b1:c4:
         7e:0f:30:7c:55:74:59:37:18:5a:75:8c:61:29:eb:d9:ce:ae:
         10:0c:e1:99:66:4c:a1:e0:86:86:a2:a3:37:05:90:bf:fc:0d:
         df:e6:4f:d5:5f:c6:58:ef:86:2f:4d:d6:3e:72:0d:04:a7:41:
         e8:2a:53:c8:6f:e0:03:c8:cf:36:c1:fd:55:35:2e:15:80:97:
         99:a2:05:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 02:47:49 2026 by rpki-client