Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft
File:                     xNdQnlMs4vbky06OXDwia6MVTm8.mft (raw, json)
Hash identifier:          OtOi9FJhyCToivFvHO+VuZbAFKv3RcHvuRtl/PJOL5o=
Subject key identifier:   18:80:EA:E2:12:B5:06:FC:2A:34:B7:71:96:77:F9:53:9D:76:7D:54
Authority key identifier: C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F
Certificate issuer:       /CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F
Certificate serial:       11A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft
Manifest number:          1183
Signing time:             Tue 06 Oct 2026 17:16:00 +0000
Manifest this update:     Tue 06 Oct 2026 17:15:59 +0000
Manifest next update:     Tue 13 Oct 2026 17:15:59 +0000
Files and hashes:         1: xNdQnlMs4vbky06OXDwia6MVTm8.crl (hash: nt04TSZh6TCoFoKY99yT50dQalRjGH754pkTDOPjKT4=)
                          2: 9FC6F664BE2A11EFA17DA82CC4F9AE02.roa (hash: ssMQ43fjcNDdMMcxP4Zyw/zUAL+E/8FkY3VJGMomUwo=)
                          3: 1803FFC65E5F11EBBE37FA4CC4F9AE02.roa (hash: dYx5rg+ikh6rVRuWFPmqQgmz1ejCnGZL23u6GCNg5Bw=)
                          4: 21151EF0A8C411EC8F560C42C4F9AE02.roa (hash: iceccqvc3kg29socz/RRWvyJpHDglBn90E6v9vB2qCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl
                          rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 17:15:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4516 (0x11a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AF0B, serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F
        Validity
            Not Before: Oct  6 17:15:59 2026 GMT
            Not After : Oct 13 17:15:59 2026 GMT
        Subject: CN=6ac52cd0-9189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bd:16:19:e4:9f:78:c9:44:1a:e1:6a:80:8b:
                    33:f8:5c:c2:df:62:75:8d:6c:e2:b5:15:99:34:68:
                    6e:cb:6c:47:79:c8:14:07:58:2d:ec:98:cb:5b:83:
                    ae:62:17:0f:07:be:4d:cc:ae:52:78:9f:32:6f:77:
                    4d:c9:2f:6d:98:67:f7:4d:2e:2d:cc:68:48:23:b3:
                    eb:b4:3f:53:15:d1:88:73:97:e6:cb:7e:81:12:f3:
                    76:dc:2a:8d:f3:96:89:3a:63:c1:54:4c:29:e7:ca:
                    37:c8:89:57:12:f0:39:4d:3c:3e:af:98:95:3a:35:
                    40:46:ba:c5:e2:1d:45:41:4c:64:c4:13:33:c5:49:
                    be:95:69:75:49:82:9b:80:ed:eb:65:f4:1c:ed:6f:
                    92:48:70:d5:05:d9:7a:dc:9c:72:f1:79:2d:bd:09:
                    bf:ac:06:c6:9f:54:b5:11:29:95:0f:75:d8:95:9a:
                    90:2f:28:c6:43:49:50:53:e9:db:31:d0:87:51:16:
                    3f:07:21:90:b1:8c:9a:8c:71:89:7e:c7:51:b3:9b:
                    4b:12:d7:6b:9c:48:75:b1:59:a9:b4:da:1a:77:4b:
                    a6:26:ef:6b:7f:d6:8d:45:bd:59:4b:6c:bf:d5:8a:
                    77:df:01:10:71:93:d5:de:8c:f8:d7:b5:ed:01:f4:
                    49:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:80:EA:E2:12:B5:06:FC:2A:34:B7:71:96:77:F9:53:9D:76:7D:54
            X509v3 Authority Key Identifier:
                keyid:C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:17:43:99:91:83:46:81:4b:58:50:4a:f1:74:de:55:94:2a:
         72:92:57:ff:5a:ea:06:f8:30:a2:22:db:d1:1c:11:7f:f6:ea:
         68:f4:da:e9:50:9f:ee:74:16:7d:ac:f8:ee:a2:7f:19:af:79:
         96:e7:e9:cd:dd:00:5f:a4:ef:62:ca:2c:28:45:9d:9f:5b:b6:
         2f:9c:ba:b8:83:97:38:5b:da:cb:cb:fd:15:5c:2b:56:dd:1a:
         53:58:69:9f:39:f8:a4:2d:ba:df:d6:8f:a4:b2:b5:cd:27:9c:
         ce:6f:39:b1:06:a6:0f:d1:7d:60:74:4f:9a:3a:54:5a:30:cd:
         7e:fc:f6:5e:d7:8b:9b:cd:4f:2f:e4:39:0a:47:66:e6:6a:26:
         af:d6:d1:55:de:0d:8b:12:f9:d1:0b:29:eb:5a:f4:6e:43:c1:
         69:bb:7f:34:e5:7f:79:30:01:28:e9:54:83:5d:c3:79:49:bc:
         e2:89:8e:43:82:e3:08:6c:be:78:3c:d8:7b:44:a5:a1:81:29:
         9b:4e:0e:6b:80:0d:fe:d7:14:ac:dd:9e:3d:c4:05:8d:92:b4:
         84:b3:fc:e6:80:4d:81:12:df:c3:c1:c3:c0:ed:a5:40:b8:b7:
         b1:03:80:2f:c3:70:45:b4:7d:2f:bb:cf:be:e5:20:e9:b1:c7:
         42:be:53:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:55:27 2026 by rpki-client