Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
File:                     p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft (raw, json)
Hash identifier:          5OYIzfyy6pt+crZzF0HLsFbc0Ms9kWuVfHJyS9f874k=
Subject key identifier:   BA:C0:0F:A7:D4:BD:00:5A:38:8E:EB:DF:ED:AA:36:57:D9:F9:B0:D5
Authority key identifier: A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39
Certificate issuer:       /CN=A912BE25/serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439
Certificate serial:       03FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
Manifest number:          03E4
Signing time:             Sat 03 Oct 2026 00:51:58 +0000
Manifest this update:     Sat 03 Oct 2026 00:51:57 +0000
Manifest next update:     Sat 10 Oct 2026 00:51:57 +0000
Files and hashes:         1: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl (hash: JcPupBlp+UBXVezZtJMh3GFzNqNRifUHY6UmggGWHpM=)
                          2: 3824E928764711F0980D9877C4F9AE02.roa (hash: w5Uw+WmAqvRNqcNi0+Re/soln13jJF8t1Eb7j+I2ggM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl
                          rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 00:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1020 (0x3fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BE25, serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439
        Validity
            Not Before: Oct  3 00:51:57 2026 GMT
            Not After : Oct 10 00:51:57 2026 GMT
        Subject: CN=6ac051ad-404b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:90:ac:13:36:e1:a7:c2:ba:e3:ce:a6:e9:
                    ea:88:29:6b:3d:46:3e:73:45:01:be:86:d0:ce:2d:
                    d3:36:01:eb:0c:3e:d6:ea:f2:4e:b2:70:95:fc:97:
                    61:e9:ce:09:05:e7:d8:00:47:74:b6:d8:ee:9e:2f:
                    d3:69:ab:36:c0:0e:6e:28:e1:7b:25:cb:bd:f4:d2:
                    a7:0d:68:0b:8e:17:5d:83:12:41:34:a8:2d:28:ad:
                    2e:59:9d:7f:b7:2e:fd:6a:a6:b8:d6:39:6c:19:e4:
                    7f:99:6a:cf:b2:c6:bd:15:00:1f:3b:27:c4:05:73:
                    4c:d3:ea:21:81:b9:17:a3:e5:63:a2:ca:1a:5d:da:
                    68:93:f8:0e:d6:4e:a0:e7:e5:02:1e:10:67:1a:27:
                    e3:9d:71:88:15:29:4c:f6:37:bf:85:45:83:ff:28:
                    8a:46:b4:fc:1b:c5:4f:6d:38:56:fe:e1:49:c0:52:
                    85:ac:bd:60:20:4a:83:3e:7d:6d:c9:5b:b6:52:00:
                    4e:30:9e:5b:b0:c8:4e:6a:6d:7c:07:c8:c7:e7:b7:
                    2d:88:31:17:bd:9d:3b:12:ad:8e:20:ad:4d:94:f1:
                    18:2b:9a:ae:39:60:4c:99:ad:2b:4e:4c:35:cd:c0:
                    57:33:ca:00:b5:9c:8d:8a:41:d0:13:61:bc:15:f4:
                    b9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C0:0F:A7:D4:BD:00:5A:38:8E:EB:DF:ED:AA:36:57:D9:F9:B0:D5
            X509v3 Authority Key Identifier:
                keyid:A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:c1:cd:b1:82:b7:8b:b1:4d:75:3a:df:b5:41:f5:c5:f7:6c:
         5b:0c:30:2e:5e:b7:ad:68:1d:f6:7d:66:ea:09:03:70:75:53:
         61:12:6e:23:42:8c:c7:da:81:33:e6:5b:04:f8:4e:ac:25:66:
         14:92:a2:c3:a3:15:3b:2d:30:9d:85:60:8d:e8:84:13:bf:aa:
         e6:77:ea:f0:10:6e:03:ca:08:33:b3:08:14:cd:83:0f:d0:22:
         e7:5e:e4:c7:6e:c2:bb:a9:49:ef:4b:bd:fb:84:9a:3f:f1:44:
         59:fd:6c:72:17:83:af:14:05:f0:11:f1:34:3b:cf:9d:30:20:
         f8:ef:c0:14:69:a4:7a:8e:c9:37:89:55:e7:0e:90:39:71:ac:
         42:9b:ef:03:c7:44:56:34:f8:04:91:bb:00:e6:c5:36:1e:9e:
         da:98:cb:50:14:c7:7c:ee:e4:a5:2a:0b:28:34:68:47:28:5b:
         93:1f:a4:be:75:1a:59:2f:96:1a:2a:eb:de:1d:5f:5e:cf:95:
         ae:a8:bb:52:e9:bb:81:c3:c1:9b:f9:4f:e9:36:d4:19:cf:aa:
         e1:8e:71:5c:3e:db:9e:7f:38:05:7e:73:b2:24:90:4a:92:bb:
         79:63:bd:05:78:41:13:34:7a:73:f9:5a:32:0d:dd:bb:c2:2c:
         be:74:b6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:29:04 2026 by rpki-client