Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft
File:                     rSHioIh9gBBYg2nxR4WWAoR3zb4.mft (raw, json)
Hash identifier:          x2ITbb2ul5ySUVfHHIPcPB9ivxlbZnzexDyKsqDWby0=
Subject key identifier:   2F:63:54:A1:8C:26:16:E9:92:E2:A7:CD:AC:4E:12:F7:3E:45:BC:DF
Authority key identifier: AD:21:E2:A0:88:7D:80:10:58:83:69:F1:47:85:96:02:84:77:CD:BE
Certificate issuer:       /CN=A913344F/serialNumber=AD21E2A0887D8010588369F1478596028477CDBE
Certificate serial:       11CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHioIh9gBBYg2nxR4WWAoR3zb4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft
Manifest number:          11C4
Signing time:             Mon 26 Oct 2026 17:09:46 +0000
Manifest this update:     Mon 26 Oct 2026 17:09:46 +0000
Manifest next update:     Mon 02 Nov 2026 17:09:46 +0000
Files and hashes:         1: rSHioIh9gBBYg2nxR4WWAoR3zb4.crl (hash: OTIsjRhHcTOHEQpREcZXI7rjRKtsbWGHXcfEe4cu59A=)
                          2: 2CDBC1B0251111E997B74770C4F9AE02.roa (hash: /FP64PwMxeWgm0N8c4GVP/FLJobB8jyGVkFe2s5ljxI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.crl
                          rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHioIh9gBBYg2nxR4WWAoR3zb4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 17:09:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4559 (0x11cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913344F, serialNumber=AD21E2A0887D8010588369F1478596028477CDBE
        Validity
            Not Before: Oct 26 17:09:46 2026 GMT
            Not After : Nov  2 17:09:46 2026 GMT
        Subject: CN=6adf895a-62fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8f:43:60:f3:5b:47:86:ce:80:6d:b4:83:77:
                    cb:a0:f3:a7:fe:a4:d8:10:e8:55:1c:6f:65:c7:d9:
                    c0:4f:3d:5b:59:c3:7d:3c:38:fd:76:4a:b3:54:45:
                    8d:6d:f0:bc:77:75:b9:94:ae:26:55:4f:20:15:0e:
                    7b:74:a6:bb:db:e4:ca:b7:d0:33:67:17:d7:28:d0:
                    6a:cd:ad:97:c6:13:76:c1:30:b8:70:45:17:aa:ac:
                    66:a0:47:69:25:4d:78:0c:88:49:ed:a4:0f:d9:5c:
                    b2:d8:6c:8c:a2:02:99:93:68:98:cc:29:a5:8e:16:
                    16:75:f6:66:c9:94:75:0f:d2:89:11:5c:73:43:64:
                    db:8d:4f:35:b8:0c:e1:d9:b9:6b:1c:38:9d:6e:e4:
                    05:64:46:c1:91:28:30:4e:52:dc:57:64:4b:a1:27:
                    91:3b:53:a2:c2:71:ad:ce:a0:c8:df:47:b5:75:ff:
                    33:5d:3c:c9:c1:db:48:f6:95:85:8e:4d:58:d7:76:
                    25:34:bc:9e:c3:d7:c8:19:e7:c8:75:39:ec:bf:d8:
                    2e:b0:fa:76:72:c8:58:68:d6:90:d8:75:3b:e1:aa:
                    ff:6a:75:ce:28:bd:80:54:b2:10:4d:a6:b1:e8:7d:
                    30:4f:c7:19:89:49:8c:66:04:91:3e:2a:97:24:dd:
                    ac:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:63:54:A1:8C:26:16:E9:92:E2:A7:CD:AC:4E:12:F7:3E:45:BC:DF
            X509v3 Authority Key Identifier:
                keyid:AD:21:E2:A0:88:7D:80:10:58:83:69:F1:47:85:96:02:84:77:CD:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHioIh9gBBYg2nxR4WWAoR3zb4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:73:ef:8e:76:7b:1c:c2:5e:d1:91:9b:ef:d2:cb:d2:16:28:
         fd:ca:1d:a3:67:e4:f3:af:52:f8:a9:7e:e1:cd:27:21:e9:d5:
         c0:13:0f:38:1a:5b:0b:e5:bc:84:54:b8:b4:a6:d4:1f:2c:20:
         f5:28:1f:3c:48:54:1e:26:bc:a3:47:1c:21:cf:81:dc:b4:4a:
         e4:48:ca:a5:63:a4:36:44:a9:ab:fd:7d:77:d6:bc:d9:a1:b1:
         52:e6:88:76:8a:f2:5e:4b:44:56:1f:cd:0e:cf:7e:cf:a7:c8:
         3f:cb:70:09:f2:b8:22:1c:d3:1b:16:da:4b:a7:34:17:71:4a:
         d1:d9:5a:76:3f:a4:c0:fd:1a:7c:9a:d6:f7:5e:da:0e:89:76:
         ff:3b:ea:84:ed:cd:87:07:d2:8e:f8:35:fc:5f:03:e9:fa:92:
         d1:0b:48:88:f4:34:19:82:0b:46:12:5a:1e:ce:a0:50:ae:9c:
         39:9c:e3:82:cc:7a:23:5a:0d:0f:14:00:e6:10:ee:eb:89:01:
         8f:1a:1a:d9:6f:7e:90:2b:b6:0e:11:29:23:5e:71:19:26:92:
         be:11:6a:25:12:99:1a:a1:c7:92:9c:82:d6:35:ef:80:e9:88:
         5c:f5:20:af:68:f2:c4:50:e1:b1:0c:2a:31:d6:f8:66:81:b4:
         6a:75:1c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:32:03 2026 by rpki-client