Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
File:                     28EoRfH6o1sy_s32oO1NFEKSyMw.mft (raw, json)
Hash identifier:          hlciLhkLmIfM2SoTqf323cViUC9NDRKnDAq4o+boTus=
Subject key identifier:   C4:13:49:E0:5C:69:0F:08:11:94:14:D3:81:FE:CB:C2:4F:3D:49:22
Authority key identifier: DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC
Certificate issuer:       /CN=A9134790/serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
Manifest number:          FF
Signing time:             Sat 17 Oct 2026 06:53:03 +0000
Manifest this update:     Sat 17 Oct 2026 06:53:03 +0000
Manifest next update:     Sat 24 Oct 2026 06:53:03 +0000
Files and hashes:         1: 28EoRfH6o1sy_s32oO1NFEKSyMw.crl (hash: 0kt55LePEC66+iWaeq4bCw2jQgEFucoZw8ZG6XrzcU8=)
                          2: 078FA91C44EA11F09EB11858C4F9AE02.roa (hash: C/ZGqWc8u20kL8eL26pbZWd67Dk6EABUUd6GG9DsIEU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl
                          rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 06:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134790, serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC
        Validity
            Not Before: Oct 17 06:53:03 2026 GMT
            Not After : Oct 24 06:53:03 2026 GMT
        Subject: CN=6ad31b4f-8426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:df:c0:9b:cf:82:78:63:43:20:93:72:d9:1a:
                    5b:a2:25:11:6f:86:fc:83:41:79:5a:28:2b:65:3f:
                    7e:a3:e2:b9:10:11:79:7a:b2:04:4a:e6:65:c6:06:
                    57:13:16:0c:58:14:19:f0:4c:98:2f:91:e2:72:cc:
                    0c:cb:b5:6d:f5:32:d3:da:52:58:c5:27:38:fb:e0:
                    9d:61:ff:24:3a:d2:6d:ae:05:67:3d:cb:62:e0:14:
                    a8:fe:21:3d:e5:b8:e5:92:48:80:ec:1a:32:52:eb:
                    69:d4:a8:d5:b1:45:7a:a7:83:79:68:a7:0d:4f:a2:
                    db:39:ac:59:d9:15:9f:40:99:10:07:9f:73:43:05:
                    70:1a:00:95:e0:88:7f:68:98:d4:76:d2:ab:5f:18:
                    da:86:01:2c:ad:9f:f8:54:c4:63:45:cd:01:9f:21:
                    75:6d:d1:16:ba:ce:51:d6:74:9a:28:c3:89:fa:ec:
                    5e:92:23:c8:59:04:9c:9f:7b:ef:18:ba:9c:b0:cb:
                    2e:df:82:b0:cc:94:aa:44:2a:77:88:ec:b8:39:1e:
                    c5:03:98:13:65:0b:04:74:22:0a:dd:06:b4:ec:7d:
                    c8:9f:87:8b:96:96:99:92:9e:7b:12:47:fb:05:54:
                    87:4f:bd:fd:f3:31:7f:f2:6e:6d:1b:4c:68:90:9f:
                    d3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:13:49:E0:5C:69:0F:08:11:94:14:D3:81:FE:CB:C2:4F:3D:49:22
            X509v3 Authority Key Identifier:
                keyid:DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:80:c6:63:8a:a4:cd:31:1b:2b:41:02:68:ad:c7:a5:5e:d7:
         93:dc:10:65:2e:2f:9f:86:8f:37:e8:66:21:65:2a:e5:cb:c7:
         37:18:34:81:1a:61:b6:19:1e:83:7a:7b:bf:04:40:17:32:c1:
         fe:9c:d9:2d:58:57:3d:d2:a6:ec:df:45:e5:bd:f3:59:bd:42:
         83:85:d6:fc:aa:d2:cc:16:23:f7:f5:3c:be:56:c8:58:05:a8:
         8c:91:48:4b:df:6b:b3:d4:3e:61:ec:1b:10:3e:f5:fe:f2:a9:
         41:d1:2e:19:67:05:f1:69:07:4c:c6:45:ee:47:7d:de:ff:b4:
         37:6d:0d:45:e1:ea:1a:c9:18:b3:e8:01:0a:2a:11:d0:95:a2:
         9f:a7:62:3e:90:76:37:82:36:a2:12:45:e4:e6:5e:29:91:e8:
         90:19:5e:3f:54:3f:7c:54:33:cf:fb:3d:69:f0:83:4b:8d:8c:
         44:ec:c5:73:32:b7:3a:40:2c:59:4c:31:81:26:e8:4f:dd:a6:
         ce:91:f2:c5:0c:a3:38:0b:15:18:72:a3:f5:c3:e6:f1:49:d0:
         d4:1c:1e:b2:15:a4:12:d7:5e:bb:80:c7:c1:4e:e0:db:e9:66:
         29:69:c0:8b:f3:3a:da:55:d2:36:a3:4a:11:64:99:de:f4:e9:
         86:e9:48:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 19:59:49 2026 by rpki-client