Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
File:                     -o32EYRRvVM4cqyjdiK_c77RlEE.mft (raw, json)
Hash identifier:          UyMgZ+T372Mf081qrog1v2ZQxzXDiZxCbOrrkACtJoQ=
Subject key identifier:   5D:FF:B1:CA:6B:B4:D6:E5:E2:E5:7A:0A:AE:54:7A:68:B6:26:DC:B7
Authority key identifier: FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41
Certificate issuer:       /CN=A9135450/serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441
Certificate serial:       036D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
Manifest number:          0366
Signing time:             Sun 25 Oct 2026 00:51:17 +0000
Manifest this update:     Sun 25 Oct 2026 00:51:16 +0000
Manifest next update:     Sun 01 Nov 2026 00:51:16 +0000
Files and hashes:         1: -o32EYRRvVM4cqyjdiK_c77RlEE.crl (hash: mESupBeteo9e0YYu9RNnDlACU6ujBTrCOFQRsndZj00=)
                          2: CA57150418B311EDB72D3165C4F9AE02.roa (hash: Be6od45jLeada4bxpuPeqCUQhUOB88eDEOcvjcAauYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl
                          rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 00:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 877 (0x36d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135450, serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441
        Validity
            Not Before: Oct 25 00:51:16 2026 GMT
            Not After : Nov  1 00:51:16 2026 GMT
        Subject: CN=6add5285-ac64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2e:f6:24:aa:65:2b:55:78:65:37:b4:86:f4:
                    1a:25:f0:69:98:d1:23:d8:b2:b4:ab:d3:63:63:5c:
                    82:5e:e1:4a:39:a3:c5:6c:60:0a:d3:57:22:3c:94:
                    6c:24:b0:c6:5a:91:d6:6e:2d:7c:6c:be:36:c3:8c:
                    a4:38:f7:18:c0:15:75:d9:d5:91:33:e7:8c:6e:af:
                    d8:01:68:f6:d8:3d:ea:35:7a:8b:3d:3b:fe:8c:e6:
                    ad:d1:32:7b:95:56:74:30:28:26:ff:fe:f1:7b:5b:
                    74:b9:9c:eb:95:65:f7:a1:eb:1f:50:c7:0a:9f:89:
                    5d:a7:49:85:eb:6e:7c:82:41:1f:f9:43:b8:ff:59:
                    a3:9d:de:3c:03:03:d9:e7:1e:89:1b:a2:38:25:3c:
                    bf:22:cd:9f:be:7d:30:21:29:79:c1:f6:fb:5a:91:
                    12:aa:f0:29:47:a7:e9:80:55:ed:ca:1a:54:45:12:
                    23:67:21:66:07:b1:97:48:46:25:5f:87:4b:74:79:
                    3d:8b:32:b4:8a:0b:da:97:87:5d:39:a2:6c:6a:77:
                    11:f0:b9:bf:6c:5d:ce:b1:44:99:6d:9b:45:e0:37:
                    8d:b8:55:1b:96:60:ef:c0:aa:11:d9:0f:e2:68:28:
                    64:f4:c7:b7:f3:f4:ab:d8:99:03:6e:be:a1:55:06:
                    fc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FF:B1:CA:6B:B4:D6:E5:E2:E5:7A:0A:AE:54:7A:68:B6:26:DC:B7
            X509v3 Authority Key Identifier:
                keyid:FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:35:96:da:c9:30:9f:fa:d7:28:39:4f:13:6a:a1:e9:74:be:
         5b:7c:38:06:c1:d1:de:8e:34:8a:c5:a7:ab:6a:6a:3c:3c:e3:
         bd:c5:8c:8b:1c:fc:36:79:85:ed:57:55:bd:d3:12:ed:54:5f:
         1e:a7:95:a8:9e:c2:1c:c8:97:74:37:13:2c:0f:8d:5f:58:32:
         e8:82:fe:47:8d:f7:66:e4:c2:8e:37:6d:10:99:67:9b:ea:cd:
         52:88:50:ed:a4:b0:82:1d:80:44:00:88:72:b1:52:8c:0b:a3:
         6a:2c:0f:d2:30:07:db:86:ee:7b:4c:48:06:93:2e:b5:22:47:
         d9:30:0c:13:83:5e:3b:b4:47:de:14:fa:3c:49:a1:6a:15:4a:
         ad:ea:ab:7f:97:97:ce:a8:df:25:65:36:c6:99:26:9d:9b:6c:
         3a:16:76:7b:bd:91:81:90:6d:e6:d8:17:03:cc:b6:fa:04:ce:
         75:d2:ec:e9:25:78:3c:6d:e6:ee:99:24:c9:a1:5e:fa:16:f1:
         a0:f8:24:37:8a:30:93:04:b2:96:f2:58:2d:59:0b:a2:6f:9e:
         34:c0:4d:1e:82:7f:00:2e:0e:90:14:94:3d:1e:16:bd:ad:ec:
         ae:12:03:35:f4:c7:2c:b0:62:b1:7f:59:78:9d:4f:f0:c1:73:
         45:0c:f2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:56:04 2026 by rpki-client