Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
File:                     ExIqzTjgGRaZhizKfvJHdjDVcOk.mft (raw, json)
Hash identifier:          cjkCZNfE+E0EvyaKHzw+rwEoA24cYn3yBWS1iwAwlIQ=
Subject key identifier:   C4:51:3B:68:D6:D4:B9:6D:79:71:0A:65:C3:72:04:65:BF:D0:C5:9E
Authority key identifier: 13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9
Certificate issuer:       /CN=A9137C94/serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9
Certificate serial:       06D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
Manifest number:          06CB
Signing time:             Tue 20 Oct 2026 22:27:08 +0000
Manifest this update:     Tue 20 Oct 2026 22:27:07 +0000
Manifest next update:     Tue 27 Oct 2026 22:27:07 +0000
Files and hashes:         1: ExIqzTjgGRaZhizKfvJHdjDVcOk.crl (hash: wLgt4AamLCD0dZvmqNIJ9qQv4DISQvfl4C3WH1oudog=)
                          2: DCAC0B64C22011EB9C4C3B31C4F9AE02.roa (hash: 5NPwjGLnfzyS4v9CY8BfwcjN4RI/Bjk1Spnk+XfA3ts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl
                          rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 22:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1747 (0x6d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137C94, serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9
        Validity
            Not Before: Oct 20 22:27:07 2026 GMT
            Not After : Oct 27 22:27:07 2026 GMT
        Subject: CN=6ad7eabc-d420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5d:de:f9:6f:44:d9:71:9e:6d:8a:21:98:74:
                    7a:f2:34:62:1d:0b:9c:ff:f1:09:8d:94:de:07:01:
                    05:5f:71:15:a5:8b:21:9a:39:b8:24:59:24:77:3c:
                    d0:64:e7:dd:ac:35:63:a0:08:82:72:e4:8b:e3:d9:
                    68:21:26:fe:37:3d:7c:20:af:d0:28:9d:01:0b:7f:
                    7b:6e:00:a9:b2:a0:e6:7a:61:8b:20:3d:ca:29:c3:
                    4d:28:fe:7e:ea:52:be:67:bb:0c:04:22:63:5a:3d:
                    77:7b:2d:61:22:05:d3:90:20:8e:27:8c:7a:d1:56:
                    67:ec:2b:88:92:61:ae:a7:57:18:05:23:c2:f1:ac:
                    5f:d3:c6:ff:ac:bc:89:4b:4a:40:84:50:25:d6:24:
                    71:cc:35:91:3e:01:6b:63:20:0b:91:9f:5b:eb:02:
                    7c:f1:81:70:37:01:32:1c:42:d5:20:9f:c5:5a:8c:
                    c5:0b:d6:43:14:78:0a:75:87:1b:3d:2d:2c:0e:ee:
                    b6:9a:72:ac:02:f6:38:50:ba:a5:08:3d:cf:e9:5b:
                    ca:1c:dc:27:ab:3f:de:5e:71:fd:21:1d:ba:77:fd:
                    f0:13:df:32:87:69:3f:85:c4:6e:79:b8:6b:03:66:
                    8f:fd:d1:a5:39:37:18:43:8b:b6:29:6a:f9:db:f3:
                    88:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:51:3B:68:D6:D4:B9:6D:79:71:0A:65:C3:72:04:65:BF:D0:C5:9E
            X509v3 Authority Key Identifier:
                keyid:13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:48:18:b8:9f:b1:81:dc:3a:82:2f:79:f0:e3:85:66:a3:ae:
         7e:e0:51:e7:ed:ba:56:bf:3f:4e:fe:ff:a9:8e:51:83:08:e9:
         27:ad:d3:89:88:ad:3e:72:93:03:0b:52:b6:87:fb:de:8f:f5:
         6b:e1:d2:07:e8:f9:ab:24:d5:c0:8d:bc:ca:1c:39:b8:64:9f:
         f3:dd:6b:12:9b:da:7c:72:1e:11:f4:31:b6:6e:cd:e8:ef:0a:
         eb:14:76:f4:37:b0:c2:c6:78:ab:1a:1c:0a:5c:55:c7:2b:63:
         4f:46:97:21:6b:60:bd:d8:7b:b0:66:66:1f:2b:38:81:3b:5f:
         0b:e3:46:f7:b4:62:49:35:3a:fb:e9:6c:5f:dd:8b:5c:91:ac:
         4a:5f:92:f1:42:45:87:29:54:1a:2f:97:bf:61:d7:f4:71:45:
         ed:74:14:4d:3d:f9:26:b1:92:e1:db:8b:85:e9:22:b1:da:59:
         75:6a:8c:88:4f:a9:94:4c:0f:cc:23:49:50:00:e7:d1:1a:98:
         45:eb:f6:68:19:91:58:6d:1e:23:28:c2:d3:3b:77:1b:22:e2:
         4e:f7:a6:3b:0c:68:25:3b:96:7e:56:e6:c6:2e:25:a5:77:5e:
         58:57:65:4a:ed:a5:13:92:d3:c8:53:ca:a8:36:f8:4f:b4:c6:
         e0:28:a3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:41:59 2026 by rpki-client