Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
File:                     1fF0__36EIu7L4fnPG6d1RCNOp8.mft (raw, json)
Hash identifier:          izlJIVOoR4XeR6lc6e6cgqHHmeA62PDDbR7M6Jr8Tzk=
Subject key identifier:   6A:DB:F8:CD:D2:36:25:B0:48:ED:06:2D:E3:98:54:FA:3D:11:98:0D
Authority key identifier: D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F
Certificate issuer:       /CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F
Certificate serial:       0362
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
Manifest number:          035C
Signing time:             Thu 29 Oct 2026 01:07:17 +0000
Manifest this update:     Thu 29 Oct 2026 01:07:17 +0000
Manifest next update:     Thu 05 Nov 2026 01:07:17 +0000
Files and hashes:         1: 1fF0__36EIu7L4fnPG6d1RCNOp8.crl (hash: CDL4KLx/GBRpRHG7z80Wg8PBwTGK+VhsmRgWVgrnLio=)
                          2: C605A7A01CF911EDBAE62F45C4F9AE02.roa (hash: m3cZCOL4b89wYo+1IDry+3qvdA4N289UzAOZJV0uUGo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl
                          rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 14:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866 (0x362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A5BD, serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F
        Validity
            Not Before: Oct 29 01:07:17 2026 GMT
            Not After : Nov  5 01:07:17 2026 GMT
        Subject: CN=6ae29c45-6244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c0:9a:cd:7f:9a:d6:ac:37:ff:79:63:f0:0a:
                    7b:50:ab:c0:37:8a:80:80:14:7d:47:c0:d6:ba:6d:
                    de:98:5b:f2:c1:3a:7f:11:e1:b9:a4:0a:68:32:7a:
                    a4:6e:68:b6:f5:ea:6e:a6:12:b4:7b:c9:2c:ae:d7:
                    0f:13:d9:66:f8:26:cd:eb:d0:a1:ac:18:91:99:e4:
                    2c:c4:52:31:89:84:2b:63:d8:1a:e2:01:4c:50:20:
                    a6:b9:05:7d:eb:4f:0d:d3:53:02:4a:fa:e4:3c:db:
                    0b:9a:e7:e0:f2:13:ec:5b:bd:d4:c7:fc:6e:4b:c6:
                    93:44:b3:c1:6b:29:cf:3d:85:45:1f:8a:56:83:77:
                    b1:f7:df:86:f9:27:e4:60:2f:45:ab:59:a6:20:17:
                    36:6e:96:6f:23:0b:17:ff:ab:3a:14:95:37:d6:1c:
                    b1:20:68:d0:98:74:c4:09:ed:27:1c:a5:ec:6f:4e:
                    06:aa:d4:a3:31:80:73:31:c2:27:10:02:18:c3:07:
                    4b:5d:6e:ba:25:f7:be:74:4d:0f:82:5e:88:2e:a2:
                    d3:ea:f0:5e:09:63:0e:8a:ae:13:2e:4d:31:0d:ae:
                    a4:0b:d0:51:d5:78:6d:7c:67:45:1b:3b:d0:05:d0:
                    e5:6d:f0:6a:85:21:99:02:ec:13:5f:63:4d:a7:9d:
                    73:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DB:F8:CD:D2:36:25:B0:48:ED:06:2D:E3:98:54:FA:3D:11:98:0D
            X509v3 Authority Key Identifier:
                keyid:D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:33:a2:02:f9:03:86:16:3f:a8:2a:ff:46:83:9d:4f:f6:a4:
         5d:e1:cd:94:b8:7e:b3:8a:c2:50:cb:f9:d0:40:d6:62:e6:7b:
         5f:3b:ba:f4:af:26:09:fa:91:5b:68:e7:2a:d9:f7:be:73:f6:
         7b:2b:ff:8d:0a:5a:44:9a:4c:69:f1:bb:1f:c8:0d:35:0f:68:
         ce:7f:9e:6f:fb:c5:ba:ef:0a:a7:c7:c8:4c:7c:88:15:5e:39:
         13:9f:03:c7:56:7b:5c:59:95:a9:c8:e0:5d:5c:ea:1a:a4:aa:
         db:b8:c5:8e:b1:a7:ea:d5:0e:20:d4:53:b0:55:8f:52:ed:4f:
         10:ed:c2:e9:65:97:44:d3:1c:bb:b0:01:5e:31:59:de:79:96:
         ea:dc:59:f8:00:d4:76:dc:c6:78:17:b4:9f:0a:36:2c:b3:f6:
         84:24:85:25:c9:c2:66:fd:c8:92:9e:28:e5:fb:68:20:00:d4:
         03:fb:81:39:29:90:b9:74:b6:80:0c:c7:8d:4b:ba:83:ec:a8:
         30:b3:47:c9:c6:83:91:69:fd:a7:1e:f2:40:8d:8e:e8:e0:f8:
         b6:64:af:5b:20:d8:fc:7e:1d:54:ee:e8:08:20:d0:1c:38:1d:
         1b:2c:d6:7d:4c:f8:90:27:0c:b0:68:3d:06:a1:71:74:5b:18:
         33:a3:3f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:47:48 2026 by rpki-client