Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.mft
File:                     _-gfY04l5olzmJndVfFB_kR8cAs.mft (raw, json)
Hash identifier:          ZbPovRu7dRlHzqpZz30xQnqXQF6EvB1RvHlcYYD31Hc=
Subject key identifier:   0C:53:5A:37:08:E3:04:DB:F2:A5:C3:13:E2:67:4D:99:8C:3F:08:C9
Authority key identifier: FF:E8:1F:63:4E:25:E6:89:73:98:99:DD:55:F1:41:FE:44:7C:70:0B
Certificate issuer:       /CN=A913AC62/serialNumber=FFE81F634E25E689739899DD55F141FE447C700B
Certificate serial:       1C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-gfY04l5olzmJndVfFB_kR8cAs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.mft
Manifest number:          1B
Signing time:             Sat 17 Oct 2026 09:43:49 +0000
Manifest this update:     Sat 17 Oct 2026 09:43:48 +0000
Manifest next update:     Sat 24 Oct 2026 09:43:48 +0000
Files and hashes:         1: _-gfY04l5olzmJndVfFB_kR8cAs.crl (hash: MNRKFqrupFO+9JL6hQdvdD4plyng180ROgDthlNtTHQ=)
                          2: 2A90286AA74011F1B00B73DC6C11F970.roa (hash: AUbjV4dgZ0W4N6itfjI+ItqjZQKl7Cbq52d8Byg1lbw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.crl
                          rsync://rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-gfY04l5olzmJndVfFB_kR8cAs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 09:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AC62, serialNumber=FFE81F634E25E689739899DD55F141FE447C700B
        Validity
            Not Before: Oct 17 09:43:48 2026 GMT
            Not After : Oct 24 09:43:48 2026 GMT
        Subject: CN=6ad34354-2134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a3:3c:8b:b7:9d:7b:e2:41:72:84:96:dc:d8:
                    5c:fb:17:e9:09:81:cf:15:e5:a8:86:3c:e0:57:24:
                    b8:fe:df:6e:cc:a8:57:3a:89:b4:c8:b7:fd:a5:02:
                    0e:66:1a:2b:21:e7:76:d0:c2:a5:47:6c:d9:90:17:
                    b0:7b:40:5a:c7:81:fc:45:9d:3a:3d:14:ab:69:30:
                    c7:65:57:6f:b2:14:43:6c:5c:77:7e:5d:68:63:19:
                    38:8f:25:55:81:0a:54:fe:d3:3d:9a:41:f3:56:0a:
                    e5:79:08:ac:f5:ed:2b:3b:64:a0:73:3c:1b:de:65:
                    b4:08:6f:82:b2:b2:5d:26:a8:9a:ce:a0:64:7a:ed:
                    8c:a2:80:ee:f8:74:2c:df:55:9b:30:2f:da:0c:43:
                    32:d5:0c:04:24:de:b6:f4:33:c7:dc:1d:8a:dd:f1:
                    a3:bf:38:20:c0:a5:61:92:58:5e:17:db:e3:0e:9f:
                    0d:e9:db:99:58:6f:cf:9a:84:3c:45:65:e6:fe:2a:
                    29:88:f6:38:b3:f8:2a:79:55:af:3e:07:a2:df:7c:
                    e4:02:90:f0:2b:ba:db:db:c9:fb:71:ea:a9:ce:34:
                    14:bc:bb:8b:f4:80:2c:a9:f5:88:74:55:92:ea:f7:
                    01:0c:0b:cf:9f:78:2d:82:50:4f:08:9f:4d:a9:13:
                    06:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:53:5A:37:08:E3:04:DB:F2:A5:C3:13:E2:67:4D:99:8C:3F:08:C9
            X509v3 Authority Key Identifier:
                keyid:FF:E8:1F:63:4E:25:E6:89:73:98:99:DD:55:F1:41:FE:44:7C:70:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-gfY04l5olzmJndVfFB_kR8cAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:4c:4d:40:2f:06:ef:26:dc:ed:49:86:5e:38:a3:03:5f:97:
         8a:b2:d7:43:1f:23:cf:3b:b5:de:7b:47:75:4f:e1:10:0a:46:
         2a:9d:83:a1:bb:79:71:1b:97:26:2f:b5:09:9c:ad:9d:21:28:
         90:77:ae:ef:1c:3d:7b:b2:71:45:da:fe:35:12:e7:b5:28:1a:
         bc:d5:d9:85:4b:f0:36:6d:4a:90:f5:ef:eb:58:e2:26:1c:32:
         e1:32:06:66:60:00:9e:82:54:cc:b7:e5:34:40:58:5f:2f:8f:
         d2:43:3f:49:4a:63:8a:92:3a:1e:fb:d4:ee:6b:3a:4f:a8:25:
         b4:fd:d7:16:da:bd:9e:b5:19:98:9e:e5:2f:1c:23:a1:65:11:
         13:43:3f:2a:b3:33:10:8c:6e:d3:ee:73:d4:3c:52:11:9c:95:
         91:a9:85:6f:b3:a9:8f:9b:e5:0a:05:3b:94:de:45:cd:47:d5:
         d6:fc:83:59:55:57:c0:68:68:c5:f4:9e:db:99:77:9a:0f:da:
         34:39:0e:b4:1a:9a:55:3b:0c:be:a8:a1:71:c0:d5:dc:56:2b:
         fd:e6:b1:a2:cd:9f:dc:12:04:e0:60:3a:9f:0e:e9:39:6c:60:
         1c:da:89:65:63:a7:57:d6:16:7b:4c:b7:71:c2:df:81:83:60:
         e5:09:e4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 18:28:16 2026 by rpki-client