Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
File:                     T4QeODPgrG_hvu69ABI10VKOzno.mft (raw, json)
Hash identifier:          HPk5BFq6+wZeLJeMkNURajfY/fDBiWb3+BFMdAs/tMQ=
Subject key identifier:   DA:AA:C1:55:4D:29:E5:80:C0:CA:7B:06:56:F6:10:39:FB:E0:1F:38
Authority key identifier: 4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
Certificate issuer:       /CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Certificate serial:       0211
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
Manifest number:          0207
Signing time:             Wed 07 Oct 2026 03:34:37 +0000
Manifest this update:     Wed 07 Oct 2026 03:34:36 +0000
Manifest next update:     Wed 14 Oct 2026 03:34:36 +0000
Files and hashes:         1: T4QeODPgrG_hvu69ABI10VKOzno.crl (hash: 8S2xelQwwlFe9PAe8mTco48UqkalBQssJ8r82QjUG9c=)
                          2: D2FF8C06A92711F08CEB6934C4F9AE02.roa (hash: KRsNH66T+IbVfJVXh4HXcfnfG/XP7iz+CZYJM0ybrSQ=)
                          3: 2546725EA92811F0A138DF72C4F9AE02.roa (hash: ccOvd6OCJeS5Mo5TD4UA7bVIYTSRvb313FpwtTK7ruw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
                          rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 03:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529 (0x211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AF6A, serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
        Validity
            Not Before: Oct  7 03:34:36 2026 GMT
            Not After : Oct 14 03:34:36 2026 GMT
        Subject: CN=6ac5bdcd-40a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3e:22:e1:6c:f9:94:9a:9c:77:3a:34:33:38:
                    2c:2d:db:23:9e:e3:80:6a:31:90:76:f1:c2:54:60:
                    94:fe:fe:83:da:18:12:7b:fc:36:92:dd:16:6d:22:
                    6f:ac:14:14:2c:1f:58:68:87:33:5f:a3:a9:56:03:
                    49:e7:db:a6:96:90:07:71:ba:62:ad:19:5c:c6:2e:
                    b3:65:81:6f:2a:b7:63:fd:0a:28:a2:ed:09:06:9f:
                    d0:26:94:13:f4:38:14:5a:ac:8b:7e:5d:94:28:00:
                    a0:3d:0d:59:66:4c:8b:b0:ba:16:54:2b:5d:b8:42:
                    5b:09:32:d5:40:57:e5:00:e2:42:35:14:17:94:a7:
                    40:d7:d6:c0:81:6d:ff:ed:6f:32:37:2a:73:61:b4:
                    8e:f8:9a:4c:44:22:1c:b4:e2:de:7f:68:1c:10:35:
                    79:b0:31:d9:98:ad:ce:57:df:da:bb:44:9b:3b:97:
                    38:a3:fa:aa:4c:ce:ab:e4:71:1f:69:29:c3:d6:a1:
                    af:54:41:8b:4e:76:16:f6:61:e4:80:4a:c5:ad:aa:
                    ab:a4:0d:d7:8e:63:18:af:e7:21:88:55:99:db:9a:
                    9f:62:63:37:66:b1:ee:ab:e9:ec:98:53:2d:6d:b1:
                    ae:fe:9d:8c:b7:a7:32:83:21:3f:17:d6:55:c4:62:
                    b2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AA:C1:55:4D:29:E5:80:C0:CA:7B:06:56:F6:10:39:FB:E0:1F:38
            X509v3 Authority Key Identifier:
                keyid:4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:91:9e:aa:0e:55:38:b0:6f:b5:3b:ef:41:a5:f8:3d:2e:83:
         23:75:19:25:c9:31:d7:76:fb:ba:9b:73:40:c8:96:5c:7a:96:
         22:23:70:79:ad:f2:51:89:cd:46:c1:7c:21:c2:7e:40:6e:b1:
         61:53:bf:96:56:5a:0d:0d:76:21:1d:41:26:a2:e0:87:9c:47:
         7a:88:69:99:a4:80:11:20:57:de:09:8a:17:64:cf:7a:31:28:
         d9:1a:35:d4:15:17:6e:c4:0b:39:b5:3d:bc:f4:31:45:20:1d:
         a4:9b:11:33:99:e9:ca:01:a5:b0:b1:5e:d1:c3:97:98:56:52:
         5f:fc:a8:47:52:69:df:4f:b8:67:46:f4:89:75:26:9c:68:17:
         5b:ff:6a:72:e6:ff:9e:3a:2f:41:1f:6e:bc:32:d5:33:63:ec:
         fb:0c:8c:58:8d:7b:ce:71:d3:af:e6:40:bf:ea:da:fb:27:15:
         bc:c2:7b:c6:38:57:12:f1:4b:c2:ce:52:dd:cc:0e:b5:e1:71:
         75:ed:ca:e6:2b:a0:2b:fb:18:40:06:68:a2:80:80:ed:a2:e4:
         9c:89:07:75:1a:99:6f:93:25:1b:15:9b:00:b5:83:9b:e8:05:
         3b:13:37:88:05:5e:74:e2:49:0d:9c:bd:58:71:3a:72:ca:34:
         30:68:6c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:58:02 2026 by rpki-client