Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
File:                     ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft (raw, json)
Hash identifier:          4RsmL8jhtP1M6uPbKPWQux5xdI5AWZSmZAKCWzIVIaI=
Subject key identifier:   58:85:02:68:FF:94:BD:1F:00:79:9A:00:65:3F:5C:1D:53:48:13:B7
Authority key identifier: 00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B
Certificate issuer:       /CN=A913C0C6/serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
Certificate serial:       0627
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
Manifest number:          0602
Signing time:             Fri 02 Oct 2026 23:21:12 +0000
Manifest this update:     Fri 02 Oct 2026 23:21:12 +0000
Manifest next update:     Fri 09 Oct 2026 23:21:12 +0000
Files and hashes:         1: ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl (hash: 4k6ZSDsupksiIOb14ksx4xu3+oA/lZsjEyjp79uWuwk=)
                          2: BE1BE7B22D0211F19E900DBEAC833773.roa (hash: 4/1mQ/gFyog7ofLPHKW77G2whCovdQMMO3mMUjzzwhQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl
                          rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 23:21:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1575 (0x627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C0C6, serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
        Validity
            Not Before: Oct  2 23:21:12 2026 GMT
            Not After : Oct  9 23:21:12 2026 GMT
        Subject: CN=6ac03c68-d6da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:39:92:32:3c:ec:e8:b4:9e:5d:f9:82:06:59:
                    94:b0:96:c6:ac:2c:81:37:b9:f3:1c:1f:92:2e:03:
                    db:0a:14:f4:02:59:d0:2a:2c:a2:8a:fd:ed:5b:81:
                    cc:f6:53:bf:4c:ce:75:e3:71:7f:e6:23:fe:3e:90:
                    3c:ee:a5:89:44:e1:53:66:81:21:8d:df:3a:dc:27:
                    59:02:f9:c4:c1:ff:1c:5d:17:6c:f4:2f:76:d8:63:
                    83:83:e6:f4:f7:f7:45:69:4d:88:16:08:d4:96:c3:
                    db:68:af:c5:a3:ac:85:04:43:50:5b:aa:2d:d0:a1:
                    df:ee:5f:3f:03:c7:8e:19:de:45:d0:60:f5:d0:cf:
                    31:29:bb:ac:fb:9f:ec:9e:96:58:6e:99:15:8b:74:
                    62:cf:96:ad:92:bd:58:ae:43:36:a9:25:45:79:1f:
                    73:a0:91:5b:f8:fd:42:20:60:35:02:2f:62:18:73:
                    ed:58:ac:3f:c1:f4:e2:b2:c5:b8:6b:9d:5b:48:1e:
                    14:a9:c1:50:d4:91:6e:94:1c:92:ad:2c:3d:18:4f:
                    7c:e4:2c:a7:98:75:32:44:53:8f:32:61:5d:08:8b:
                    b4:17:00:16:da:0c:b2:d8:c4:fb:d5:e4:d5:b5:99:
                    3a:fa:3e:03:20:d5:f0:12:ce:97:aa:f3:88:92:bc:
                    bb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:85:02:68:FF:94:BD:1F:00:79:9A:00:65:3F:5C:1D:53:48:13:B7
            X509v3 Authority Key Identifier:
                keyid:00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:b1:c6:66:5f:4f:6c:fa:6c:48:c2:3f:cd:76:dd:c2:80:06:
         5c:2d:fa:4b:0b:c3:f3:ec:49:cc:ac:e8:43:90:93:a8:7e:a8:
         ca:f9:1d:3b:61:d6:64:c5:d5:12:50:a6:91:57:ac:c9:45:01:
         ed:0d:43:4c:3a:32:e7:90:2a:60:50:99:98:d6:42:54:10:d3:
         8c:09:3a:c1:2d:77:09:53:7f:8b:1e:f7:e5:a4:ca:65:99:82:
         85:ab:1a:a6:7f:94:82:2a:2e:91:55:13:ea:0d:ab:79:7c:45:
         92:bb:28:25:6f:78:c6:fc:af:3e:f1:12:5d:3f:2b:2b:f2:d4:
         ec:21:3d:04:49:c6:d9:c6:60:49:4e:e3:0b:47:e8:04:84:3c:
         15:da:1c:f8:d5:82:60:cf:82:fe:e6:03:5b:05:94:52:3a:cb:
         7b:b2:e6:33:00:0e:b4:09:d2:f9:54:b4:26:bd:1b:49:b4:30:
         e7:de:86:99:6d:0c:d3:6d:85:b3:17:f2:a3:39:16:ce:47:e9:
         55:c7:43:7b:69:21:3e:57:f6:cd:36:47:99:53:a8:83:1b:d3:
         8b:f7:22:0a:8b:d9:8c:52:4d:2a:2c:14:6a:e6:f5:6a:4c:16:
         c7:71:b3:a9:c5:e5:d7:84:48:a3:5b:8a:de:c4:37:cc:26:aa:
         07:c3:66:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:28:51 2026 by rpki-client