Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
File:                     q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft (raw, json)
Hash identifier:          RWoT0NpzThP8snwIVslgOTbC26+OuECK67GfHx8c6As=
Subject key identifier:   99:3C:FE:44:CA:C9:AF:9E:55:3D:96:DA:D8:46:B9:59:31:F7:72:ED
Authority key identifier: AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF
Certificate issuer:       /CN=A913C91A/serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF
Certificate serial:       0294
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
Manifest number:          0285
Signing time:             Sun 11 Oct 2026 02:33:13 +0000
Manifest this update:     Sun 11 Oct 2026 02:33:13 +0000
Manifest next update:     Sun 18 Oct 2026 02:33:13 +0000
Files and hashes:         1: q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl (hash: bQVHqJFi16OZPHtf4DYgKUaPa5wjVh7RFQ/OTkvSAqc=)
                          2: ADAEBBD6161F11EE9C6E4529C4F9AE02.roa (hash: /3te3zobVZswJsFFIn071Wgbe9BzUFq7AKG46skLDvA=)
                          3: ACFD7470161F11EE9C6E4529C4F9AE02.roa (hash: Hhuce/k2Nig26k0PhaoBK79YcGuzei5AcpeXnj1kphs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl
                          rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 02:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 660 (0x294)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C91A, serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF
        Validity
            Not Before: Oct 11 02:33:13 2026 GMT
            Not After : Oct 18 02:33:13 2026 GMT
        Subject: CN=6acaf569-c7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cc:04:3a:50:a0:20:f3:ff:9f:cc:b4:c1:f5:
                    7f:68:ae:be:5f:4a:62:7d:1d:06:76:f5:bd:2e:42:
                    14:4f:16:af:9b:de:f7:49:e9:52:45:e7:8f:6e:ca:
                    2d:cc:33:10:b6:8b:61:76:29:75:0e:39:24:08:fc:
                    b2:d2:6a:e1:e6:3c:18:fa:a8:ae:7a:fc:17:a5:df:
                    64:60:9f:ad:11:45:9d:8a:a8:9e:49:05:eb:9a:2e:
                    6f:40:f0:bb:45:9a:73:3a:af:14:c4:03:00:96:30:
                    32:e6:8f:f5:d4:1b:c1:9f:1d:5d:90:a1:5a:3b:15:
                    8e:c2:2f:e3:53:e4:4a:e6:2a:96:c3:80:f3:ef:30:
                    11:a9:20:b4:cd:e1:51:8a:33:b9:e1:66:65:6f:3b:
                    57:fa:36:34:e6:7f:aa:f7:e7:bd:36:08:50:c1:a8:
                    92:5c:bf:b3:c0:ed:3c:09:30:98:c7:ad:e1:f8:c7:
                    6e:97:26:1e:de:e0:f1:e8:24:a9:e6:9f:f0:2d:b8:
                    22:17:77:00:ae:ab:31:10:3a:e2:31:fe:29:5f:f2:
                    ff:0e:e8:6a:25:7b:fd:b4:64:7b:d5:fd:c1:d2:8f:
                    20:97:ad:09:9a:1a:02:a3:cf:29:8a:74:bc:8b:d6:
                    5f:04:a7:69:6b:e8:b5:03:ad:07:3c:bc:8c:6d:27:
                    93:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3C:FE:44:CA:C9:AF:9E:55:3D:96:DA:D8:46:B9:59:31:F7:72:ED
            X509v3 Authority Key Identifier:
                keyid:AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f0:5a:05:18:0f:f0:fb:46:8f:13:e3:2c:d1:eb:47:5b:a8:61:
         6d:30:50:53:cd:c9:76:16:90:95:c2:35:db:57:f1:af:09:3e:
         9e:f5:b5:e6:89:86:97:fb:87:1f:d5:15:1b:4d:bd:62:16:4c:
         cc:1c:1f:ac:22:99:24:9b:2f:95:b8:d1:09:f4:b5:24:d9:00:
         2f:7d:94:70:20:46:70:69:9d:4c:75:af:c9:32:4c:92:75:34:
         6b:06:68:af:9b:09:cd:7c:e7:d9:45:dd:a4:53:b9:87:c4:a5:
         2a:26:61:f2:fb:be:ae:a0:e4:0a:08:a5:65:87:80:b9:5a:a0:
         87:71:91:18:6f:f2:aa:17:7f:07:43:7b:e5:80:68:65:00:82:
         94:34:2f:31:13:0c:c2:d6:7e:02:fc:0c:14:98:a7:2c:eb:2d:
         f5:fc:55:18:cd:0f:be:e3:c4:a6:1d:eb:03:b0:39:d9:55:55:
         23:4a:14:9e:5d:5e:ba:86:83:a5:87:71:15:f5:b7:4d:2d:a9:
         64:d5:5d:36:eb:90:ba:6b:ae:f9:60:81:09:df:94:06:69:76:
         27:fb:fc:14:05:23:5b:5b:8e:60:f3:e4:7b:a0:4d:cd:66:a9:
         14:a9:47:e9:52:cc:ef:ab:a3:02:5d:cd:7e:d3:1f:0c:31:82:
         72:f1:6f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:13:11 2026 by rpki-client