Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
File:                     4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft (raw, json)
Hash identifier:          eYAteXMVRYJsL6Ga5d3OXQi5RlwPS+boiNKjD9tD9EM=
Subject key identifier:   23:C7:F7:BF:A2:08:09:B1:D5:EC:38:30:3A:B7:47:82:D1:3F:2B:70
Authority key identifier: E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E
Certificate issuer:       /CN=A9142091/serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E
Certificate serial:       02B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
Manifest number:          02B0
Signing time:             Sun 11 Oct 2026 01:51:49 +0000
Manifest this update:     Sun 11 Oct 2026 01:51:49 +0000
Manifest next update:     Sun 18 Oct 2026 01:51:49 +0000
Files and hashes:         1: 4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl (hash: hj8jp+LbCYqmJJW5T1HW/v2/9tpwyzetpDxLNtAU8L8=)
                          2: A8C0A13EAB5D11ED88A54424C4F9AE02.roa (hash: c8XgK4k1WTQiswMVAGE4kKsCbobn1u/Z+G3dpP2KXyw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl
                          rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 01:51:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 695 (0x2b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142091, serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E
        Validity
            Not Before: Oct 11 01:51:49 2026 GMT
            Not After : Oct 18 01:51:49 2026 GMT
        Subject: CN=6acaebb5-ab27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8f:79:4d:6d:81:3d:0b:11:5b:3c:21:45:36:
                    e4:b4:8c:b1:f5:c0:b3:ef:ba:bc:ca:fd:42:71:92:
                    f6:92:a5:32:4e:fa:f7:19:46:ff:8e:a4:e3:e9:7f:
                    13:12:56:a0:67:d8:01:ec:aa:30:4f:e1:a7:1d:81:
                    ac:6c:11:50:98:83:24:83:c3:36:30:1d:ed:27:20:
                    5a:a2:78:70:29:a9:2f:c9:c9:0b:6c:c1:94:b3:f1:
                    77:58:3a:68:a0:4c:eb:12:a4:43:d1:75:57:2f:77:
                    67:89:1c:4c:d9:43:33:c0:df:be:cb:4b:12:2f:12:
                    8f:e3:5f:34:02:90:c6:61:6f:9a:b8:34:d4:ef:2f:
                    d8:bb:0e:d1:79:36:7f:40:03:54:eb:8d:ac:8d:6f:
                    0e:2d:da:78:63:ac:af:9d:e6:58:33:8d:70:39:a0:
                    8f:d1:30:5d:ba:f3:53:bb:75:5f:d5:76:f5:5e:b7:
                    29:1e:45:e8:b6:97:6d:05:14:4f:f5:83:b1:d2:6d:
                    68:ea:f3:75:4e:f1:59:cd:de:1e:61:df:d2:a2:f3:
                    6b:17:7b:0b:5f:e2:0b:92:f0:f3:d9:db:cf:b8:0a:
                    df:3e:0b:33:9c:57:8e:7c:a0:d9:fc:27:05:77:ad:
                    b7:6c:20:63:6e:a0:e7:11:f7:13:52:1c:f5:fc:a0:
                    d3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C7:F7:BF:A2:08:09:B1:D5:EC:38:30:3A:B7:47:82:D1:3F:2B:70
            X509v3 Authority Key Identifier:
                keyid:E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:42:f5:16:6c:c1:72:df:c1:93:7f:81:21:ba:c3:21:f5:e6:
         36:10:d5:a9:82:97:a8:fe:31:66:1f:b6:80:8c:3e:89:cd:c4:
         2a:e4:4c:6d:d9:3f:41:7e:c9:8e:d1:ff:40:43:7e:dc:a8:48:
         43:53:a3:67:81:d0:f3:6a:1e:f0:5d:84:25:1b:55:4b:42:f3:
         c6:4d:af:25:67:3a:95:e9:49:6c:1d:28:77:3f:ef:1c:e0:91:
         12:c0:d8:e1:19:b3:e8:0d:cf:db:06:99:4a:5a:ac:67:37:57:
         a7:f6:c7:23:62:6e:f9:7d:c8:f3:42:d6:66:b2:4a:27:1d:a6:
         3b:36:a0:c7:69:75:e5:10:f1:fb:d5:03:21:d4:3c:e6:8b:e0:
         3f:e4:f9:ee:c3:73:66:68:fb:e3:87:be:9c:56:22:13:0c:28:
         90:cf:e1:f6:a0:11:a1:2a:a8:fe:99:dd:10:6d:d0:64:c2:77:
         bd:0a:94:ad:13:4b:94:5e:86:3c:ea:37:76:c3:2f:64:46:36:
         66:d1:f6:b6:f1:e9:1c:e2:94:48:a8:f5:95:5a:c2:0b:b3:b6:
         a0:62:38:45:c9:ce:bb:24:2f:9f:01:13:ca:eb:b1:a4:01:a1:
         36:4a:42:bd:7c:06:57:af:8f:f6:0d:7d:77:1b:0a:eb:c5:d8:
         b9:9c:f0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:11:50 2026 by rpki-client