Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft
File:                     srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft (raw, json)
Hash identifier:          3pWEXXQ/6g+9PpU3qdt+hX4jOHPQ/dZAJYKn/glwFq0=
Subject key identifier:   3B:82:AC:AA:74:EC:AD:1A:F4:7F:4E:7C:33:51:D5:38:3B:80:E5:F9
Authority key identifier: B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58
Certificate issuer:       /CN=A914397B/serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058
Certificate serial:       0B7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft
Manifest number:          0B74
Signing time:             Fri 02 Oct 2026 19:23:51 +0000
Manifest this update:     Fri 02 Oct 2026 19:23:51 +0000
Manifest next update:     Fri 09 Oct 2026 19:23:51 +0000
Files and hashes:         1: srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl (hash: EMS5HNT7hCSQWIGcGBjWs4zaG+FTDMwH+SBXXvi/3DQ=)
                          2: 8109A2E65EA111EA879CA66DC4F9AE02.roa (hash: 2j4qtY2NB4o4xIh+eTu9IqpJ1nrHSsrqDfHSIXATQH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl
                          rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 19:23:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2940 (0xb7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914397B, serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058
        Validity
            Not Before: Oct  2 19:23:51 2026 GMT
            Not After : Oct  9 19:23:51 2026 GMT
        Subject: CN=6ac004c7-917b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:77:fd:ec:be:8a:32:a5:08:68:36:58:36:ea:
                    92:dd:54:4c:8d:3b:92:bf:35:ee:08:94:08:e8:55:
                    93:12:00:1f:13:48:af:7c:16:af:39:41:45:0c:d3:
                    81:32:32:cc:8e:ea:d3:7a:6e:93:e6:d9:30:a4:2d:
                    cf:ee:fa:fb:11:a0:8d:08:60:cb:0f:06:d5:e2:f6:
                    1f:c4:a1:ef:12:9c:22:5f:72:7b:34:35:44:b2:f7:
                    32:b0:72:c1:1f:0e:f7:ea:f4:62:5c:2e:69:5d:2a:
                    09:79:6a:49:f4:df:66:af:4d:f8:98:ea:a7:13:ce:
                    26:c6:fb:a6:db:2d:77:bf:66:42:b9:fd:75:53:0a:
                    da:5b:31:92:26:ae:f4:b3:12:dc:8c:d9:46:6b:d1:
                    78:83:99:e2:ff:d7:da:7d:78:4b:87:dd:cc:31:46:
                    b1:af:bc:ba:01:38:2f:5a:70:eb:c0:39:e1:d2:a5:
                    a1:c8:77:6c:38:75:06:34:7c:2b:52:08:07:a7:4a:
                    8a:9d:a6:ff:70:45:fb:2f:8c:19:48:be:61:3e:75:
                    44:1a:34:2d:50:4d:bd:b6:da:d9:b1:fc:36:99:75:
                    71:56:88:a9:06:4c:f4:37:95:bc:97:6a:6a:7c:f5:
                    f0:d5:1c:1e:6c:70:b0:6b:7c:38:25:eb:46:0c:ab:
                    7b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:82:AC:AA:74:EC:AD:1A:F4:7F:4E:7C:33:51:D5:38:3B:80:E5:F9
            X509v3 Authority Key Identifier:
                keyid:B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:66:81:cb:0c:dd:e6:96:9a:c7:33:84:20:48:e3:99:51:5a:
         cd:f9:d9:cc:bf:66:64:87:3f:d9:6f:3d:25:e9:5c:e0:6a:3e:
         5d:59:24:cc:f0:97:de:d3:1a:40:52:54:00:b7:e9:dd:c0:d5:
         19:3e:c9:18:b6:2a:3d:f4:2e:8d:fd:57:fd:8a:22:6a:30:d9:
         88:0b:0d:33:09:8c:ed:e5:d2:c8:25:1f:29:72:8c:3d:cd:59:
         f2:33:dc:69:a0:e0:81:37:7f:f5:5e:e5:28:2c:5a:51:91:e7:
         94:e9:82:1e:4d:b4:ca:83:f2:14:2f:9c:e1:41:f7:d2:fd:e1:
         ce:15:bf:c2:15:0b:87:38:a2:cf:cf:08:c8:a5:74:36:7a:b2:
         3b:7f:4e:7d:89:27:5f:6e:27:55:2e:7d:1f:6b:cd:b6:25:f8:
         11:93:3f:8b:35:33:bc:60:66:8a:0d:4b:c2:40:78:98:ab:0e:
         29:16:f6:61:1f:8b:a9:ce:b3:82:a5:20:9e:bc:cc:68:c9:97:
         08:4a:b3:d4:ea:e6:9a:ac:fb:52:31:84:f1:1f:68:fb:dc:9f:
         7c:93:e5:13:83:1c:dd:91:16:fe:4e:29:65:19:89:7e:42:2f:
         a9:a6:3a:4c:07:f3:dc:cd:f7:8f:c9:31:46:90:64:47:2a:8e:
         db:11:5c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:02:44 2026 by rpki-client