Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
File:                     4B6dNuokjcH2d8MUv2yRgpDmP_I.mft (raw, json)
Hash identifier:          x83qD/oi9tysxVykUKa+tqxZTEFXQl/Ap+SKBGLkgKY=
Subject key identifier:   7F:06:A2:85:41:24:CB:1F:81:76:DD:56:91:EF:EE:87:F2:68:8F:5D
Authority key identifier: E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2
Certificate issuer:       /CN=A9143B87/serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
Manifest number:          B4
Signing time:             Sun 25 Oct 2026 07:22:49 +0000
Manifest this update:     Sun 25 Oct 2026 07:22:48 +0000
Manifest next update:     Sun 01 Nov 2026 07:22:48 +0000
Files and hashes:         1: 4B6dNuokjcH2d8MUv2yRgpDmP_I.crl (hash: s2R0FudRylvvvn4K+RrN+7HocpjsZTZmehNT9X1AC6A=)
                          2: 2332E938BD3811F0B9AC9752C4F9AE02.roa (hash: j3RcIOxQafJaiJkb6d3Tg7sD8bBgOOkAr8+5HaXc9rU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl
                          rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 07:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143B87, serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
        Validity
            Not Before: Oct 25 07:22:48 2026 GMT
            Not After : Nov  1 07:22:48 2026 GMT
        Subject: CN=6addae48-9ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1c:b2:c8:53:f7:73:a4:63:25:8b:c6:6d:4c:
                    53:06:64:ee:ba:14:eb:a9:bc:f7:3f:5e:e9:50:ac:
                    15:40:ab:d5:7e:dc:01:23:ad:aa:22:ca:28:71:35:
                    ec:c8:b2:34:7d:36:60:2f:05:1a:a7:61:f7:9a:97:
                    64:a0:8a:a9:f6:70:1b:1f:af:b6:fe:9a:9c:8b:2b:
                    72:41:35:ff:48:68:45:22:3f:a2:50:99:fb:46:25:
                    0d:23:e3:06:e8:03:4f:20:ad:0d:54:71:83:43:45:
                    58:03:30:06:1a:e5:0e:1c:15:6a:51:20:aa:37:53:
                    f2:bd:cb:c1:9f:61:40:29:7e:d3:c6:4b:5d:0f:3e:
                    94:2c:ed:8b:0c:24:1f:92:af:d8:f0:a3:17:4f:a0:
                    83:4e:b7:e2:e3:33:e3:09:c8:b9:03:05:44:3e:89:
                    5b:2c:b0:d6:77:65:ce:f6:09:e5:9d:0a:fd:1f:40:
                    6d:3f:97:d6:78:44:f2:df:5d:19:0a:57:b6:bd:4e:
                    a5:00:4f:d5:53:72:09:9f:ce:7d:bd:c7:b7:05:44:
                    c9:b4:a4:6e:b5:bc:d9:26:9b:93:16:26:27:ad:89:
                    6b:cb:dd:db:df:b8:1c:84:91:e2:67:a7:33:d5:9a:
                    9e:a6:fb:9c:4e:08:f9:7f:ae:fe:9e:ad:ed:12:68:
                    df:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:06:A2:85:41:24:CB:1F:81:76:DD:56:91:EF:EE:87:F2:68:8F:5D
            X509v3 Authority Key Identifier:
                keyid:E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ae:74:12:ff:ab:e6:f7:0a:b5:0f:6a:31:05:b2:3d:f6:84:
         cb:d2:1f:c9:fc:5c:89:6c:e2:86:6b:6d:93:22:a1:71:48:cf:
         08:1a:77:94:6d:69:76:94:83:61:58:38:9d:c9:d9:5c:11:61:
         80:fa:ba:f4:29:e0:18:fe:98:8a:09:2e:c5:72:c1:1c:a7:68:
         bd:ec:d5:b0:f1:fe:88:3a:c6:d4:d4:53:03:23:ee:c7:b1:95:
         0f:84:e6:81:91:f8:0e:77:80:d7:6f:98:29:ff:8f:4b:b1:71:
         01:a4:23:e5:d9:9c:ea:84:b4:47:ea:d0:61:54:0e:5b:85:24:
         f0:f5:d6:82:ab:69:39:45:88:e6:4c:ff:c9:3b:57:85:a2:b1:
         9f:81:42:2c:dc:d6:cc:59:cf:a6:3a:a3:f9:ba:77:57:52:70:
         ad:cb:7e:af:0b:ae:6c:8a:24:7d:d0:bf:e2:07:35:29:4e:f3:
         2c:54:a9:39:eb:73:55:1e:93:6e:2e:45:da:4e:2e:f4:6f:93:
         8d:4e:c7:f2:9f:a8:87:cb:52:ee:d3:81:15:60:c7:81:74:80:
         8f:7a:d7:cc:0c:22:2a:2d:07:a1:22:96:2e:e6:11:0b:44:66:
         b9:ce:89:31:8f:25:7a:1c:8a:5e:e0:81:9e:24:bb:26:f9:2c:
         ad:12:ce:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:12:29 2026 by rpki-client