Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
File:                     K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft (raw, json)
Hash identifier:          uQ4ykY6tMpjKCB82rnlGIgUuh+R5jAC+erNYbvmq7os=
Subject key identifier:   3B:81:8A:03:C2:3A:34:B8:E6:A9:C2:EB:B6:02:A1:80:FF:9C:03:A1
Authority key identifier: 2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D
Certificate issuer:       /CN=A9144DEA/serialNumber=2BCACF6165B58740590E59718433D8183FF9466D
Certificate serial:       019B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
Manifest number:          0195
Signing time:             Wed 07 Oct 2026 04:49:25 +0000
Manifest this update:     Wed 07 Oct 2026 04:49:24 +0000
Manifest next update:     Wed 14 Oct 2026 04:49:24 +0000
Files and hashes:         1: K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl (hash: 4vsiYrYPYXnLcdXIP81UUdBEN4gacEc6hVKA2YkWU2I=)
                          2: DC10E79AABF211F0AF7B0010C4F9AE02.roa (hash: zrqCL04jUGgsbKaYOZp7KQyNgp8nrR3Fm1zIFrxXnuE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl
                          rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 04:49:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144DEA, serialNumber=2BCACF6165B58740590E59718433D8183FF9466D
        Validity
            Not Before: Oct  7 04:49:24 2026 GMT
            Not After : Oct 14 04:49:24 2026 GMT
        Subject: CN=6ac5cf55-3c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e7:70:84:fb:d5:d5:13:f3:98:3c:66:da:a5:
                    be:06:1f:3b:0e:f3:c6:04:80:ca:01:d9:89:32:6d:
                    45:27:0f:e2:da:ea:48:f1:aa:6f:74:29:b2:fc:41:
                    0e:a7:56:69:c6:8b:d9:de:c3:74:33:23:9b:5e:69:
                    1f:6b:db:ec:c4:62:02:5b:78:c1:ad:45:1a:89:be:
                    6f:91:7f:3d:a9:8a:4d:ac:1a:72:cb:b1:c9:a6:a6:
                    3f:cf:c5:19:79:f2:7a:04:9c:bf:b4:4a:74:cc:e3:
                    c9:29:d6:7d:fa:a8:c6:2a:26:ad:63:ce:b9:1c:1c:
                    1e:49:4a:c1:45:db:d2:d4:5e:6e:51:d9:41:6b:a4:
                    63:df:e8:38:fb:01:1f:f5:50:53:e0:8c:38:f9:0a:
                    36:a2:04:b3:00:03:fc:6e:ad:41:d1:a4:a1:9f:82:
                    86:83:62:0b:65:7e:af:5b:5a:f6:75:ff:96:43:4f:
                    8a:92:e6:b6:06:bc:e4:aa:3b:f9:70:3f:51:3a:80:
                    c5:ed:b0:0b:62:f1:fa:87:a3:d5:65:33:70:54:49:
                    99:a8:c5:81:c0:ca:11:1b:b3:62:06:bb:e2:4e:ca:
                    88:6b:19:6c:ed:b8:d5:da:7e:05:15:b3:4b:42:96:
                    f3:d2:27:75:22:a5:b0:fd:23:3e:53:5c:f9:b5:cc:
                    d3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:81:8A:03:C2:3A:34:B8:E6:A9:C2:EB:B6:02:A1:80:FF:9C:03:A1
            X509v3 Authority Key Identifier:
                keyid:2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:6c:52:34:de:74:62:ca:e4:01:54:c3:ef:b5:02:8c:27:0a:
         16:f9:67:fc:b9:6f:68:e6:1d:49:41:5b:cf:2f:a0:73:ef:2d:
         9a:22:e3:36:3e:4b:89:7b:97:e2:f7:53:f4:52:fc:14:c5:e3:
         a9:93:63:2e:93:86:18:64:2e:98:42:cb:d6:b8:05:ad:70:28:
         d8:2e:41:65:1c:bd:02:ce:dd:1a:92:4a:52:63:b4:e4:5b:d6:
         74:97:e6:15:85:53:45:58:49:7d:7e:08:57:fe:69:d3:db:a9:
         01:e3:c3:32:90:f7:79:9d:26:a9:3c:f0:47:7a:9f:09:91:44:
         94:de:c0:db:56:bd:47:3a:0f:0f:94:2b:34:eb:4b:af:f2:dc:
         35:b6:28:a8:4a:e4:23:a1:9d:69:d4:23:b4:24:77:c6:87:75:
         6d:bf:c5:f4:ab:b6:3e:a0:95:14:3d:1f:38:c4:03:76:8a:1e:
         a0:0a:1e:cd:07:f4:cf:7b:9f:81:dd:35:06:4e:be:ba:4b:e3:
         88:3a:39:93:1f:cb:7a:9c:bd:f9:c1:9f:33:ef:6a:5f:7d:ed:
         89:87:38:9e:5b:b3:ad:92:7a:b2:14:6a:ec:5f:e0:b0:8c:bf:
         f4:af:81:85:d2:5f:55:e4:77:29:ec:af:57:79:65:c9:60:46:
         15:e5:39:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:28:38 2026 by rpki-client