Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
File:                     4nmL4YzWTgg46agi1HhCBArIA0M.mft (raw, json)
Hash identifier:          mxFQ2pPSUHEXWJAshXgLTmuSp5SUUaExfzIV+ooQl8s=
Subject key identifier:   55:A9:76:F8:DF:F2:E9:C6:BD:1D:50:63:3F:4C:39:D6:8B:09:44:2F
Authority key identifier: E2:79:8B:E1:8C:D6:4E:08:38:E9:A8:22:D4:78:42:04:0A:C8:03:43
Certificate issuer:       /CN=A914823C/serialNumber=E2798BE18CD64E0838E9A822D47842040AC80343
Certificate serial:       59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4nmL4YzWTgg46agi1HhCBArIA0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
Manifest number:          58
Signing time:             Sun 25 Oct 2026 08:35:50 +0000
Manifest this update:     Sun 25 Oct 2026 08:35:50 +0000
Manifest next update:     Sun 01 Nov 2026 08:35:50 +0000
Files and hashes:         1: 4nmL4YzWTgg46agi1HhCBArIA0M.crl (hash: QSCROeVs+RgRdkCAsbvL1L/1Qm921EfXvjuVnLMGnwY=)
                          2: DB626DF24AF111F18CF4AA40CD833773.roa (hash: Qc04/3jafq1HIqjArWLPfNu0P5WLlwA1tLsJj60Zayw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.crl
                          rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4nmL4YzWTgg46agi1HhCBArIA0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 08:35:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914823C, serialNumber=E2798BE18CD64E0838E9A822D47842040AC80343
        Validity
            Not Before: Oct 25 08:35:50 2026 GMT
            Not After : Nov  1 08:35:50 2026 GMT
        Subject: CN=6addbf66-7e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:aa:6a:b4:6f:3a:17:b9:54:47:1d:5b:6f:67:
                    af:a2:a5:cc:04:91:0d:f7:0d:e9:21:c5:e0:21:24:
                    28:6e:e9:72:f0:7d:07:d6:f0:c1:a6:cd:16:24:bf:
                    8e:8a:9c:54:26:1e:79:8c:c6:e7:fe:c3:52:03:e0:
                    c9:87:1e:a8:e8:1a:18:c7:c2:54:ef:26:9a:e9:dd:
                    90:92:b6:61:3c:1e:a5:63:72:98:ce:3e:50:88:cb:
                    b6:f9:53:5f:dc:63:fd:7b:eb:bd:4b:dc:49:1d:08:
                    82:b6:10:54:ae:91:ca:5f:d3:6f:aa:fb:76:74:b6:
                    34:d2:c8:32:27:4f:65:f3:b8:b7:88:0e:4a:58:06:
                    c6:13:4d:cd:7d:2a:75:b3:ec:53:98:f5:4d:a5:6a:
                    cd:7c:14:04:ba:06:d8:3f:21:7e:ea:a7:c3:ca:4d:
                    b2:39:3a:bf:f6:4f:39:07:32:17:4a:79:4b:62:1a:
                    18:80:2d:d9:0f:8a:3d:f7:70:96:21:94:b5:eb:70:
                    58:81:c4:2d:22:43:6d:6e:46:71:5d:82:9f:05:6b:
                    80:e5:97:f3:e4:ef:e3:d9:f9:9b:91:14:20:52:54:
                    71:7a:64:3d:3e:28:77:34:1d:a9:db:2a:e3:05:cd:
                    65:a8:cf:a6:5d:bd:ca:07:3e:c9:86:0b:37:e3:94:
                    61:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A9:76:F8:DF:F2:E9:C6:BD:1D:50:63:3F:4C:39:D6:8B:09:44:2F
            X509v3 Authority Key Identifier:
                keyid:E2:79:8B:E1:8C:D6:4E:08:38:E9:A8:22:D4:78:42:04:0A:C8:03:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4nmL4YzWTgg46agi1HhCBArIA0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:24:0e:62:7e:87:82:2e:4f:43:69:4b:a4:11:99:77:70:5d:
         f6:8d:48:26:17:84:30:39:a0:39:26:3c:20:8c:68:fb:8f:47:
         83:69:e2:3b:0c:12:15:70:90:89:b8:b6:2f:31:fe:90:25:28:
         98:d9:e4:85:40:5b:0e:62:ed:e6:00:b0:96:0a:b2:71:99:63:
         81:82:f7:59:07:c5:25:c1:5a:95:18:7b:13:44:94:b1:2e:46:
         54:af:1e:2c:2e:86:49:f1:8d:2a:66:72:61:18:bb:01:c2:f8:
         64:50:e2:de:ab:ef:9b:c2:8f:93:14:d0:3f:99:30:6f:f5:6d:
         bd:7f:d1:97:2f:ec:32:77:8e:e9:b5:9a:27:ab:18:bc:91:7e:
         ba:49:b5:ae:a4:65:8b:0c:f5:bf:6f:06:53:ad:42:4b:ca:d0:
         0f:54:8f:53:54:e3:f6:61:d9:41:12:64:83:27:0f:68:9c:02:
         a2:e2:ce:31:04:e9:3c:8c:33:a7:0d:03:95:e1:ea:f6:c2:51:
         1f:39:29:34:14:2f:b9:87:0b:c8:19:61:dd:dd:e4:d5:39:f5:
         cd:88:70:db:d2:d3:de:b3:9a:3e:12:81:13:1c:26:a5:a2:73:
         d5:61:ba:2f:f5:98:1e:7a:38:2f:e5:cb:79:a4:5b:f7:d3:7b:
         5b:d1:46:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:37:30 2026 by rpki-client