Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft
File:                     4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft (raw, json)
Hash identifier:          +WUfRN5Oa/l7BaCrpf4n6XzrfiysXCUAXp/2ebqv2Mw=
Subject key identifier:   62:E4:FC:48:1F:D9:25:6A:E1:54:D0:41:6F:68:80:D1:CD:02:AB:2F
Authority key identifier: E2:33:9A:AB:48:62:BF:6B:47:55:CD:96:A7:0B:64:DB:79:3D:3A:E1
Certificate issuer:       /CN=A914882C/serialNumber=E2339AAB4862BF6B4755CD96A70B64DB793D3AE1
Certificate serial:       7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft
Manifest number:          0CC0
Signing time:             Sun 04 Oct 2026 18:48:01 +0000
Manifest this update:     Sun 04 Oct 2026 18:48:00 +0000
Manifest next update:     Sun 11 Oct 2026 18:48:00 +0000
Files and hashes:         1: 4jOaq0hiv2tHVc2Wpwtk23k9OuE.crl (hash: byhvmZaMyGQce4t7sna5kd6b8Axt+spDquoBUpJ8Z/4=)
                          2: 2872362213AC11F18E65BA7479EE528E.roa (hash: yg3DGNwLO01K3NtVfA2Oj4hQOOX3hfO+/m/S6eY0LII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.crl
                          rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 18:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914882C, serialNumber=E2339AAB4862BF6B4755CD96A70B64DB793D3AE1
        Validity
            Not Before: Oct  4 18:48:00 2026 GMT
            Not After : Oct 11 18:48:00 2026 GMT
        Subject: CN=6ac29f61-0386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dd:01:4e:9f:c0:37:17:81:d1:17:a3:b1:0f:
                    52:69:73:a6:aa:26:a4:9d:7e:0f:74:1a:77:8d:a2:
                    95:b6:ba:6a:df:59:66:4c:83:e9:ff:60:80:49:54:
                    6a:76:fc:05:10:d9:6e:d5:02:9b:96:53:32:ff:cc:
                    7e:ed:2e:d8:1a:9d:99:6b:9c:91:9f:23:96:4b:0d:
                    32:f8:6d:e8:ad:f1:1b:7e:65:a5:b1:3b:fa:6b:b3:
                    23:d5:21:ba:cf:3e:0f:a5:98:a9:29:79:31:f0:99:
                    5a:08:dd:14:85:27:34:9a:5c:7e:93:68:53:a0:7b:
                    9a:71:59:62:08:62:98:ac:57:e8:2b:1b:d6:f7:f6:
                    1f:5b:f8:fa:82:00:16:b5:fe:b7:0b:57:0c:cd:aa:
                    9e:8b:5f:5c:bd:23:14:17:12:20:3b:82:05:bf:af:
                    83:47:af:93:09:c0:f7:3e:d9:84:32:0f:0a:e6:b8:
                    a1:b6:77:2a:8c:39:27:e2:68:31:be:78:c9:11:92:
                    8f:26:51:45:a1:9a:7d:1f:b4:b8:70:9a:c4:42:f3:
                    d7:3d:c6:f4:2b:80:0b:77:4f:2e:0b:f3:d4:63:e6:
                    f0:f0:10:09:a7:e8:60:2f:4c:9a:45:cd:1c:57:f9:
                    06:ae:a7:6f:c1:8d:95:0e:cd:c6:0a:a0:49:38:ef:
                    c9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E4:FC:48:1F:D9:25:6A:E1:54:D0:41:6F:68:80:D1:CD:02:AB:2F
            X509v3 Authority Key Identifier:
                keyid:E2:33:9A:AB:48:62:BF:6B:47:55:CD:96:A7:0B:64:DB:79:3D:3A:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:c7:78:b1:b8:5f:5b:91:58:6a:44:78:f2:45:d1:12:55:d4:
         24:13:4f:ed:3c:47:f4:29:91:c4:5f:10:5a:83:13:09:37:ef:
         a4:99:07:72:87:5c:b8:99:0e:bc:02:60:86:f0:0b:77:52:e9:
         11:4f:12:3d:ac:a4:1c:75:38:f3:44:df:af:97:b9:19:9d:8e:
         ed:7e:9b:90:3a:6a:86:21:d5:39:e7:c4:08:be:eb:dd:03:a8:
         97:5d:0d:2e:3c:e2:fc:8a:d8:67:f3:e2:19:d5:91:f8:5d:33:
         9d:83:4e:57:ff:db:9f:44:3f:76:56:28:8c:6b:ba:99:7b:f4:
         15:39:7b:54:73:d3:e6:81:ba:6c:51:2d:54:fd:07:c8:cb:3b:
         9c:3b:18:a5:d3:92:79:09:a8:74:e7:5d:1e:bc:d2:2c:15:66:
         ad:d7:91:cf:b8:94:48:1f:b6:d7:c1:fa:4e:78:34:62:81:d9:
         0b:f1:a9:b7:24:87:d2:43:0e:85:85:e7:ab:0e:75:12:1b:83:
         1c:fa:ef:bf:d1:8b:f7:17:3c:d0:5b:76:72:f1:da:9d:52:cf:
         6d:0d:91:1f:82:ed:a9:16:04:fb:89:38:71:1e:cc:fe:ec:7b:
         f2:74:d4:38:dc:f1:12:da:de:55:7e:29:c0:ce:22:e8:c1:c6:
         d4:02:96:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:41:36 2026 by rpki-client