Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
File:                     _b1MDTRJL1zq5IeeR2J5blJwB-s.mft (raw, json)
Hash identifier:          yM7DeYwTILooLvNBK7rgo+iQHOaEcapeEcrNw7fIAaA=
Subject key identifier:   DA:3D:A1:DA:8E:1D:88:EE:BB:17:AF:92:4E:B7:BB:45:78:D7:15:AC
Authority key identifier: FD:BD:4C:0D:34:49:2F:5C:EA:E4:87:9E:47:62:79:6E:52:70:07:EB
Certificate issuer:       /CN=A9148D53/serialNumber=FDBD4C0D34492F5CEAE4879E4762796E527007EB
Certificate serial:       02DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
Manifest number:          0295
Signing time:             Sat 03 Oct 2026 02:54:51 +0000
Manifest this update:     Sat 03 Oct 2026 02:54:51 +0000
Manifest next update:     Sat 10 Oct 2026 02:54:51 +0000
Files and hashes:         1: _b1MDTRJL1zq5IeeR2J5blJwB-s.crl (hash: SvpPSBxrMJyJpBFu/CwG/FSuMxybfc7ySN8Cf54gMic=)
                          2: C724415E35F911EE9F140449C4F9AE02.roa (hash: 1QPFfKPtxnZyzoIhQPujaiv9QOfwMAK/nR5JlwDQYrw=)
                          3: 208652BA35F911EEB45F8B44C4F9AE02.roa (hash: h9+rV5KTh8hiz/Mh+8LSh/6EazAt2Pe7IWwQzS6Asp8=)
                          4: 2BB01CE0276711F1A27699BFC0833773.roa (hash: Oxy2vKZrTf1XlrdBowSVsy5MCvRUGaCeQ6J4bpGvONc=)
                          5: 86516CF04BE911EE8640FE79C4F9AE02.roa (hash: 2/oEhNKw4A8hCV5h32sgGlhduxEgDsT8LW5cn4d4U6o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.crl
                          rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 02:54:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 730 (0x2da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148D53, serialNumber=FDBD4C0D34492F5CEAE4879E4762796E527007EB
        Validity
            Not Before: Oct  3 02:54:51 2026 GMT
            Not After : Oct 10 02:54:51 2026 GMT
        Subject: CN=6ac06e7b-6e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c0:ee:fb:9c:95:00:fd:89:68:8a:0e:7b:9b:
                    f1:fd:47:83:9c:fd:ae:08:9a:4b:c6:14:29:d1:66:
                    64:e2:83:b8:b5:96:0b:41:df:f3:fc:15:19:08:de:
                    7e:2e:82:22:6b:e0:56:1e:c0:6a:0d:f9:76:15:e6:
                    b7:86:c1:da:58:17:8f:b4:d6:dd:14:a9:84:cb:95:
                    4a:18:1c:eb:29:c7:97:45:59:38:13:a5:d6:93:70:
                    95:06:fd:44:ee:e8:e3:c1:d9:31:94:bb:35:d1:99:
                    07:d1:b2:25:c7:b7:5e:30:fc:66:fb:d3:28:2f:a6:
                    8b:81:99:fa:96:d7:9c:aa:84:04:72:60:d2:1b:69:
                    3b:99:95:e6:fd:83:76:ff:0e:0a:96:e3:90:57:a1:
                    3b:b8:fd:20:b8:ba:71:b7:63:47:54:97:e6:51:eb:
                    bc:54:cc:9a:05:ba:0f:f7:3a:42:17:b1:41:15:c1:
                    23:c4:87:45:e0:3c:95:ae:b4:65:8b:cd:09:50:04:
                    13:61:04:6a:6d:17:dc:13:70:0e:5d:7c:78:a5:fe:
                    60:eb:46:17:0a:3b:5d:f0:27:21:5d:0e:a6:da:af:
                    38:01:70:c3:7d:f9:45:cf:35:d6:0d:4e:35:7d:a5:
                    de:aa:12:4f:1e:84:30:50:1c:c0:09:e7:45:c5:06:
                    b8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3D:A1:DA:8E:1D:88:EE:BB:17:AF:92:4E:B7:BB:45:78:D7:15:AC
            X509v3 Authority Key Identifier:
                keyid:FD:BD:4C:0D:34:49:2F:5C:EA:E4:87:9E:47:62:79:6E:52:70:07:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0e:07:5b:75:9e:cb:19:05:4d:35:1a:34:dc:a3:64:a1:4a:
         24:a7:23:98:94:02:a9:72:74:c8:58:6a:aa:ac:83:04:26:c9:
         5c:17:1a:4d:ae:ad:94:7c:94:17:d6:73:1c:50:36:c3:08:34:
         43:4c:e8:b2:9d:88:15:d6:17:30:7f:49:35:71:85:09:06:c5:
         4a:03:5a:a2:ca:13:f4:bb:c0:9e:7d:5b:70:55:c2:1c:08:84:
         87:68:9b:5d:33:32:b8:9f:0e:46:1c:a6:70:76:9b:5d:71:29:
         da:b6:8d:b6:d9:e4:bc:e8:3a:b1:d8:1e:62:14:95:67:53:0a:
         ce:99:0f:99:14:9b:78:b6:22:52:ba:53:67:45:64:39:13:81:
         d0:35:6a:39:54:61:87:fb:7a:22:c5:df:b2:ed:0f:22:b8:ea:
         d5:eb:8a:ae:61:ca:94:37:9c:4d:2e:b4:75:15:d3:4b:ff:18:
         f8:15:e8:e4:b3:ca:cc:d8:da:f6:8c:e7:fe:86:70:45:72:35:
         24:84:a9:fa:8c:3c:15:46:ae:2c:22:41:d7:70:29:55:81:09:
         ee:13:3b:17:71:81:9a:3b:d4:db:f3:71:d7:34:48:26:16:30:
         3c:a5:47:09:b1:4e:89:57:93:4b:56:d0:1c:e0:1a:e4:06:b9:
         4a:31:25:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:50:05 2026 by rpki-client