Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft
File:                     _ksuVPGAyAmvHsmemnx-JzLZ3aY.mft (raw, json)
Hash identifier:          UcrVbQPj4YLH6/drJkzSAaeeVA64X29C7Y1iuO4kJh8=
Subject key identifier:   4F:E1:5D:D7:2A:9B:CB:EF:88:45:81:D3:80:21:C9:35:9A:17:A2:D4
Authority key identifier: FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6
Certificate issuer:       /CN=A914BE96/serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6
Certificate serial:       10DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft
Manifest number:          10CC
Signing time:             Thu 08 Oct 2026 17:24:36 +0000
Manifest this update:     Thu 08 Oct 2026 17:24:35 +0000
Manifest next update:     Thu 15 Oct 2026 17:24:35 +0000
Files and hashes:         1: _ksuVPGAyAmvHsmemnx-JzLZ3aY.crl (hash: gCc8qgtDFVgDmCkrnJm7q9Yoz7etGhDmCIgnPNX/m4o=)
                          2: 8F75257455E911E9AE112D6CC4F9AE02.roa (hash: N/R+8vPZJokbXr/3RDT9z/N8TcDj96G+vFNXOa/HDA8=)
                          3: B1KZ7cH7Yd28WHi5niYgvVkmwgA.asa (hash: kxCLSwl7XpcMSeevC/G8alM16UxyV3Qsw0G0d2H8j6E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl
                          rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 17:24:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4318 (0x10de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BE96, serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6
        Validity
            Not Before: Oct  8 17:24:35 2026 GMT
            Not After : Oct 15 17:24:35 2026 GMT
        Subject: CN=6ac7d1d4-83ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:15:91:53:80:87:8f:fd:6e:c3:77:4e:a4:d2:
                    26:f8:09:51:a4:18:53:de:ab:09:dd:d5:6a:6b:bc:
                    57:d9:86:3a:95:7c:46:60:07:cc:5c:a2:48:d8:cd:
                    fb:9d:91:10:4c:77:5e:66:5f:8a:be:3b:7f:09:24:
                    80:bb:25:0d:9d:5e:16:39:18:34:3d:8a:0e:ae:11:
                    de:e7:3b:99:66:d5:c6:24:4e:de:ed:f4:fd:df:4d:
                    1f:4f:ae:45:57:7c:4c:20:a4:c2:b1:ab:c1:0d:b1:
                    e7:bd:d6:0f:e7:8f:45:c2:ae:4a:bd:bc:36:27:03:
                    43:43:e5:e1:e3:06:09:1d:b6:fd:4b:9e:ba:9a:d8:
                    38:5c:bb:3e:5f:52:fd:9f:33:b9:f1:09:b1:c2:8a:
                    7a:73:f7:93:1c:b1:15:bf:97:44:df:d3:a2:03:9a:
                    2a:97:68:78:49:c5:1a:09:d7:c2:88:b2:01:cc:ee:
                    7c:58:f4:d7:cb:50:76:87:86:71:7d:64:33:92:f4:
                    37:f0:94:9e:84:35:57:5f:81:0d:41:05:2d:c7:2b:
                    8c:aa:c0:b1:2d:ad:7c:52:b7:82:34:1b:06:93:18:
                    1b:47:ab:60:2c:d9:60:f1:8d:7a:5d:b8:eb:6c:75:
                    d5:a3:f5:91:90:07:19:2e:7c:d4:4d:7a:9b:6f:52:
                    bd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E1:5D:D7:2A:9B:CB:EF:88:45:81:D3:80:21:C9:35:9A:17:A2:D4
            X509v3 Authority Key Identifier:
                keyid:FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:03:fe:7f:1b:83:fa:b7:2a:91:d3:27:0c:cd:59:ee:9b:54:
         fe:70:81:5a:9a:f7:82:92:c6:10:40:6c:8d:66:55:df:48:72:
         d7:30:a1:7c:53:86:18:ea:5b:93:ea:bc:50:ca:9d:b9:96:47:
         fe:66:13:ec:db:1c:bf:fc:46:bb:eb:5f:3b:74:98:28:ae:05:
         17:86:93:e5:a2:d9:b7:b9:90:39:f8:c1:22:ae:f6:93:94:91:
         3c:e9:ec:24:72:eb:6e:1e:b1:7d:95:c1:3c:d0:3e:43:a7:7f:
         d8:7a:d8:a1:bb:23:1b:bf:80:53:5a:6d:1e:a7:77:73:42:1f:
         2d:a7:d6:66:12:b4:69:b1:b2:52:2d:05:dc:16:bb:ae:4e:92:
         16:07:30:d9:9d:03:ac:2b:57:42:d6:5c:4e:27:fa:c9:9d:1e:
         b3:bb:b4:48:34:0b:3a:6d:7f:92:c5:8a:7c:9b:37:08:9a:46:
         2c:7b:2a:49:01:df:ef:cd:87:58:cd:31:4a:73:34:2e:a6:41:
         7d:c3:26:7d:05:bd:20:ae:12:d1:5a:b3:ca:09:61:a4:ff:a4:
         5a:f0:e2:0f:44:1b:9a:b9:52:60:db:a4:6b:68:be:e8:19:c7:
         dc:f9:95:71:49:48:18:05:c6:13:01:05:1e:11:72:71:57:dd:
         39:6b:35:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 00:51:39 2026 by rpki-client