Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
File:                     aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft (raw, json)
Hash identifier:          A3hOUSi/ADXHNmThSms18+pwJZSczb6shYfgCnVj85c=
Subject key identifier:   0B:81:98:AC:A8:1D:A4:9B:1B:5C:79:AD:83:0B:DC:42:19:08:45:16
Authority key identifier: 69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33
Certificate issuer:       /CN=A914FED3/serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
Certificate serial:       0F11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
Manifest number:          0EF3
Signing time:             Sat 24 Oct 2026 17:37:34 +0000
Manifest this update:     Sat 24 Oct 2026 17:37:34 +0000
Manifest next update:     Sat 31 Oct 2026 17:37:34 +0000
Files and hashes:         1: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl (hash: J7QtJ9/3DygtBsKaDpw63Ksfwb5nbJ19xgDojOE6ywQ=)
                          2: F9BDC484F7B011EB84345029C4F9AE02.roa (hash: Gz9eqekiWDiK9v3eDHt3H2hLACZfxZzIPs/2qncX1gM=)
                          3: 6E8576BC0F1911F0A007DF16C4F9AE02.roa (hash: uIYeCaBuRDEfSa74mfNr2LSTxBd9PK1A2yHp2J/i9kM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl
                          rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 17:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3857 (0xf11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FED3, serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
        Validity
            Not Before: Oct 24 17:37:34 2026 GMT
            Not After : Oct 31 17:37:34 2026 GMT
        Subject: CN=6adcecde-9394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:75:90:de:19:ae:68:b9:94:c7:f1:fe:eb:22:
                    6a:39:88:4d:0f:50:e5:8d:46:a5:34:fb:de:78:65:
                    b1:d5:7b:a2:73:d5:50:3e:c6:5b:3b:9d:91:a2:0d:
                    bc:1f:03:07:c4:e2:9c:c6:ce:23:83:ba:3d:35:93:
                    01:1d:37:4b:dd:48:d7:e8:6c:fb:c4:98:68:dc:ca:
                    c6:d2:7f:5d:e6:6d:d6:b2:64:c8:b2:02:a5:77:94:
                    9b:06:5e:ba:bb:c8:6a:ff:c3:a7:e4:a5:01:85:0d:
                    b3:df:8e:74:fc:bd:9f:d4:01:22:9c:08:49:18:3c:
                    2e:fe:79:28:fb:e9:8a:4a:8d:c9:71:8d:76:5c:41:
                    11:d0:6b:b8:e7:67:59:4c:23:70:25:0d:7f:ce:b1:
                    a0:94:c6:62:35:a0:23:05:a1:a4:76:5e:82:6a:20:
                    ce:48:83:aa:c5:81:8f:ac:4d:dc:0a:80:0e:38:62:
                    00:ae:71:96:63:f9:b4:97:32:e4:30:d2:70:80:61:
                    65:2a:43:02:77:62:3e:06:cc:e4:d9:2f:aa:8f:d4:
                    87:18:8d:ba:ef:54:21:2f:2d:95:71:01:e7:d3:b8:
                    90:52:21:cb:eb:e1:01:3c:d9:d7:5a:14:11:69:23:
                    20:aa:19:e5:8c:06:be:10:5c:49:ee:60:7f:ad:b2:
                    03:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:81:98:AC:A8:1D:A4:9B:1B:5C:79:AD:83:0B:DC:42:19:08:45:16
            X509v3 Authority Key Identifier:
                keyid:69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:6d:88:f1:9e:ed:99:d6:cf:f9:67:f1:30:67:d9:49:c5:84:
         05:ba:f2:67:27:54:ac:48:e8:6a:e0:43:a7:f5:74:0a:85:88:
         b3:d5:b4:99:ec:7f:ae:db:5a:cd:17:54:78:cf:8f:97:26:47:
         21:29:d7:d3:61:9c:97:d6:8a:14:1c:7b:28:52:c4:cd:44:cf:
         71:f0:4e:6a:37:8a:6e:f1:32:ec:9d:49:30:16:10:c2:d7:3f:
         5f:3f:56:f9:cd:7f:1b:63:28:9c:3d:22:be:97:a1:77:aa:90:
         4c:56:8f:ae:de:4b:c7:24:00:54:72:03:22:29:ea:9b:5b:e8:
         22:9d:c6:0c:d3:95:9d:55:20:fb:5b:3d:7f:bf:c7:e6:1f:bb:
         89:50:94:2a:0a:60:ac:76:6d:21:c8:c8:e0:d5:de:23:de:54:
         c1:31:26:d6:a5:e2:21:ce:64:8b:dc:34:ec:2e:e9:92:bb:99:
         e8:e1:e4:72:12:e0:85:85:51:0e:47:7f:6f:1c:51:67:0e:ce:
         fc:d6:a6:58:f6:78:2f:de:fc:ed:27:6c:b7:8b:90:4c:e8:c0:
         f4:9d:45:ac:e2:83:f2:67:dc:41:1d:35:e7:65:4a:be:ad:73:
         67:20:d6:3d:af:17:91:ac:25:ef:03:2c:98:19:e9:2f:58:98:
         ee:21:2c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:04 2026 by rpki-client