Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/CCkOnu8DM9Lkv1zue8DiOZgeNU8.mft
File:                     CCkOnu8DM9Lkv1zue8DiOZgeNU8.mft (raw, json)
Hash identifier:          o1Xj5JZCXDRSq6DQ+s6zKEOiRELBCPK5RW4dwcTA0d8=
Subject key identifier:   63:93:23:D2:66:70:11:88:59:54:94:38:4A:A2:99:A3:0B:24:F9:BC
Authority key identifier: 08:29:0E:9E:EF:03:33:D2:E4:BF:5C:EE:7B:C0:E2:39:98:1E:35:4F
Certificate issuer:       /CN=A9155C10/serialNumber=08290E9EEF0333D2E4BF5CEE7BC0E239981E354F
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CCkOnu8DM9Lkv1zue8DiOZgeNU8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/CCkOnu8DM9Lkv1zue8DiOZgeNU8.mft
Manifest number:          26
Signing time:             Thu 15 Oct 2026 09:57:09 +0000
Manifest this update:     Thu 15 Oct 2026 09:57:09 +0000
Manifest next update:     Thu 22 Oct 2026 09:57:09 +0000
Files and hashes:         1: CCkOnu8DM9Lkv1zue8DiOZgeNU8.crl (hash: BzBN0auTVhLEaWZaXgszn1jOZuthZ4hZ0rUZbD2zFZs=)
                          2: BBCDD19C90D411F1867D676D4211F970.roa (hash: lDAfYAyrz14mqZWGqatOmeRWP2NtYAeHAWJKTwXbB8I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/CCkOnu8DM9Lkv1zue8DiOZgeNU8.crl
                          rsync://rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/CCkOnu8DM9Lkv1zue8DiOZgeNU8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CCkOnu8DM9Lkv1zue8DiOZgeNU8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Oct 2026 09:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155C10, serialNumber=08290E9EEF0333D2E4BF5CEE7BC0E239981E354F
        Validity
            Not Before: Oct 15 09:57:09 2026 GMT
            Not After : Oct 22 09:57:09 2026 GMT
        Subject: CN=6ad0a375-9ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fe:a0:64:50:6b:16:89:ac:7d:a2:68:15:9a:
                    cf:e2:16:87:45:e7:a5:0b:5a:b0:29:6c:ce:fa:22:
                    c2:05:86:e1:47:a6:86:14:dc:ba:65:ab:23:66:79:
                    8f:a0:c7:5f:8d:bc:b5:40:4f:72:f0:ff:cc:f5:50:
                    d0:09:d2:f9:63:de:89:2f:bf:db:b0:16:57:92:01:
                    32:5c:d7:96:2f:3e:14:ba:6e:d9:78:22:55:7c:a3:
                    df:69:87:87:95:80:2e:9e:b0:0d:7f:8c:e8:15:2a:
                    cc:6a:ff:29:a3:e6:b1:34:b6:e0:d7:98:74:29:e7:
                    a7:fa:1b:83:a0:bf:a4:28:5b:28:3d:da:89:90:63:
                    d9:20:e0:8f:56:dd:51:5f:2e:a2:ec:e4:e4:40:26:
                    fa:5c:93:9c:ec:27:96:a9:1b:52:51:79:ff:13:60:
                    7e:19:dd:7c:31:6e:53:92:ec:09:12:0b:e7:26:5f:
                    76:b7:1f:e2:8b:4a:4b:50:83:4a:ab:81:ef:17:82:
                    c5:87:bf:13:6f:66:af:23:56:cc:e2:eb:dd:3a:10:
                    28:37:6e:dc:7a:ca:c6:53:f7:14:64:1a:cb:e1:d7:
                    a9:43:76:a2:35:5f:6b:03:48:0e:bd:5f:f5:b8:e6:
                    d7:d6:51:07:ff:24:ca:ee:03:e9:24:7f:25:f7:1b:
                    48:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:93:23:D2:66:70:11:88:59:54:94:38:4A:A2:99:A3:0B:24:F9:BC
            X509v3 Authority Key Identifier:
                keyid:08:29:0E:9E:EF:03:33:D2:E4:BF:5C:EE:7B:C0:E2:39:98:1E:35:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/CCkOnu8DM9Lkv1zue8DiOZgeNU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CCkOnu8DM9Lkv1zue8DiOZgeNU8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/CCkOnu8DM9Lkv1zue8DiOZgeNU8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:27:db:39:88:d0:5c:67:4d:85:d8:ed:40:27:52:a5:fd:d8:
         7b:f4:e4:66:2e:69:ef:2a:85:82:ca:16:02:1d:46:6d:08:4e:
         ae:7c:c2:cd:86:d2:43:61:5a:f4:f4:f2:3c:5c:2d:7e:58:79:
         99:68:c9:21:3e:07:a0:82:c9:85:69:e1:5b:da:7b:35:a0:2e:
         df:aa:a0:2e:77:4c:81:2e:c0:1a:b8:5b:c6:e8:9c:2f:b2:1a:
         cd:fc:c8:39:0c:ff:cf:f7:18:20:9e:e8:c7:93:b0:b3:a1:e9:
         e3:9f:4e:ac:b4:27:d8:5c:91:3f:94:be:07:2b:71:7c:ef:66:
         20:e7:11:eb:d3:5c:df:92:b4:e4:a1:cc:43:a6:d1:4e:f6:6d:
         53:ea:c3:5a:f2:7a:3b:e3:15:c3:36:9b:46:8b:4d:18:c5:3d:
         56:18:6b:3a:87:a2:7d:fe:ba:fb:3f:9b:42:30:54:f2:e7:18:
         32:2c:a8:7c:82:a2:6d:60:af:81:a5:81:85:90:37:7a:b7:78:
         a9:73:d9:35:fc:97:b1:00:d2:14:fb:92:35:f1:3c:ae:d4:b4:
         b3:de:fd:67:19:3a:60:3b:61:25:90:f1:65:37:2b:8d:95:9a:
         66:02:53:55:f8:c5:6e:fa:3f:29:c1:7e:f6:b8:f9:8b:f0:10:
         7b:36:3d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 01:04:27 2026 by rpki-client