Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft
File:                     k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft (raw, json)
Hash identifier:          sv3JUITE0u3eP2+rg8Ek40biBy/zycmJpgJf2DZiwfA=
Subject key identifier:   62:43:CF:01:09:B9:1E:21:E9:06:8F:88:0E:05:1F:D9:C9:D6:1A:39
Authority key identifier: 93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04
Certificate issuer:       /CN=A9164FD2/serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04
Certificate serial:       089F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft
Manifest number:          0895
Signing time:             Fri 16 Oct 2026 20:54:24 +0000
Manifest this update:     Fri 16 Oct 2026 20:54:23 +0000
Manifest next update:     Fri 23 Oct 2026 20:54:23 +0000
Files and hashes:         1: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl (hash: edk8iTabfe09Q8wqbqRMyGdyJXQ6rDR0N4W/Ll85emI=)
                          2: 2FF4108A0C3911EB828BDC25C4F9AE02.roa (hash: HKGRir2n7i6fdg97EN5g+9sFpLyOtuQtaP0V1gAFbbw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl
                          rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Oct 2026 20:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2207 (0x89f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164FD2, serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04
        Validity
            Not Before: Oct 16 20:54:23 2026 GMT
            Not After : Oct 23 20:54:23 2026 GMT
        Subject: CN=6ad28eff-e976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f6:f8:0a:e1:f8:ee:d9:a0:a1:29:5e:e2:b3:
                    d2:b1:1d:76:02:92:95:66:ed:07:b0:79:f3:37:95:
                    8f:51:b0:e3:54:1c:45:22:1f:f9:2c:13:6a:a8:0d:
                    4b:6d:52:ba:6a:c4:e1:19:20:bc:fb:88:d1:e1:5a:
                    0b:49:10:6b:85:d0:1e:09:c4:c2:8d:32:91:6b:0b:
                    1b:02:04:46:52:36:f1:2e:fc:bb:f4:b3:0c:1c:de:
                    35:ce:08:0d:75:84:66:53:e2:e0:10:73:2e:29:d6:
                    df:55:53:02:e5:92:03:d7:42:38:85:5f:08:ed:8d:
                    e9:dc:cb:0b:f1:02:d3:f4:96:c9:af:20:69:8a:c7:
                    15:4f:21:02:f3:2a:3c:bb:14:ae:71:1d:a8:83:0e:
                    7b:d6:39:61:07:fd:08:c7:dc:be:e7:34:de:af:c2:
                    35:7c:52:0f:e9:55:de:8a:b7:e2:b1:9d:c6:de:18:
                    71:c3:6a:64:0d:04:0d:e1:bf:99:85:39:9c:d4:c9:
                    45:9d:c5:4a:4b:0b:0b:6c:bd:70:29:7a:b6:5c:61:
                    e8:55:c7:ef:f2:01:2d:4b:ba:71:58:11:69:f8:e9:
                    d4:91:07:fd:77:e3:a9:69:97:42:0c:06:55:2a:5d:
                    d3:60:c7:64:93:01:c0:6a:e0:30:70:28:c7:6c:10:
                    4b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:43:CF:01:09:B9:1E:21:E9:06:8F:88:0E:05:1F:D9:C9:D6:1A:39
            X509v3 Authority Key Identifier:
                keyid:93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:55:0a:e2:05:78:d9:01:82:ca:4a:8b:94:0f:de:af:dd:3d:
         2d:33:8f:80:94:99:2e:e8:b8:d9:c8:5b:0f:6b:f9:05:78:e8:
         98:d4:dd:85:48:b9:a9:7c:c9:90:39:10:e5:ff:d6:74:94:d2:
         cb:59:23:cc:ad:e4:ea:a5:08:a5:12:03:ae:7b:90:df:19:27:
         04:d8:cd:1e:80:84:57:01:d1:da:05:0e:80:b6:78:fc:c3:bf:
         98:35:b3:c7:70:f5:20:d1:a8:d2:a9:f5:83:b1:5a:5e:ad:1c:
         25:f3:60:9f:1b:7a:38:82:e6:d8:d1:cf:18:0f:c2:45:df:43:
         76:63:b8:b3:de:50:ae:cc:9f:de:f7:7b:06:ca:19:ec:6d:21:
         44:2d:0d:82:ad:b0:66:d2:76:7a:69:b0:ca:09:d3:0f:a3:14:
         dc:1a:10:8c:3f:7e:49:65:dc:d4:d5:36:bd:f9:44:29:a8:16:
         3e:e2:f2:35:27:df:99:9f:20:e6:e9:8f:49:3a:e5:e2:89:67:
         46:10:49:f9:38:ec:8f:3c:2d:c1:c7:40:e2:cc:f5:ef:24:7d:
         62:0e:bf:fd:84:f3:be:24:26:78:05:00:5f:bd:c3:a9:01:9e:
         b2:12:d0:59:ed:2c:c6:e3:85:f7:4c:37:6e:8b:e8:4d:43:87:
         de:d0:c3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 12:05:20 2026 by rpki-client