Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
File:                     iV2mi62Kf50xeIVse2LpwWiLK3M.mft (raw, json)
Hash identifier:          NMd6Gee6SfYOP3D5taDcxoxuravkTjDnfDlD0HUuPbQ=
Subject key identifier:   8F:9D:58:7F:05:75:3C:42:82:A3:17:A3:D2:7B:3B:40:C6:D6:74:64
Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
Certificate issuer:       /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Certificate serial:       1094
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
Manifest number:          1078
Signing time:             Sun 18 Oct 2026 17:26:43 +0000
Manifest this update:     Sun 18 Oct 2026 17:26:43 +0000
Manifest next update:     Sun 25 Oct 2026 17:26:43 +0000
Files and hashes:         1: iV2mi62Kf50xeIVse2LpwWiLK3M.crl (hash: Mvvpqf8fWXYyru7rEdmgjVFtWCOaW6UYXFNPFjdAljo=)
                          2: 4735CB9A93EE11E9B1F2926AC4F9AE02.roa (hash: JR72/EZy5aRrSFB9vWQMg1q1NBXm5hj69ANbCPmEu98=)
                          3: 47B75B3893EE11E9B1F2926AC4F9AE02.roa (hash: XvZz5Qg4UuABOAvZL3TrqvqvGORz9Mmy5LeD7IN22s0=)
                          4: CC72753A7CE511E985E29B7BC4F9AE02.roa (hash: Ri/V1vsZYZSf3Iiz5nBojjsApKtj70HrLpdneU/NrfM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
                          rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 17:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4244 (0x1094)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169CEB, serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
        Validity
            Not Before: Oct 18 17:26:43 2026 GMT
            Not After : Oct 25 17:26:43 2026 GMT
        Subject: CN=6ad50153-3b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:91:c3:f3:b9:dc:d1:63:f2:91:31:39:61:18:
                    e6:68:c2:64:62:56:4e:7b:aa:b5:98:61:31:20:d8:
                    be:20:b5:ad:69:46:9b:e4:8f:6b:b0:02:a9:38:86:
                    b0:3b:e8:c6:05:48:45:01:01:8a:6f:bd:65:07:da:
                    fc:fe:f2:83:9e:fe:38:26:bf:1d:57:09:0a:f4:c5:
                    b9:47:e5:cb:bc:88:98:56:dd:85:ef:90:81:37:2c:
                    6d:00:ac:85:f4:ee:60:34:c3:0a:10:4c:65:56:8f:
                    c7:fc:1f:d8:0f:1c:54:99:09:9e:3a:6e:8b:14:3f:
                    31:60:b3:86:2b:3e:16:9b:7f:f5:bc:74:a3:f9:e2:
                    6f:2a:92:18:22:a1:d6:74:37:15:69:4e:a9:1f:81:
                    3f:3f:07:21:aa:13:3e:39:80:a1:9f:36:92:ac:37:
                    21:61:d6:20:e2:bd:c3:b4:81:d0:42:12:c0:9b:73:
                    88:7f:6b:e3:da:d9:40:b9:f4:e7:af:b8:a3:19:91:
                    1b:5e:37:48:d5:e2:61:fe:0e:7d:68:1e:d5:6b:4a:
                    58:63:01:4b:ce:cd:b5:7d:19:f6:fe:d8:53:92:7e:
                    b0:1b:7e:25:d7:ad:54:3e:a9:84:b1:57:19:d5:59:
                    2f:26:f3:66:2e:45:da:c0:8b:1e:fc:c2:a1:37:6c:
                    6a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9D:58:7F:05:75:3C:42:82:A3:17:A3:D2:7B:3B:40:C6:D6:74:64
            X509v3 Authority Key Identifier:
                keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:2a:6a:27:f3:55:29:5d:71:5b:d9:23:75:72:70:35:b9:92:
         ca:ef:0e:4e:e6:6c:7d:44:32:cb:61:13:8a:91:d4:5a:6a:c4:
         bf:5e:5f:24:57:05:3c:f4:b4:9d:11:e8:58:ab:28:6c:6c:89:
         5c:1c:d0:8f:e0:28:70:a0:71:b2:17:1b:c5:30:74:97:c7:d7:
         21:fd:77:5e:92:3c:df:a7:20:25:d3:10:ae:3c:ee:67:5a:d2:
         63:c1:e4:99:ed:68:c5:24:e8:f1:c9:6f:cc:de:17:3e:68:d0:
         bc:a8:cc:03:ae:2b:4a:a6:a2:21:b2:6e:81:78:b7:ea:17:ac:
         82:7a:ee:ab:86:80:72:82:a9:86:be:3b:aa:11:b6:18:f6:ea:
         9a:aa:31:4a:7a:23:e0:39:ba:1a:43:b4:7e:07:62:7d:58:df:
         e9:2b:36:98:eb:5c:90:01:01:b2:8f:b0:56:a5:b1:44:4e:66:
         84:2f:09:21:4e:d8:9a:1e:78:e0:dd:f8:25:3f:b3:ca:90:71:
         43:ce:1f:e9:e6:70:c8:5d:a5:b5:8a:fc:47:63:00:39:15:89:
         19:b2:7f:d2:dd:90:48:cb:82:dc:e7:03:ad:7e:90:b6:4d:bc:
         e8:90:9e:a6:6d:28:28:65:c6:76:d7:b1:f1:d1:54:f5:78:ca:
         cd:e6:4b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:20:31 2026 by rpki-client