Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
File:                     tRdNgmVknN0nQmySfRaHddeD1Tg.mft (raw, json)
Hash identifier:          Ymkc3YA7JR9FkktX207yg7QHOHhvxLzJQLpkYMkKrso=
Subject key identifier:   9F:1B:92:14:FE:80:92:4C:6D:49:A9:9A:B0:5E:2A:C7:5B:EC:ED:16
Authority key identifier: B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38
Certificate issuer:       /CN=A916D459/serialNumber=B5174D8265649CDD27426C927D168775D783D538
Certificate serial:       0C23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
Manifest number:          0C18
Signing time:             Sat 24 Oct 2026 18:51:00 +0000
Manifest this update:     Sat 24 Oct 2026 18:50:59 +0000
Manifest next update:     Sat 31 Oct 2026 18:50:59 +0000
Files and hashes:         1: tRdNgmVknN0nQmySfRaHddeD1Tg.crl (hash: E+IR8RWKb/fLkKLS6FuRYdff4aR/iGmIURG5YYxraQ8=)
                          2: 61E12BD0CA0611EEB05EB92CC4F9AE02.roa (hash: nDxmW75XsnkkvR0/lsX99gyZXa0q7ERrzbEjSla7UOU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl
                          rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 18:50:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3107 (0xc23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D459, serialNumber=B5174D8265649CDD27426C927D168775D783D538
        Validity
            Not Before: Oct 24 18:50:59 2026 GMT
            Not After : Oct 31 18:50:59 2026 GMT
        Subject: CN=6adcfe14-3b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:78:5e:cb:10:17:24:8e:38:c6:4e:b6:e8:db:
                    a5:8f:ac:7e:4e:4d:5e:18:be:38:08:3c:0c:38:7e:
                    f3:d5:1e:43:34:de:67:bf:35:e0:02:91:df:82:ca:
                    6c:d7:13:50:49:30:90:9a:2b:b4:4c:7b:a4:50:16:
                    ba:62:1f:66:bc:ca:dd:a0:a4:73:b8:8d:62:07:fe:
                    8a:fb:fd:20:d6:cd:ef:a2:d9:2e:6e:2a:db:bd:1c:
                    e0:e3:a6:e4:90:70:5a:1c:0d:4d:e5:38:e8:25:5b:
                    81:4f:9d:31:8a:b3:6a:29:b9:e9:bc:31:fc:3b:ec:
                    70:e4:0e:7d:d3:1b:bb:7c:0f:5b:43:13:8b:ea:32:
                    f6:cd:54:47:b8:2c:ec:aa:6e:23:03:aa:2e:ae:f5:
                    95:6f:37:2c:68:5b:a2:e0:57:81:3b:91:cd:07:66:
                    86:91:29:65:42:20:a8:00:5a:19:4f:d4:54:d9:ad:
                    23:8f:87:aa:1a:f9:95:e4:02:bd:ca:15:a1:d4:59:
                    9d:da:8d:69:c2:b2:e2:c2:0f:9b:9b:12:ec:a2:34:
                    53:2b:e3:c1:dd:6d:11:00:c4:5d:1f:9f:a2:b0:f5:
                    7d:30:f2:d4:a5:ea:7b:fd:5a:61:25:d1:76:37:96:
                    10:e5:5d:40:65:1a:d2:c7:c1:c8:a9:01:c2:96:01:
                    d6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1B:92:14:FE:80:92:4C:6D:49:A9:9A:B0:5E:2A:C7:5B:EC:ED:16
            X509v3 Authority Key Identifier:
                keyid:B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:bc:1c:5e:1a:eb:44:8d:14:26:51:fc:a9:43:c7:f1:af:fc:
         57:e1:64:a8:46:18:39:59:7e:4c:58:ed:53:cb:04:e8:e2:c6:
         f6:83:20:14:c2:6c:cd:b9:62:f4:57:37:91:43:15:66:b5:7e:
         70:c1:72:88:08:ee:19:66:73:a4:c3:dc:d0:21:93:f5:ca:08:
         68:c8:58:9e:a3:5d:2a:1b:e2:8f:97:9c:61:43:be:04:36:f3:
         9c:92:e4:01:b8:a6:4f:a9:58:bc:75:c7:8f:66:21:1f:c2:82:
         d3:56:a9:22:2c:6e:c0:c3:73:3a:8d:6e:36:a8:04:89:fe:af:
         e5:b5:f6:d9:54:28:2c:ea:2c:3f:de:e6:a7:74:73:66:a3:37:
         f2:eb:4c:0b:56:09:e8:5a:a6:e4:77:aa:ce:f4:1c:2d:29:a9:
         91:24:71:a7:f3:20:85:15:55:1f:21:37:f4:bc:0f:83:5a:11:
         cb:1a:84:d9:97:25:b5:c8:28:d8:c0:6e:f4:39:c0:75:e2:8b:
         37:f0:2f:e4:d8:d0:b3:27:ed:9b:41:2f:e1:ef:df:a0:e4:98:
         6e:b3:0f:fe:24:cc:17:ac:64:2d:c5:c8:c8:08:9a:44:83:06:
         2b:7f:9c:56:bf:fb:2a:c1:b2:03:40:dd:f8:08:6d:63:5b:0d:
         8c:bf:15:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:55:52 2026 by rpki-client