Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
File:                     CKtUearwyEilFC1v5NyZFitFwzc.mft (raw, json)
Hash identifier:          1go4/tVJ7yjy3ywf6LgBKTUCVoFTTlSS/840UPmxjJ8=
Subject key identifier:   F2:EC:3D:70:80:60:C0:23:D7:53:40:EE:40:D9:F4:FD:60:E9:2B:B5
Authority key identifier: 08:AB:54:79:AA:F0:C8:48:A5:14:2D:6F:E4:DC:99:16:2B:45:C3:37
Certificate issuer:       /CN=A916DC7C/serialNumber=08AB5479AAF0C848A5142D6FE4DC99162B45C337
Certificate serial:       01A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
Manifest number:          01A0
Signing time:             Sun 11 Oct 2026 00:07:56 +0000
Manifest this update:     Sun 11 Oct 2026 00:07:56 +0000
Manifest next update:     Sun 18 Oct 2026 00:07:56 +0000
Files and hashes:         1: CKtUearwyEilFC1v5NyZFitFwzc.crl (hash: Qgb13PSzijuh1za1VQCvZIsb/uTdwzY89P1bfTUq9BU=)
                          2: A6D577E2754D11F18B0D078183A30FBC.roa (hash: 55tJBQHzkVQe/2MtjgyE37tRr0q4GYCshDeazyFaUhU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.crl
                          rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DC7C, serialNumber=08AB5479AAF0C848A5142D6FE4DC99162B45C337
        Validity
            Not Before: Oct 11 00:07:56 2026 GMT
            Not After : Oct 18 00:07:56 2026 GMT
        Subject: CN=6acad35c-83aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:08:00:de:43:91:5e:d1:3d:72:62:71:65:3a:
                    76:38:6a:a9:bf:b3:22:e5:df:9f:dc:dd:3a:dd:df:
                    52:47:8d:95:11:57:93:2f:04:da:b2:70:65:40:81:
                    0d:cf:08:66:a6:1b:b7:ef:fa:eb:84:22:13:42:08:
                    fa:41:58:8f:83:72:ac:38:3e:5e:f0:6a:f8:4e:53:
                    ff:d8:ec:c3:3b:74:a9:a1:45:7f:25:69:06:4c:c6:
                    57:a3:91:e0:d4:95:de:15:fa:93:0d:d5:c0:a1:2a:
                    3f:7d:21:6e:ab:ee:35:f4:7c:99:e4:ec:6b:44:8c:
                    10:4b:d1:f7:ab:66:d1:70:1d:fd:ae:f1:41:d5:d7:
                    b3:2f:25:7d:27:1c:ff:52:9d:0e:17:b4:7f:c9:1b:
                    d9:b0:a1:44:28:23:cf:b5:06:a6:0f:89:c6:08:d5:
                    59:24:0d:67:b1:96:93:08:b2:5d:b5:89:05:0a:1f:
                    cf:17:d0:72:b2:37:b9:84:c4:3b:b8:88:3f:55:9b:
                    81:67:98:3c:c2:a2:de:12:80:0d:23:60:7a:bd:8a:
                    61:25:16:a8:0e:a2:f7:97:bf:da:cc:17:8d:b7:1f:
                    ba:07:af:a2:47:29:fc:bd:d1:f9:36:16:7a:95:7c:
                    1b:32:9a:fb:6c:4e:e8:5a:b7:9e:d0:67:f2:9a:67:
                    cd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:EC:3D:70:80:60:C0:23:D7:53:40:EE:40:D9:F4:FD:60:E9:2B:B5
            X509v3 Authority Key Identifier:
                keyid:08:AB:54:79:AA:F0:C8:48:A5:14:2D:6F:E4:DC:99:16:2B:45:C3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:33:74:4b:2b:e4:5e:d5:91:54:20:62:33:a2:67:57:1e:f5:
         b6:ec:64:64:2e:ab:30:de:b6:3c:c3:20:61:0a:5b:79:e9:23:
         bd:9f:1f:cd:a1:a6:d3:84:29:64:a6:b2:8c:c7:ac:e9:d0:c4:
         64:1c:0b:10:6f:b2:34:64:bf:cd:33:e9:8c:3a:64:3b:d9:1d:
         f5:20:2e:1d:4c:c2:c5:d6:d9:74:42:a8:99:5b:6f:4a:f7:4c:
         eb:17:26:38:61:6b:49:68:a5:d2:0d:83:f3:f7:ca:9d:36:30:
         fb:05:91:2b:22:2f:84:8d:c9:4d:08:e7:0b:cd:b0:bb:b9:fc:
         d3:d9:70:90:7b:2f:c5:9a:c3:1d:41:0d:fb:ee:e4:48:72:1a:
         95:1d:cf:39:21:bf:85:37:cc:ec:b5:a3:5e:f5:bc:13:f7:9e:
         71:dd:1d:98:19:44:bf:4e:f7:51:b4:6b:a5:ad:80:99:d0:6e:
         9d:e2:42:87:6c:1d:58:13:f4:ea:88:7d:a7:10:f0:89:93:c4:
         da:ba:8c:a4:a9:d0:d9:88:65:dd:51:31:ea:09:e0:50:c9:79:
         9b:4c:a4:c3:1e:da:bf:c8:f1:cb:4a:95:2d:7a:51:6e:cb:c0:
         c2:71:7d:a3:1e:62:29:58:23:9d:fc:1b:87:3b:7f:4a:25:19:
         23:37:f7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:40:22 2026 by rpki-client