Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
File:                     sDUqu0PwqFVkm512GmVcP8YPbmM.mft (raw, json)
Hash identifier:          513xYeR6FaiI5E7X2qZZv8mXfWfnApb3eI/QLVnEnsw=
Subject key identifier:   91:04:3F:F8:74:4B:E0:71:C0:A4:62:09:24:72:FC:2D:C4:06:A8:AF
Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63
Certificate issuer:       /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
Certificate serial:       027A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
Manifest number:          026D
Signing time:             Thu 29 Oct 2026 02:41:00 +0000
Manifest this update:     Thu 29 Oct 2026 02:40:59 +0000
Manifest next update:     Thu 05 Nov 2026 02:40:59 +0000
Files and hashes:         1: sDUqu0PwqFVkm512GmVcP8YPbmM.crl (hash: M1RnP2wtxyO2aGF9++ie5sRb9MMmrPbtrSn98voozvs=)
                          2: 230A1090248C11EEA9EE1935C4F9AE02.roa (hash: rkU50GhDXfA75Ey44jTzfhYBTmuiCkN9RKfLyY3jdes=)
                          3: 7BFE665EE17F11EF9536DC48C4F9AE02.roa (hash: PEc8Q36ZmFJmCyC4ydlSensDrscyZNlNt/tGuMlxL2g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl
                          rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 02:40:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634 (0x27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176DFC, serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
        Validity
            Not Before: Oct 29 02:40:59 2026 GMT
            Not After : Nov  5 02:40:59 2026 GMT
        Subject: CN=6ae2b23c-7fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:04:ef:b4:16:30:a6:99:2d:90:47:55:86:bd:
                    48:21:dd:06:be:4f:b9:2e:e8:63:71:c0:40:72:23:
                    86:63:81:b9:21:36:4b:0d:be:9c:15:e4:7d:97:59:
                    33:d8:60:55:48:75:a9:2d:8a:26:14:cb:ca:04:1f:
                    74:8c:30:f6:87:b6:4a:95:a7:ab:d4:1a:b0:6e:a8:
                    b4:4d:d9:c8:aa:99:69:0a:f5:18:34:6b:74:13:36:
                    21:b9:90:47:94:34:66:05:53:c8:3b:98:93:4b:33:
                    af:a2:21:22:dd:eb:01:a8:8b:66:a5:f0:da:5e:96:
                    99:7d:56:18:3b:3f:48:5a:95:47:94:3e:48:00:c1:
                    0c:dd:0a:ed:0f:f5:93:ce:76:20:b8:23:02:98:b0:
                    0b:64:89:01:e8:7b:a0:c6:3e:da:f1:2a:a2:dc:ff:
                    55:8e:49:3f:12:83:82:7a:69:c1:1d:2d:28:0c:22:
                    a5:06:71:1e:36:33:42:1d:47:c2:32:28:63:00:1c:
                    f0:b5:63:8a:d1:71:f4:da:97:9c:71:b4:df:7d:cd:
                    de:71:73:bc:3f:b3:af:18:f8:28:50:09:53:dd:bf:
                    58:d1:9f:e0:37:d5:6d:e3:6a:78:cc:f9:a0:a6:4a:
                    c7:21:07:3b:4f:18:43:7d:1c:5a:53:ff:60:cd:fe:
                    5d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:04:3F:F8:74:4B:E0:71:C0:A4:62:09:24:72:FC:2D:C4:06:A8:AF
            X509v3 Authority Key Identifier:
                keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:f3:76:0c:0e:a0:8e:54:58:9e:56:b1:08:0a:7b:21:05:d8:
         9b:25:32:6e:ba:be:9b:7f:dd:be:e9:90:d8:78:88:0f:eb:57:
         8d:c2:d6:de:57:0c:dd:a2:b0:7b:19:b1:6e:b6:a0:70:56:50:
         dd:5e:9e:e2:c0:28:d0:cf:d2:85:7b:7c:48:48:2e:d5:0d:43:
         bb:e1:02:12:22:10:64:08:49:3a:ba:53:9b:16:12:6f:67:55:
         e0:74:9e:16:0e:64:66:51:90:22:e2:37:2b:99:3f:a2:c6:e5:
         fc:a4:cb:89:f2:f3:4b:6e:60:22:a9:49:4e:64:fa:43:bd:91:
         80:d1:1b:70:30:73:ca:c9:f1:33:a6:f3:4f:5e:be:14:e5:08:
         06:3b:40:6a:03:a0:dc:8f:1a:06:3c:64:e5:dd:f1:58:09:08:
         d8:d2:a8:ed:1f:cd:cd:70:aa:26:fe:86:db:3b:43:43:4e:ae:
         ff:60:0a:df:0b:65:5d:4b:77:7f:a4:e0:3f:d7:75:e0:1a:99:
         3e:6e:30:f4:33:b1:49:5d:5c:6b:64:40:9f:f6:a8:76:f2:72:
         43:8b:48:6a:39:e3:cb:ca:52:08:cf:bd:88:62:b4:f0:c3:0a:
         3f:39:0e:ee:b9:95:a8:e2:58:ac:db:6b:f0:8b:82:e2:6b:88:
         96:0b:52:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 01:31:58 2026 by rpki-client