Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
File:                     4bkQuccxDJ9lWU_G6JifyVOzblE.mft (raw, json)
Hash identifier:          SCvsbSiG2LuuUrhmtuCiV3bI1Qr/DUsAeBMZ4JRJbNc=
Subject key identifier:   AD:09:EA:9D:A9:E4:8B:46:C9:9A:12:C0:99:95:A5:B8:E7:52:64:64
Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51
Certificate issuer:       /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
Certificate serial:       057D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
Manifest number:          056B
Signing time:             Sat 24 Oct 2026 20:13:20 +0000
Manifest this update:     Sat 24 Oct 2026 20:13:20 +0000
Manifest next update:     Sat 31 Oct 2026 20:13:20 +0000
Files and hashes:         1: 4bkQuccxDJ9lWU_G6JifyVOzblE.crl (hash: ONmr1CmgQIPOBDuivPupJrKmpdykGYJVmAVnY24anMI=)
                          2: 68D217FAC13F11F19B446DC24B11F970.roa (hash: 8Vw91JytNhBUME/g/O822wkF75I0b0JmxX5KdOJhKiY=)
                          3: 4B1D585250EA11EC8FF55B24C4F9AE02.roa (hash: 4xgHsmFBzpOEDFWrTsnY/UVdPSnGuyQ3aHzpdWQKEDE=)
                          4: 81EDAEEC6DE911F1BE416AB35CA30FBC.roa (hash: YA17LyHTfthDzdk1fJZ4Q1wQt3Gaa9uu+WHv2HF57n4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl
                          rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 20:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1405 (0x57d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
        Validity
            Not Before: Oct 24 20:13:20 2026 GMT
            Not After : Oct 31 20:13:20 2026 GMT
        Subject: CN=6add1160-b962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:53:2a:f3:9e:f8:49:77:64:d8:96:0d:a4:cf:
                    db:30:3a:ec:8a:0a:53:88:87:01:88:1c:72:e7:a7:
                    5f:c1:74:22:63:be:07:89:6e:a6:93:8d:95:2a:94:
                    06:ac:03:13:35:13:73:64:04:94:87:b9:67:d1:82:
                    0c:94:6c:cf:88:64:83:df:74:fb:1d:13:77:14:56:
                    0c:0d:fc:6d:ce:5c:14:62:8a:20:6c:9b:2f:35:09:
                    74:15:56:a0:be:9f:79:19:75:aa:9f:88:69:f9:45:
                    ca:34:e9:6a:d0:e3:32:8b:32:7d:9d:90:f9:e2:ae:
                    81:61:b2:35:20:93:48:00:60:df:10:b5:b0:3b:b4:
                    72:05:12:f4:dc:7e:f8:00:dd:8a:aa:22:44:4d:b6:
                    55:b7:34:9c:43:24:f1:d6:59:45:ec:86:fa:3b:5e:
                    5d:97:d5:33:e0:f4:e9:35:7e:75:ef:3f:47:a7:07:
                    8b:64:a4:e8:a7:48:ca:be:40:10:95:f4:48:f8:b4:
                    b0:29:c9:e0:7d:f8:d4:57:02:29:72:61:1f:e4:b9:
                    5b:84:08:a4:7d:3b:77:69:7a:42:41:42:50:ac:a5:
                    45:cb:dd:9d:cb:62:6b:32:f3:5b:da:d2:d3:4d:88:
                    e8:54:32:b4:49:ba:34:51:e8:3e:20:7f:b8:a6:36:
                    ba:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:09:EA:9D:A9:E4:8B:46:C9:9A:12:C0:99:95:A5:B8:E7:52:64:64
            X509v3 Authority Key Identifier:
                keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:80:ce:d8:07:95:1b:9f:b6:d6:84:b8:25:81:de:53:bb:71:
         e0:5f:03:6c:b5:da:21:10:ed:d1:7f:5d:a9:b8:aa:12:27:37:
         30:21:31:d3:13:e4:2c:a4:a8:ad:9b:e8:d0:36:38:d2:50:c5:
         c6:ce:0f:39:de:5d:19:24:1b:b7:f5:a8:8a:c9:de:2d:38:44:
         45:d2:8d:b1:4b:68:a0:ff:ab:32:42:31:30:3b:bf:61:64:96:
         73:26:33:80:c0:19:9b:7b:72:4f:60:89:db:08:a0:a6:b5:58:
         55:fa:db:ab:46:5a:e5:c4:b4:92:4a:40:54:75:bd:16:ab:f8:
         19:97:55:42:d1:d4:05:4f:71:61:58:b2:a0:30:d2:6d:41:3e:
         4e:c2:21:88:6f:34:79:49:cf:7b:d0:b5:dc:d0:66:ba:84:3b:
         19:c4:9e:70:bc:7d:62:3f:6a:6e:13:02:41:5e:52:f7:e0:ef:
         ed:a8:d0:39:17:ef:51:f1:c7:0e:c2:f1:6c:c7:1b:9a:eb:ca:
         84:1f:82:67:55:ca:05:53:55:85:a4:23:76:2f:92:da:e0:61:
         6b:c6:be:db:e8:a4:d7:57:09:1d:50:06:c3:9f:0b:7c:f7:75:
         59:00:12:ed:8e:b1:1b:e1:e6:48:fa:f3:c9:af:9f:d1:8d:1c:
         13:56:e9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:46:38 2026 by rpki-client