Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft
File:                     Ak2PFao5dyF1iDou3BZQFOGSiho.mft (raw, json)
Hash identifier:          bVM/g2XDsFwMRSICiw/Z3/MPmENkLRgR8+rcbslFqGM=
Subject key identifier:   86:7A:CB:BA:2E:D0:3C:53:92:C0:9B:D2:AF:75:DE:94:E9:1A:98:29
Authority key identifier: 02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A
Certificate issuer:       /CN=A917B520/serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A
Certificate serial:       E1
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft
Manifest number:          DD
Signing time:             Tue 13 Oct 2026 02:16:46 +0000
Manifest this update:     Tue 13 Oct 2026 02:16:45 +0000
Manifest next update:     Tue 20 Oct 2026 02:16:45 +0000
Files and hashes:         1: Ak2PFao5dyF1iDou3BZQFOGSiho.crl (hash: EVRCj2q53KnfaBzSZtKnahVJnzVAR0tdObzNK8TUxWk=)
                          2: 007686A0D3DD11F08C79D853C4F9AE02.roa (hash: u0M66qh4o7knuILMykFw4eLMQQ390tee1LvBxu3LBIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl
                          rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 02:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B520, serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A
        Validity
            Not Before: Oct 13 02:16:45 2026 GMT
            Not After : Oct 20 02:16:45 2026 GMT
        Subject: CN=6acd948e-2cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:35:a4:fd:25:8a:ad:e0:af:0b:ab:aa:7b:69:
                    11:93:e8:be:b5:eb:0b:d5:9b:f9:33:77:8e:5b:5a:
                    d1:9f:28:d2:f7:cd:db:9d:66:f5:87:9a:9e:08:5d:
                    aa:c3:f5:93:13:a8:f5:47:1c:5f:63:43:c3:12:01:
                    4d:6f:a1:58:0c:f7:79:56:5a:39:5a:08:ec:7c:f9:
                    5d:22:ea:a8:28:a9:ce:1b:c5:3e:e0:a2:0d:d2:b0:
                    3d:33:50:a8:32:05:0a:0e:75:56:7b:6b:6d:9c:26:
                    a6:d9:3d:69:d2:13:d1:fe:04:ea:93:0e:cc:9c:23:
                    d2:8b:72:91:fb:f5:98:df:34:e7:f0:1f:06:37:bb:
                    60:f2:42:3c:b1:b1:cb:72:52:d7:d6:e7:8c:c4:97:
                    66:0f:7b:90:2d:52:39:8b:a8:17:6e:6e:e9:cf:2b:
                    da:53:a8:ba:77:e6:10:99:d8:9a:f2:f1:f4:af:02:
                    87:22:72:92:2b:a3:7b:52:f1:87:17:9a:c2:41:ac:
                    ee:87:93:f1:c2:de:3e:73:8e:e2:7f:d1:f8:5c:56:
                    91:17:37:24:5e:2c:1b:b1:5b:58:5b:65:0c:1f:49:
                    8c:4e:44:04:1f:3b:24:3c:d4:da:3d:8a:dc:66:0c:
                    1f:f6:56:83:74:97:b4:3e:80:da:72:59:70:ca:88:
                    bc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7A:CB:BA:2E:D0:3C:53:92:C0:9B:D2:AF:75:DE:94:E9:1A:98:29
            X509v3 Authority Key Identifier:
                keyid:02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:4d:08:d1:cb:4c:4f:87:e2:69:4f:a4:10:0d:96:4b:f4:c4:
         9a:86:e3:7d:be:82:da:fb:ab:7c:99:92:13:13:58:b7:89:7c:
         8d:5d:bd:cc:c7:b3:7c:1f:6d:9c:e5:e5:c9:86:8b:78:d4:b1:
         d6:a2:63:59:50:27:f3:ef:3d:48:5f:29:4f:81:96:df:a1:3e:
         3e:80:75:55:62:97:c8:05:4a:86:13:5a:3e:f1:46:41:d9:20:
         6e:70:09:ac:86:a4:61:c1:53:b4:84:82:f0:8c:52:c6:bd:b7:
         a3:a2:9f:9a:23:37:85:4f:81:12:df:f0:86:56:72:66:8b:0c:
         e7:18:9f:61:6b:29:c6:32:f5:86:52:52:83:61:98:c1:13:a6:
         dd:a8:1c:b3:26:ee:e9:0b:67:20:46:fe:8c:c0:2d:53:0a:1b:
         ae:b4:78:12:02:89:dc:e2:4b:11:62:b1:46:69:02:86:e0:11:
         09:02:d0:90:c1:48:00:5f:26:86:d2:46:65:ef:a1:ca:bc:e3:
         5c:79:ea:b7:2e:cc:bd:e0:98:46:3a:a0:31:b4:65:3a:0a:4b:
         5d:2b:0c:73:dc:b9:a7:3f:7d:e7:ef:0a:06:b1:be:ce:89:f0:
         7d:97:8e:20:65:f4:2d:05:89:cd:fd:90:4b:4e:f5:e5:6b:08:
         a2:0c:77:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:34:36 2026 by rpki-client