Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
File:                     rkcY5fMvAEoDEv64aa3LvMTu5RY.mft (raw, json)
Hash identifier:          9OjqNntZrulURfkgS9yi0QsX+llP00C9exRhgHGHnEw=
Subject key identifier:   5B:49:28:69:05:E0:0E:AA:E3:EE:7A:DC:62:22:A4:D0:D9:A4:D0:57
Authority key identifier: AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16
Certificate issuer:       /CN=A917C185/serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516
Certificate serial:       0A50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
Manifest number:          0A41
Signing time:             Sat 10 Oct 2026 19:45:14 +0000
Manifest this update:     Sat 10 Oct 2026 19:45:13 +0000
Manifest next update:     Sat 17 Oct 2026 19:45:13 +0000
Files and hashes:         1: rkcY5fMvAEoDEv64aa3LvMTu5RY.crl (hash: AmQmIHSUnrNM3ivblorPbRkXLDN+LDZ8txqN06qoWl4=)
                          2: DF27F546D12D11EE9F451355C4F9AE02.roa (hash: 6QMDVSthddfqb1QrZW5I4wtYqanc1b5umweIX9kimlQ=)
                          3: CB91083CA63511EA900DB923C4F9AE02.roa (hash: kprOxi7yOOu/qaqTDcj+Kv/ZVavP691sQgk1g/w7hYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl
                          rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 19:45:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2640 (0xa50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C185, serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516
        Validity
            Not Before: Oct 10 19:45:13 2026 GMT
            Not After : Oct 17 19:45:13 2026 GMT
        Subject: CN=6aca95c9-0b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:14:30:95:30:54:f2:ce:ed:89:dd:11:de:c7:
                    43:1b:4f:4d:45:7c:05:d1:ef:7f:ee:d9:44:06:6c:
                    c0:84:04:71:a1:66:2e:bd:92:f6:21:e8:e6:21:8a:
                    c3:fc:21:f3:64:cf:ce:4c:34:8b:4a:6d:78:e9:f9:
                    24:df:96:be:28:76:59:d2:64:8e:b0:b5:eb:8e:ef:
                    87:2f:f4:05:aa:46:6f:ae:f7:27:4b:69:10:87:de:
                    7a:88:11:df:d9:62:3f:60:54:f2:6a:65:83:4b:16:
                    e8:95:84:51:7b:6b:a2:d1:38:cd:30:46:8f:ef:1d:
                    f5:76:b0:5f:2f:bb:11:94:53:dd:f8:65:f6:99:c4:
                    a3:74:7c:d1:13:66:34:43:c7:42:62:32:a2:81:e3:
                    cd:53:ec:5a:63:1e:2b:fd:8c:3f:12:f1:8f:96:f8:
                    4c:d8:dc:a2:0a:10:87:db:60:11:cb:36:87:97:bc:
                    7d:9d:5f:ae:db:7d:fd:7f:f3:f1:57:c5:1d:c6:9f:
                    0a:da:b2:bb:bc:ac:a3:26:31:21:94:91:0a:35:70:
                    d6:83:f7:90:23:52:57:09:e3:94:12:08:79:94:66:
                    4b:ad:94:45:59:cf:69:1a:da:36:35:f6:c7:cd:65:
                    05:b7:73:ed:6c:80:7f:54:33:25:1d:46:e3:86:11:
                    4c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:49:28:69:05:E0:0E:AA:E3:EE:7A:DC:62:22:A4:D0:D9:A4:D0:57
            X509v3 Authority Key Identifier:
                keyid:AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:1f:83:bd:d0:86:7e:4d:eb:ab:8a:fb:92:33:1d:b0:30:72:
         b9:91:4a:b7:06:64:27:0a:a9:83:09:f4:c2:a6:8f:ab:e7:65:
         12:3b:e9:a3:82:8c:c6:ec:59:d6:49:2f:a5:f0:1f:bb:75:2b:
         04:51:51:cd:7c:eb:06:4c:0e:f0:23:6b:84:f1:0e:b1:fb:08:
         8b:e3:aa:19:d7:80:1e:88:62:e4:c9:9f:b6:f2:06:0f:6f:09:
         6a:2b:57:11:9a:58:7f:3c:2f:de:37:3c:d1:80:14:16:b3:5c:
         d0:ed:59:94:b5:59:8d:a9:24:95:dd:89:96:15:76:ab:eb:ba:
         9d:47:09:89:3b:ce:b1:ca:cb:82:87:95:13:b5:f4:de:33:b9:
         31:bc:6d:97:96:85:8e:e2:2a:aa:28:d0:46:74:17:4f:6c:87:
         26:c2:50:f8:ad:72:1a:7c:08:a1:fb:07:67:73:3f:f0:9c:31:
         89:2b:7d:2e:f2:73:87:61:7d:f5:9f:1a:0d:22:d9:72:b6:d0:
         2c:2e:20:ad:e1:63:69:e9:65:4f:15:bc:f1:50:fa:2f:58:8e:
         6a:7c:95:32:ee:59:cd:6a:d9:37:bc:75:f5:b7:b8:34:c4:cb:
         bd:9b:6c:4c:40:ad:09:9a:e5:1d:d5:a7:3f:e6:4c:24:20:eb:
         1a:9b:be:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:00:13 2026 by rpki-client