Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
File:                     jSAgfR7bX1wtZjsKahC81AutOt4.mft (raw, json)
Hash identifier:          iFsb39wi9YbGJ9AmdTKWPwxMegz1aqAw5IGOvwGaduI=
Subject key identifier:   66:09:6C:1B:76:9F:3D:97:30:8C:7A:A4:40:BF:2C:BC:8F:BD:D1:71
Authority key identifier: 8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE
Certificate issuer:       /CN=A9185D6E/serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
Certificate serial:       0508
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
Manifest number:          04EC
Signing time:             Thu 22 Oct 2026 22:39:00 +0000
Manifest this update:     Thu 22 Oct 2026 22:38:59 +0000
Manifest next update:     Thu 29 Oct 2026 22:38:59 +0000
Files and hashes:         1: jSAgfR7bX1wtZjsKahC81AutOt4.crl (hash: msVc6M1R3WqjdESvOuOEwxOMAADnSpdMmvmaQG+qwVM=)
                          2: AA14FB00C70811ECBAECCC78C4F9AE02.roa (hash: RkUrfqNf2DLM9GOP2QwpY5DxbEqC3xiylu4xOiLmvVU=)
                          3: A97B2098C70811ECBAECCC78C4F9AE02.roa (hash: 2bQYhSZcJ4BtlNj5FI7uxu6AOJTLtYVvnOaTPN177HE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl
                          rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 22:38:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1288 (0x508)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D6E, serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
        Validity
            Not Before: Oct 22 22:38:59 2026 GMT
            Not After : Oct 29 22:38:59 2026 GMT
        Subject: CN=6ada9083-3671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e6:7e:38:ae:3d:0f:d8:04:1c:eb:33:39:e0:
                    9c:a8:24:b3:20:68:b2:50:9f:e3:c6:8d:45:39:2c:
                    2e:07:76:5e:48:96:00:35:c2:ff:51:35:15:b0:13:
                    1b:97:d5:da:e2:05:55:7a:17:70:1d:4b:15:c8:f1:
                    93:35:be:b1:13:63:be:a9:08:d8:2b:bc:3f:a0:3b:
                    5c:22:cb:26:b5:c5:e0:42:1d:17:57:55:04:c5:ac:
                    6b:c2:f9:d0:9d:39:fa:84:49:0e:2a:25:a7:07:16:
                    7f:6e:1a:8c:6a:29:1b:73:56:83:6a:f2:71:4b:c9:
                    1d:87:37:fe:0f:53:c9:ee:4c:98:73:2a:c4:2c:35:
                    c3:75:57:15:4d:f9:9b:a9:75:11:0a:23:2b:76:06:
                    a3:88:c0:f4:59:7c:9c:9b:e2:f8:78:c1:fa:9c:14:
                    35:0a:3d:77:0d:ff:37:46:c3:ca:c7:1f:dd:92:bd:
                    ee:69:fb:8c:77:41:62:c9:f5:2c:70:6a:eb:0f:03:
                    62:a7:6d:46:f9:ca:98:b6:86:27:34:76:ca:53:28:
                    db:c6:12:dc:da:9e:18:2d:be:1d:35:ad:c9:5d:42:
                    6a:66:a8:bf:e3:0d:c0:05:06:9e:9b:df:07:4c:7d:
                    ac:21:1c:ba:22:ea:c0:05:93:a9:f1:5f:c5:fd:6e:
                    0b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:09:6C:1B:76:9F:3D:97:30:8C:7A:A4:40:BF:2C:BC:8F:BD:D1:71
            X509v3 Authority Key Identifier:
                keyid:8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f5:14:a0:47:7a:14:5b:09:3e:08:c4:9b:f7:ee:ab:cf:7a:
         b6:d4:47:63:8f:b1:75:ab:cd:26:4d:29:49:f2:47:8b:ac:df:
         09:53:f9:46:a6:cb:aa:12:f4:89:82:a7:52:00:16:96:94:b8:
         03:26:33:bc:8a:fb:3e:e2:91:2e:67:cb:c9:02:b3:f0:c7:3d:
         71:c6:61:ac:b6:57:1c:eb:99:9c:fe:80:a8:f8:7f:d5:c6:a3:
         74:42:5c:2d:b0:f6:ca:13:bd:72:e0:ae:1b:7f:76:eb:e4:c6:
         37:83:66:10:d7:95:0e:28:ab:c5:4e:39:b2:59:5c:9f:68:2e:
         c4:01:9f:11:09:ee:3d:f8:f5:f2:7f:c0:63:0d:70:85:03:03:
         93:e0:39:ac:41:4b:63:b8:61:be:a3:dd:07:a5:43:57:ed:00:
         0d:01:6a:36:7b:af:08:54:88:2f:97:fc:6d:ec:66:9f:8c:57:
         2e:30:fd:fd:f8:b6:c6:a8:01:96:0f:44:4a:87:19:69:68:e3:
         4a:c8:9a:e0:eb:30:be:85:1d:5b:38:e7:3b:85:ca:0e:70:83:
         f1:14:5f:be:94:73:d7:62:3f:92:ad:01:cb:cf:49:c3:4d:69:
         e6:9a:77:bd:5b:f4:46:48:91:2d:d3:81:b2:08:3d:a5:42:ad:
         72:9c:57:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:45:27 2026 by rpki-client