Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
File:                     cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft (raw, json)
Hash identifier:          4DwZ6copKmE9RN0Jf1Z6dKn4WVmL3+ch7rgdW22hxqo=
Subject key identifier:   DB:F3:20:00:80:AE:79:FA:9F:05:1E:48:B2:14:24:48:D8:D2:34:89
Authority key identifier: 70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F
Certificate issuer:       /CN=A9186980/serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F
Certificate serial:       0863
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
Manifest number:          085D
Signing time:             Sun 04 Oct 2026 20:58:46 +0000
Manifest this update:     Sun 04 Oct 2026 20:58:46 +0000
Manifest next update:     Sun 11 Oct 2026 20:58:46 +0000
Files and hashes:         1: cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl (hash: dHHW+uboT8Fp0/+Xuo3Zoeradryrv92Nf+TfM4l1sO8=)
                          2: FFA6AD56DF7211EDB0D24244C4F9AE02.roa (hash: dWIZyaUXtS3+l+2OTps4tqiCz5E9mMM/Wq+9JsY8Y08=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl
                          rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 20:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2147 (0x863)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186980, serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F
        Validity
            Not Before: Oct  4 20:58:46 2026 GMT
            Not After : Oct 11 20:58:46 2026 GMT
        Subject: CN=6ac2be06-ecdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:92:f5:4a:9e:ba:ef:8a:a9:ce:70:87:25:6a:
                    f1:76:9b:61:bb:6e:fd:d4:ed:a6:a6:4c:5c:7a:23:
                    94:c2:8c:4e:15:0d:27:5d:77:4d:4d:8f:6b:6d:ef:
                    cc:3f:a9:ff:a1:dd:0e:82:58:2a:a9:65:07:ce:c0:
                    f1:7b:a7:a4:53:a6:68:6d:dd:e9:d3:ab:80:85:5c:
                    b0:2c:98:33:c8:c0:84:94:77:dd:4c:5c:44:c1:65:
                    24:c5:08:fd:36:a9:80:cb:0b:63:e8:fa:87:dc:11:
                    a3:1d:a5:ee:61:f9:6f:68:28:ad:07:7c:cb:64:d9:
                    8f:d5:a2:4e:53:b5:e1:ac:3a:95:15:12:d1:b1:dd:
                    e9:d4:83:53:c3:cb:27:e2:15:30:b3:ce:1c:12:b5:
                    74:d6:ae:c1:28:be:7e:f8:36:fa:18:b4:ec:f0:b3:
                    d7:0d:38:42:58:c3:65:8f:f1:ed:21:c1:c8:69:d7:
                    56:9e:9b:a8:d3:61:20:02:b9:68:8c:bb:1b:f8:8b:
                    28:98:ff:74:19:28:b0:81:1c:69:80:09:d6:a9:a7:
                    05:e3:db:d0:3c:52:6b:35:56:2e:1d:33:e8:66:9f:
                    84:a5:a0:c9:96:ca:55:73:8b:85:45:1e:fb:43:03:
                    8d:0e:5b:84:11:27:f8:60:fa:8a:90:31:6a:bd:51:
                    71:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F3:20:00:80:AE:79:FA:9F:05:1E:48:B2:14:24:48:D8:D2:34:89
            X509v3 Authority Key Identifier:
                keyid:70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f6:ad:b3:80:83:7b:95:f9:6a:5e:0e:d0:c4:a5:0d:e3:b1:
         51:0c:5d:0b:b9:39:8c:a9:6b:c5:ee:58:cf:b4:de:ac:cd:cb:
         6b:28:b1:f3:14:89:0c:a5:f6:a3:1f:61:13:41:15:77:d8:94:
         ab:2f:67:5c:1c:77:76:2c:2a:e9:1a:9b:43:40:0f:f3:3b:db:
         81:19:8f:d1:5b:f2:af:bd:9f:4a:03:7c:0e:60:0d:d0:10:e8:
         4e:87:8b:09:93:f5:d8:c1:d5:a3:74:64:43:7e:eb:3d:fa:ae:
         b8:e3:8b:b5:75:42:32:38:bd:0b:3f:64:94:63:d6:a3:0f:7a:
         7d:03:12:22:39:f1:75:21:0d:1a:b3:f8:7e:a0:9e:ea:48:2d:
         ee:85:76:15:c8:82:c7:0a:89:22:0e:f0:8c:10:48:82:c7:c0:
         2f:6f:aa:41:c2:2f:03:3a:83:30:f8:59:6b:da:59:45:78:1e:
         9c:56:33:13:6d:34:1c:ea:a4:20:9e:57:8f:99:85:06:69:c3:
         25:63:d6:67:c6:c3:39:4f:80:2f:f8:43:8e:65:8d:17:10:b9:
         16:31:1c:48:ff:56:91:90:d2:1a:f2:19:3a:bc:f0:19:86:32:
         a0:23:46:9e:79:4e:7e:92:a2:21:bc:2a:35:5d:bf:57:4c:56:
         7b:98:6e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 23:23:43 2026 by rpki-client