Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft
File:                     2QewWcyN7ki84-g5oeaIF6LWOtQ.mft (raw, json)
Hash identifier:          HEb9JSs8Iis6Q+qFf9Dduno8M574vIQuTig6jBaQWb8=
Subject key identifier:   F9:53:84:89:F3:0F:15:9D:F1:CB:52:42:8C:2B:87:E7:11:92:C8:13
Authority key identifier: D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4
Certificate issuer:       /CN=A9186F51/serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4
Certificate serial:       0894
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft
Manifest number:          0887
Signing time:             Tue 06 Oct 2026 20:54:07 +0000
Manifest this update:     Tue 06 Oct 2026 20:54:07 +0000
Manifest next update:     Tue 13 Oct 2026 20:54:07 +0000
Files and hashes:         1: 2QewWcyN7ki84-g5oeaIF6LWOtQ.crl (hash: RVC13G75GqGoVgN6fbaip6n2EgXQU4PVrSV/o17YRHk=)
                          2: 083499C00F7711EBBCB67820C4F9AE02.roa (hash: G0urlqYAMCegJFm0ZcL9pjGI0OqEaVlLXaKe1FLlw4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl
                          rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 20:54:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2196 (0x894)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186F51, serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4
        Validity
            Not Before: Oct  6 20:54:07 2026 GMT
            Not After : Oct 13 20:54:07 2026 GMT
        Subject: CN=6ac55fef-84f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cd:4f:b0:2e:f9:d6:dd:aa:6b:76:2d:97:86:
                    a0:09:57:57:20:16:32:93:b8:40:5a:50:e0:0e:65:
                    ea:84:a3:a5:d5:fc:e1:46:8b:ea:79:44:d0:a2:3a:
                    82:69:f6:aa:ac:bd:7a:6a:5c:d8:37:72:87:18:6e:
                    8a:77:e3:fe:a1:1c:9b:d4:03:4a:aa:72:b9:a3:fc:
                    39:e1:30:a6:3e:c9:8f:92:be:cb:e0:ca:cf:44:75:
                    41:0b:46:e0:03:2c:53:eb:52:91:4f:0f:f5:5b:4e:
                    24:3d:46:72:25:26:b9:ac:25:e8:4b:56:0f:fe:84:
                    40:a7:19:bd:d8:b0:c0:41:05:0a:e1:f2:10:95:84:
                    f6:75:58:da:17:4c:f9:48:6c:dc:3f:66:e3:83:96:
                    ae:0d:a3:1b:c0:52:49:27:00:28:3d:b2:f5:69:08:
                    85:e0:d8:07:a6:4f:f6:39:60:77:ac:9d:ba:05:e0:
                    db:50:b1:9a:94:54:f6:31:31:97:f9:8b:ee:b0:b5:
                    59:31:21:55:77:45:9c:05:5b:72:c0:ea:74:7b:08:
                    47:d8:49:4b:b4:7b:88:f4:db:e1:36:db:72:22:b2:
                    71:b6:39:1b:32:07:13:b7:07:98:2c:12:db:38:0c:
                    06:d7:b4:d9:11:d6:6f:89:f2:e1:10:0e:52:45:11:
                    36:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:53:84:89:F3:0F:15:9D:F1:CB:52:42:8C:2B:87:E7:11:92:C8:13
            X509v3 Authority Key Identifier:
                keyid:D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:41:b0:ed:9b:ab:0f:5d:71:f8:ea:b0:f6:c0:73:96:ab:2e:
         37:81:a6:5d:d8:d1:aa:bc:fa:25:36:fd:c8:fe:d4:bd:9c:ac:
         f5:19:34:6f:54:b2:f7:c7:60:37:e1:13:b3:b6:51:c9:55:27:
         72:1d:51:68:99:21:19:ab:4a:1a:ea:b4:28:25:14:a8:72:66:
         ee:ca:24:b6:c5:a5:ac:9e:c8:28:27:51:32:2d:31:9d:1e:ba:
         de:a9:35:d5:1a:1f:64:3c:c6:f4:57:3a:8b:72:b0:b7:3e:83:
         62:cf:4f:0c:3a:1e:9a:f2:fe:0a:c2:ab:44:d5:2f:e6:84:80:
         f6:f4:c2:6e:1c:f9:22:be:76:31:41:fe:18:2d:9f:fe:ea:9f:
         ae:f5:7b:8b:5b:b3:05:2b:bb:0f:b1:14:04:ae:20:4c:11:3a:
         09:07:20:d4:d2:d6:ea:cd:e7:27:2b:4d:43:d1:63:7b:ca:0e:
         ee:fd:63:5d:00:b8:cd:64:bf:5e:80:a9:f4:9a:c8:7a:17:8c:
         6f:f4:32:fe:4b:c5:86:2f:90:1e:73:36:75:f3:f6:f7:b6:49:
         35:e1:16:ca:37:9f:3b:65:6e:14:2a:b0:4a:19:3a:a9:51:8e:
         08:e6:be:36:61:39:a4:d8:f3:b0:ac:bd:f0:3a:55:85:78:b2:
         ea:aa:47:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:09:01 2026 by rpki-client