Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
File:                     w7rY8KXaBY6fklA30EqnHJKLoXM.mft (raw, json)
Hash identifier:          ZoN/IEiX8eH/BuZPNoeOPAlsuX8ZEJ4H2PkuJfkvSlk=
Subject key identifier:   08:09:C5:FE:F5:99:EC:A4:89:3C:7C:BE:F9:81:CE:06:E2:86:7D:3E
Authority key identifier: C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73
Certificate issuer:       /CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173
Certificate serial:       1AD1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
Manifest number:          1AC4
Signing time:             Mon 26 Oct 2026 16:18:12 +0000
Manifest this update:     Mon 26 Oct 2026 16:18:12 +0000
Manifest next update:     Mon 02 Nov 2026 16:18:12 +0000
Files and hashes:         1: w7rY8KXaBY6fklA30EqnHJKLoXM.crl (hash: s25Z0AXbwbPcta/TxZrD6WhqQBcjg2AyQZU5AalAtqE=)
                          2: 885DA760AA8811E799348329C4F9AE02.roa (hash: LAi2UCH58zjiYPj7gMzUeS74kp81Vp9NAUy7vLyySVo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl
                          rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 16:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6865 (0x1ad1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189265, serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173
        Validity
            Not Before: Oct 26 16:18:12 2026 GMT
            Not After : Nov  2 16:18:12 2026 GMT
        Subject: CN=6adf7d44-cc7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:58:d3:4b:f5:f5:af:56:ea:b0:59:92:16:7d:
                    30:d4:d3:29:55:ee:3e:a1:32:91:d0:37:63:be:bd:
                    11:b7:d2:a1:78:1b:7d:e5:38:63:fc:a9:75:bb:63:
                    4f:99:e2:b8:38:2f:7c:8a:cc:fc:06:71:b4:f9:f8:
                    ca:50:b6:8b:a0:63:10:0f:28:9a:34:eb:08:6a:ae:
                    5e:b8:21:cb:30:dd:98:07:ee:82:18:a2:a2:82:6a:
                    80:97:47:38:61:66:78:4a:2a:07:7b:ca:ed:36:fd:
                    6e:51:d6:fd:9c:8f:b0:7d:5d:c4:18:88:e5:c1:97:
                    55:4a:ee:c3:24:21:ff:6d:a3:30:e4:ef:be:e6:55:
                    de:e2:ba:57:ca:0d:10:54:57:73:b0:40:73:f0:c9:
                    8a:f6:3a:ee:b6:72:13:2a:60:51:5a:87:79:12:1e:
                    2f:0a:04:d7:4a:13:82:99:c7:d9:b9:80:b7:5f:2c:
                    7e:60:ef:bc:04:c4:ec:c5:db:e7:5b:11:9a:ea:e5:
                    31:10:62:0c:bd:91:6f:64:a9:dc:99:49:da:09:a5:
                    6e:81:c0:1d:d3:90:a8:bc:52:ab:bf:76:64:9f:55:
                    1e:9a:52:4f:30:a6:08:cd:08:22:50:cd:b1:b3:fc:
                    3d:fb:5b:4f:9a:1e:60:48:6c:9f:b9:40:4f:e5:d2:
                    76:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:09:C5:FE:F5:99:EC:A4:89:3C:7C:BE:F9:81:CE:06:E2:86:7D:3E
            X509v3 Authority Key Identifier:
                keyid:C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:4e:94:59:bc:c8:35:8b:64:5d:bd:11:f9:29:3d:b9:61:36:
         0c:6e:bd:e6:5e:7e:98:ed:df:ab:c0:8f:54:e6:5d:d0:60:df:
         98:d0:b5:4f:f6:67:b6:ac:28:d1:12:3d:0f:d5:16:42:ef:a3:
         ec:a7:bc:9a:da:31:b3:59:34:dd:a8:3e:43:f6:19:e7:0b:c3:
         b1:2b:63:0e:ec:d6:20:33:b1:00:0f:8e:3e:7b:22:37:9b:62:
         6c:af:46:8e:d2:ae:54:de:e6:27:f7:64:b1:6d:99:c5:2a:17:
         16:60:a8:24:0a:85:31:e0:85:71:7e:bc:0a:5e:45:d2:16:46:
         d0:e8:76:68:53:74:dd:f5:93:5d:5a:d5:88:e9:19:83:41:9d:
         a7:d4:2b:a3:70:20:43:b6:e5:ce:c1:ad:75:d9:76:74:86:30:
         4b:d9:89:da:c9:28:8a:8f:94:ac:20:76:ea:6c:23:5e:61:2d:
         8a:7c:25:82:1f:35:a6:6f:ce:e9:23:02:b5:80:10:69:a8:ae:
         cd:b5:db:8e:ff:fe:93:b6:2b:61:2d:2a:2b:07:85:c3:62:ec:
         16:b0:9e:55:3b:15:74:3f:e9:7b:b6:a4:fa:df:1a:13:ea:ce:
         93:d3:c3:f0:b5:2c:e9:92:77:08:41:c0:3b:10:b7:d6:b7:5c:
         d7:d4:86:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:06:02 2026 by rpki-client