Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
File:                     4659B01pZ-L0n_njuNebv6KAmpI.mft (raw, json)
Hash identifier:          8lQdGYZvAmq6R54J66XPZ7v/fsO0aulJvXjyXiXnhpI=
Subject key identifier:   12:54:AE:CF:E4:A9:6E:3A:FC:F0:65:80:3A:CF:4B:75:A4:71:7D:9F
Authority key identifier: E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92
Certificate issuer:       /CN=A918A695/serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92
Certificate serial:       0195
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
Manifest number:          018C
Signing time:             Fri 09 Oct 2026 05:06:18 +0000
Manifest this update:     Fri 09 Oct 2026 05:06:18 +0000
Manifest next update:     Fri 16 Oct 2026 05:06:18 +0000
Files and hashes:         1: 4659B01pZ-L0n_njuNebv6KAmpI.crl (hash: zTS7pcGUtezMD3KBDk13DjbkJw336MFCs3xV8iDVehM=)
                          2: 0DE9C0F2691E11EF86B94667C4F9AE02.roa (hash: L5TY3FwOTzQKhRYERDun2f4Svp7WU5eqsXRirStChow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl
                          rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 05:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A695, serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92
        Validity
            Not Before: Oct  9 05:06:18 2026 GMT
            Not After : Oct 16 05:06:18 2026 GMT
        Subject: CN=6ac8764a-e5d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:e6:a4:5f:10:85:97:e8:f9:ff:38:31:ec:
                    fe:37:3b:70:72:03:56:4d:ca:d3:0f:38:d5:41:5f:
                    1f:df:bc:34:df:ff:00:1e:d9:b6:5d:e4:bd:e8:a8:
                    80:c2:3e:e1:9a:fd:ea:2b:ee:35:25:17:3c:59:ae:
                    79:e5:97:6b:99:99:c4:87:70:0a:b6:82:0d:45:48:
                    e6:0f:4c:c9:02:17:b7:01:34:13:e3:73:af:e3:02:
                    cc:ba:ab:d2:c5:82:a1:d6:9f:d8:45:69:0e:8d:8c:
                    55:f1:87:ab:35:31:f3:19:32:01:97:d5:1d:fe:de:
                    2a:b1:d6:31:7d:8f:41:51:ce:61:22:51:c7:5a:b6:
                    fe:97:d3:95:22:66:34:9a:b9:8e:71:3e:d3:39:a2:
                    c3:68:9b:31:85:c6:15:a0:11:f4:66:05:37:a6:e3:
                    1e:0a:66:4a:22:f3:47:38:da:87:f0:a0:92:e9:47:
                    1d:1e:18:0e:95:5f:5a:88:1a:50:b3:82:15:db:9e:
                    09:44:ca:e8:46:2e:ec:88:da:ff:ca:af:24:23:31:
                    1b:74:30:cf:a6:e3:ee:fe:a3:cb:d8:67:91:7a:15:
                    e0:b5:f2:44:7e:32:3d:af:0c:8d:b4:d7:66:f4:bd:
                    c4:3d:d4:7a:69:68:34:e3:93:50:20:69:af:be:5f:
                    05:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:54:AE:CF:E4:A9:6E:3A:FC:F0:65:80:3A:CF:4B:75:A4:71:7D:9F
            X509v3 Authority Key Identifier:
                keyid:E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:af:9a:ca:10:c5:91:bf:c4:1b:35:45:80:4e:e9:ad:ea:ec:
         2e:d3:44:4a:63:b3:0e:bd:27:c8:e0:be:e6:ca:07:7a:6b:dc:
         a9:4f:57:1b:0c:9a:e2:98:55:a8:a6:df:bc:51:fb:61:d7:34:
         1c:43:03:46:0f:2c:7e:36:11:64:7e:6a:ba:b7:7c:01:e7:cb:
         91:bf:cd:48:12:5f:ec:c7:0f:1b:4b:03:11:1a:dd:64:23:70:
         88:a7:70:68:3a:63:a5:53:27:bd:f4:98:31:cc:bf:51:8c:37:
         be:6c:c7:fe:81:9f:2b:63:3d:5e:32:30:76:d6:1a:aa:1d:a8:
         78:6c:f5:b1:31:c2:ad:95:a6:f3:e6:27:3e:e9:b9:16:0e:dd:
         67:6e:84:9b:65:21:e0:4a:42:dc:11:e5:f5:5c:fc:4f:99:20:
         45:ec:aa:5f:77:cd:e6:3a:c9:57:b7:f1:df:88:cb:5d:19:c7:
         0a:22:15:49:89:c9:a4:33:7e:7c:16:58:cc:0c:c3:b8:ed:23:
         11:45:9c:02:cf:a0:1e:3c:9f:a4:67:7f:43:90:13:6c:21:2b:
         61:33:d0:33:df:07:d0:4c:7a:d5:7a:08:b5:eb:46:25:21:ac:
         34:5a:51:5f:0a:76:2f:6b:8e:7f:ad:4f:72:04:f3:d3:66:c3:
         d2:cb:76:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:57:32 2026 by rpki-client