Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.mft
File:                     32d9hpNHe5Kh6f58IEImls6oYJ0.mft (raw, json)
Hash identifier:          8C54kcNsdFKgXXr79nTjYVL8q2pDZK5c1kFTdTh3fgw=
Subject key identifier:   B6:1B:E8:9E:87:BC:BF:89:0F:D4:6B:1D:2B:DE:9E:0E:D7:E1:50:04
Authority key identifier: DF:67:7D:86:93:47:7B:92:A1:E9:FE:7C:20:42:26:96:CE:A8:60:9D
Certificate issuer:       /CN=A918BDA2/serialNumber=DF677D8693477B92A1E9FE7C20422696CEA8609D
Certificate serial:       0423
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32d9hpNHe5Kh6f58IEImls6oYJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.mft
Manifest number:          0419
Signing time:             Sun 11 Oct 2026 00:25:06 +0000
Manifest this update:     Sun 11 Oct 2026 00:25:06 +0000
Manifest next update:     Sun 18 Oct 2026 00:25:06 +0000
Files and hashes:         1: 32d9hpNHe5Kh6f58IEImls6oYJ0.crl (hash: ccHeYWa8+7kzfzsWxwioaz4Gd4DEgIxxkv71Q/VfgL4=)
                          2: 4BBDE05299B011F0B174EC14C4F9AE02.roa (hash: l281WaGzYU7dCqEFuYzIN6MgvSUnWoKB+RqON01Yd2w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32d9hpNHe5Kh6f58IEImls6oYJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 00:25:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1059 (0x423)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BDA2, serialNumber=DF677D8693477B92A1E9FE7C20422696CEA8609D
        Validity
            Not Before: Oct 11 00:25:06 2026 GMT
            Not After : Oct 18 00:25:06 2026 GMT
        Subject: CN=6acad762-36a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:59:4a:b3:6e:a3:f8:f5:30:a8:4f:78:7a:e3:
                    35:26:6b:a3:1e:d5:8d:8b:be:9f:3c:a5:31:25:be:
                    32:4c:38:8f:71:19:a6:64:dd:4c:76:88:f8:38:df:
                    d2:13:6c:1d:63:5b:2e:b8:f2:a9:47:05:c3:fb:7a:
                    8b:3e:99:bd:86:94:b1:46:f9:e1:6e:eb:84:2c:65:
                    c3:a9:13:f8:89:f9:1d:41:b2:83:14:03:9a:d9:62:
                    57:30:7e:9f:a1:92:48:81:22:00:55:46:c0:e6:31:
                    8d:97:a7:3f:69:a0:66:b1:ff:e3:c1:30:65:3b:a6:
                    82:1c:91:90:ce:bc:ab:bf:c6:74:57:58:fd:13:7b:
                    14:2e:60:68:4f:82:a0:6d:fa:ad:41:d3:89:fd:7a:
                    31:3e:fe:c9:49:df:75:71:a1:6f:99:66:2b:11:79:
                    8f:80:70:0f:71:d8:30:8a:d4:90:04:fe:14:b5:1a:
                    36:f3:ba:84:ae:82:02:5f:6b:0f:3a:2e:a0:88:8e:
                    d0:70:06:6a:5d:6e:5a:03:45:37:b6:a1:f3:15:b9:
                    3d:10:43:1b:14:22:47:e6:21:e0:01:45:25:4b:fb:
                    db:df:7d:99:3a:98:46:72:21:b0:e9:c3:5e:8d:51:
                    9d:a4:68:87:8f:99:2b:b0:df:51:5d:74:35:8c:8f:
                    42:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1B:E8:9E:87:BC:BF:89:0F:D4:6B:1D:2B:DE:9E:0E:D7:E1:50:04
            X509v3 Authority Key Identifier:
                keyid:DF:67:7D:86:93:47:7B:92:A1:E9:FE:7C:20:42:26:96:CE:A8:60:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32d9hpNHe5Kh6f58IEImls6oYJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:f0:1c:23:20:21:c6:12:28:c7:0f:b5:09:56:d1:1b:27:d2:
         f8:4e:55:33:e2:3a:0e:d6:1d:9a:b8:59:f5:76:71:38:e5:61:
         21:40:f7:fe:0d:90:8a:e5:4e:ce:f2:4a:43:d0:0b:08:ef:fc:
         c7:15:da:45:fa:b2:8f:f3:ee:b9:eb:7e:a5:4a:38:5c:c1:98:
         ab:6e:45:86:e4:e8:5d:ba:2d:f9:b3:ef:40:e9:25:ef:79:87:
         3e:df:74:c4:68:1e:8a:e5:2f:8f:63:55:76:7d:e2:46:c6:a6:
         28:fe:e6:ed:be:73:ef:49:92:26:b4:69:70:83:b9:be:cc:7e:
         ec:2e:60:a7:69:c3:ad:23:32:db:e7:77:cb:02:b6:06:e2:e9:
         fd:8c:f6:19:04:95:c7:3f:57:2f:4a:3b:39:97:ae:d1:10:56:
         cb:df:ec:93:b9:cc:95:9b:f7:28:c1:13:7a:fd:04:1b:7b:6a:
         6b:31:e5:83:cf:10:23:c3:1c:ea:d8:eb:e7:7f:b5:8b:21:01:
         19:0f:fe:25:c8:49:f2:c6:7c:3b:60:dc:e4:84:a6:55:63:c5:
         a6:f5:4a:ed:84:79:f1:b4:5c:03:81:62:f3:c2:9a:3e:7e:1a:
         f0:fb:7e:93:1a:6a:64:ac:2b:88:5c:ad:c3:3f:8a:f6:08:21:
         fc:5f:1c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:11:55 2026 by rpki-client