Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft
File:                     C-qOMYe9SY0l8kldarDunkU0p_E.mft (raw, json)
Hash identifier:          HT7urjPzneEEMKZOizItS5Amem0VpboNIbICn7NO7ek=
Subject key identifier:   1D:C0:EB:BF:79:1A:63:F5:DE:D5:86:FC:E4:D0:E3:6C:4B:BE:CD:B1
Authority key identifier: 0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1
Certificate issuer:       /CN=A918C64D/serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1
Certificate serial:       08E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft
Manifest number:          08DC
Signing time:             Tue 06 Oct 2026 20:31:03 +0000
Manifest this update:     Tue 06 Oct 2026 20:31:02 +0000
Manifest next update:     Tue 13 Oct 2026 20:31:02 +0000
Files and hashes:         1: C-qOMYe9SY0l8kldarDunkU0p_E.crl (hash: tJ/qazJagvmzv+7yS6rjWGYg87iP8umIzHC2cmhTImE=)
                          2: B7362AE0EDC811EAAFF8BD46C4F9AE02.roa (hash: 6a6Rqm3Ogc9dWzUizIVhfa5zp9t3Zi/+f1eh86x8ovE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl
                          rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 20:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2277 (0x8e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C64D, serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1
        Validity
            Not Before: Oct  6 20:31:02 2026 GMT
            Not After : Oct 13 20:31:02 2026 GMT
        Subject: CN=6ac55a86-e8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c7:9b:b5:56:2e:4c:a3:6a:5b:38:24:93:09:
                    61:39:85:78:16:56:ba:66:65:80:a8:4c:3a:a2:9b:
                    7a:f6:f4:98:8a:20:72:94:bc:40:31:3f:46:0d:af:
                    89:07:0e:a8:cc:9f:45:c9:80:c1:63:92:b3:ed:7c:
                    0b:72:c5:3c:ad:4d:e1:3b:d5:73:65:7e:91:80:e7:
                    72:d5:3c:3a:e7:32:a6:1b:5b:b4:f0:eb:35:cc:08:
                    fd:48:3d:e0:60:a7:97:b4:58:57:91:cb:37:ff:b2:
                    6a:15:a6:55:8c:56:75:b5:a3:06:10:dc:de:fb:82:
                    bc:f6:2e:7d:7c:23:be:28:b6:68:4c:d5:b8:e3:d3:
                    ce:09:2e:74:59:ee:29:38:c4:f8:ca:95:e9:e6:6e:
                    e7:a4:7f:6a:27:61:4f:1f:68:f6:cc:fd:f9:7a:8a:
                    d6:c8:08:a1:ae:31:8b:03:64:94:5e:ef:bb:d3:e3:
                    e5:b9:69:fa:9e:a3:4f:b6:87:51:1d:e1:0a:f1:f0:
                    30:fd:30:77:2a:66:5d:f9:91:7a:fe:42:93:62:ca:
                    f8:62:25:74:25:c0:e6:41:9c:3c:04:a9:09:f6:43:
                    d1:0d:78:de:33:58:07:ea:cb:63:ea:11:ec:26:02:
                    f7:d5:fd:af:7a:18:eb:9d:95:f1:39:08:3f:cd:2f:
                    88:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C0:EB:BF:79:1A:63:F5:DE:D5:86:FC:E4:D0:E3:6C:4B:BE:CD:B1
            X509v3 Authority Key Identifier:
                keyid:0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:31:fa:20:a9:79:99:ac:68:ab:51:5c:8b:c2:2f:89:d3:d5:
         c5:e5:31:10:f8:9b:7b:5d:2b:a8:c2:cd:31:f4:6b:e3:4a:e6:
         af:7c:9e:a6:16:e4:81:73:9c:97:bf:db:0c:c7:d4:a9:13:fe:
         46:57:1a:ec:77:d7:28:c5:66:ae:10:ac:0d:9c:7e:e7:2f:a8:
         70:0e:bf:eb:29:a3:64:ce:60:8b:0b:36:79:9a:1c:dc:3c:16:
         67:b9:7b:13:fa:55:7b:44:78:06:2e:53:91:95:c3:c6:89:dd:
         ba:14:cc:9e:9c:53:2a:14:19:0f:95:ce:17:b9:ee:91:56:c3:
         be:8c:83:d5:8e:9c:ff:c5:28:35:55:58:49:fe:c4:45:75:94:
         25:58:89:f3:7e:bc:70:b3:90:5d:95:0d:0b:30:d5:47:41:df:
         a8:60:b7:c0:d0:9c:29:f5:57:4d:d4:7e:1c:85:ce:7f:55:3d:
         e2:d8:bd:c1:88:62:54:72:b2:58:c8:29:2d:84:b2:98:d8:ad:
         37:12:5e:7c:dc:91:40:59:28:9d:6e:dc:39:9c:e1:b1:47:8d:
         59:02:e3:d7:da:7b:d5:de:02:2f:6f:5e:f1:13:c0:24:6d:60:
         dc:97:a5:21:3d:f3:00:0c:ba:8e:a4:36:05:3c:68:96:b1:21:
         cd:bc:cc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:23:52 2026 by rpki-client