Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
File:                     MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft (raw, json)
Hash identifier:          WJvditXDRNDbXerYPg+OxhKQGxo70Xffh5sq6mFATzo=
Subject key identifier:   F7:09:9A:AE:2D:68:53:5C:B3:2B:DF:BC:7F:4E:04:C5:0E:2B:19:53
Authority key identifier: 32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8
Certificate issuer:       /CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
Certificate serial:       0C4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
Manifest number:          0C2D
Signing time:             Tue 06 Oct 2026 18:55:29 +0000
Manifest this update:     Tue 06 Oct 2026 18:55:29 +0000
Manifest next update:     Tue 13 Oct 2026 18:55:29 +0000
Files and hashes:         1: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl (hash: d6SAq3Ldu+VfQ0pfrUQ4BDR0YU6+uFA1HoWTDGXw+m4=)
                          2: E1EFDAA8F40611EAA5B2244FC4F9AE02.roa (hash: 4Z5iYLEtKBfjWooahsTM+JCERTIB6b3TIat4TqCaYIk=)
                          3: 90FE23B83D5011F1860BF56AA6833773.roa (hash: XUvqr+C7+uQgBL9ktwJt5Z6F/YsCiQrJ061Wa1rTzxI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl
                          rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 18:55:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3147 (0xc4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C88D, serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
        Validity
            Not Before: Oct  6 18:55:29 2026 GMT
            Not After : Oct 13 18:55:29 2026 GMT
        Subject: CN=6ac54421-4e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d6:21:d4:dc:bb:4b:68:35:64:f8:c1:a2:10:
                    86:bb:54:2c:d9:9f:7a:8c:0b:64:72:88:dc:f5:35:
                    64:6c:bd:60:b4:5b:9d:07:aa:13:4a:17:e4:98:b0:
                    57:02:12:60:bf:26:d5:00:fa:a3:8c:7e:34:d4:59:
                    16:10:ff:f3:79:7a:c5:2c:8f:2a:f1:15:29:e6:a0:
                    5d:14:a3:31:42:3c:b1:f5:6c:5e:50:28:8a:b9:f9:
                    ba:16:d9:f9:59:5e:a2:2d:a5:3f:02:3b:65:59:68:
                    d4:de:76:04:38:7e:19:9f:06:62:3d:06:06:e5:f5:
                    91:1d:e4:fb:01:81:16:6e:84:01:10:d2:34:e8:d3:
                    23:4b:be:31:44:bd:39:d0:e3:12:1b:89:e0:99:23:
                    b9:79:4a:93:f2:7c:2f:30:1f:1f:44:7a:ab:6d:41:
                    1d:8c:43:10:8f:a1:c8:13:32:e3:22:71:7b:f4:23:
                    ac:c2:c3:09:45:56:a6:68:d2:81:11:62:a5:ec:8c:
                    39:36:70:f5:34:f6:85:0d:43:6a:20:1e:e4:3b:69:
                    54:e5:4b:b3:c3:05:f5:bc:10:03:4b:57:4d:a3:2b:
                    1a:66:01:72:01:e1:e6:9c:2b:ba:b1:c9:b6:45:8a:
                    10:b8:11:fe:86:1e:8b:12:88:f4:94:1a:de:a1:c9:
                    b4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:09:9A:AE:2D:68:53:5C:B3:2B:DF:BC:7F:4E:04:C5:0E:2B:19:53
            X509v3 Authority Key Identifier:
                keyid:32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:49:85:64:90:93:d0:10:b9:36:16:3f:68:ee:f5:cd:87:fe:
         29:77:e5:7b:cf:ed:a1:e0:31:52:0d:cf:8f:28:56:9f:42:9e:
         79:c4:fd:a8:f8:7c:33:74:c2:de:cb:5d:85:4a:20:71:cd:51:
         3c:07:82:66:f1:20:25:26:2e:16:33:8e:3c:69:56:b4:4b:81:
         0b:98:be:44:e5:74:46:84:cc:50:9e:88:f9:d1:a1:26:ac:8e:
         61:4c:60:69:60:31:68:5e:ee:d3:2e:36:2e:61:db:92:76:1c:
         e7:39:ff:77:f4:32:de:64:5d:11:69:72:5f:1c:55:0e:a6:97:
         38:41:9b:c9:44:64:4f:46:24:a2:b7:70:d9:62:5b:ad:ba:d8:
         81:9b:c9:2f:28:a1:d7:f9:60:ca:a5:bc:98:7f:88:e2:c1:70:
         22:70:8b:96:25:a2:ce:67:0b:30:36:c8:4a:43:43:6b:b6:bc:
         53:2d:7f:47:69:b2:ad:19:7a:dd:e9:2b:0f:5c:c0:99:41:c6:
         13:43:7f:c7:4d:c7:00:95:cd:0a:c0:7e:a1:21:cc:10:d1:34:
         68:1f:6a:28:c5:66:86:14:83:10:2b:00:37:82:72:7e:1d:e4:
         17:14:ea:42:9a:5a:ab:ab:a0:c8:49:b2:a6:57:93:13:7a:d9:
         f9:11:4b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:51:35 2026 by rpki-client