Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
File:                     p0zn2tX7UE2xa75wwvnfCqnwBgk.mft (raw, json)
Hash identifier:          CvuTtFPTKv5zwvjhfTkmn6DChG8GcPb8DMzsVJmTDv0=
Subject key identifier:   09:65:FE:AA:9D:85:B3:7F:BD:A8:5F:B7:34:31:84:EE:2E:BA:54:E6
Authority key identifier: A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09
Certificate issuer:       /CN=A918D699/serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609
Certificate serial:       01E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
Manifest number:          01D4
Signing time:             Sun 01 Nov 2026 04:49:09 +0000
Manifest this update:     Sun 01 Nov 2026 04:49:09 +0000
Manifest next update:     Sun 08 Nov 2026 04:49:09 +0000
Files and hashes:         1: p0zn2tX7UE2xa75wwvnfCqnwBgk.crl (hash: tTZSE7Z/DpDhifgAGeUDYTGNdeK1ipCFufo3hEOOdCc=)
                          2: C564E80017E911EF9D471E18C4F9AE02.roa (hash: qze2BxN1ZqkUR8sLJAr7IWqQzGJrYs19cA2fz8g+u+Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl
                          rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Nov 2026 04:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D699, serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609
        Validity
            Not Before: Nov  1 04:49:09 2026 GMT
            Not After : Nov  8 04:49:09 2026 GMT
        Subject: CN=6ae6c4c5-7312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ee:62:a8:f8:dc:6e:5e:36:2e:d4:47:b0:1f:
                    6b:80:a7:ce:40:ca:fd:ba:79:99:4a:7a:4f:0b:0b:
                    5a:d5:59:61:4a:9d:21:96:e5:c8:9e:60:96:25:17:
                    a3:ed:00:b7:84:c5:89:9b:a7:f7:ac:66:fe:6b:5d:
                    d9:69:ea:1d:9b:a5:74:02:24:ec:3a:c0:ce:2a:2b:
                    6c:9b:86:d1:dd:13:13:92:ee:47:bd:e2:86:cf:fc:
                    10:e4:e9:cd:c3:59:68:54:06:ec:74:53:95:e5:c5:
                    18:1e:8f:25:67:77:78:b9:68:18:72:1b:1f:c9:83:
                    d3:e0:92:7e:79:99:c3:0b:0c:11:85:a1:0a:b1:43:
                    5b:07:95:a8:2f:03:e6:0a:77:18:19:f4:29:a3:f4:
                    c2:ae:a4:ed:39:4a:3f:f1:ef:d8:92:30:c3:62:68:
                    fd:41:04:11:9c:2a:70:7e:93:63:be:88:d7:9e:5a:
                    02:0a:2c:30:64:32:a4:32:1e:97:d5:f6:0c:f9:e8:
                    b1:5c:2f:24:b5:1b:17:4b:04:1d:a6:08:76:ab:88:
                    7e:ae:38:1d:32:c3:6e:bb:97:03:02:92:5b:9d:f4:
                    ab:e1:84:24:a7:de:49:32:3f:d0:75:39:f9:f0:01:
                    79:27:df:50:b2:17:bd:08:8b:87:98:ae:d1:17:74:
                    37:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:65:FE:AA:9D:85:B3:7F:BD:A8:5F:B7:34:31:84:EE:2E:BA:54:E6
            X509v3 Authority Key Identifier:
                keyid:A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b4:7e:ab:27:3e:8a:f9:71:ae:71:4d:ef:37:7d:eb:06:c6:
         28:9d:e2:cd:a1:23:91:7f:59:d1:ea:84:07:68:95:7b:73:db:
         85:5a:8b:6c:d3:09:c5:48:41:6f:64:5c:92:9c:0a:5f:8f:e8:
         8c:78:5f:18:ea:5e:ac:f1:82:d2:6c:9b:0b:c5:58:92:62:ac:
         66:da:5e:8a:b9:d7:70:60:e2:02:00:a2:e4:00:0e:da:91:69:
         1b:00:2f:80:be:70:61:93:c7:14:18:e8:36:7d:7c:61:2b:9a:
         ec:22:db:05:06:8b:b8:61:5a:f5:21:45:04:7a:ba:86:6a:b9:
         c6:06:82:88:3f:1e:32:da:db:dd:7b:cf:f6:7c:48:f6:dd:a8:
         49:0e:bb:b1:0e:37:ad:02:55:74:df:f5:e0:1d:cb:51:8f:01:
         38:a2:7f:ea:f0:02:f4:b3:49:35:17:9b:4f:ea:af:43:dd:6f:
         90:bb:e7:5a:96:6f:cd:24:99:50:1a:24:5a:6b:64:7a:66:ad:
         0e:e7:74:88:07:ca:2a:50:9d:20:b6:07:fa:8b:c9:c3:a1:8e:
         be:46:2b:52:b8:20:28:41:0b:95:6f:27:40:73:57:7f:07:a3:
         ef:b9:57:48:3b:53:64:d2:06:9c:8a:dc:ee:7a:7c:cc:ee:66:
         34:22:8f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:40:19 2026 by rpki-client