Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
File:                     tJhXdJtDHfMjL417C4OVpy_9GEk.mft (raw, json)
Hash identifier:          MxwFAPaIn2dKf4z9pxBbcYWVN78+1f8ONQ+D0nKVOLg=
Subject key identifier:   EF:29:B3:96:4A:E6:32:32:D0:E1:C8:08:18:CA:93:A9:88:24:3B:13
Authority key identifier: B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49
Certificate issuer:       /CN=A918E293/serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849
Certificate serial:       0275
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
Manifest number:          026E
Signing time:             Tue 13 Oct 2026 02:35:24 +0000
Manifest this update:     Tue 13 Oct 2026 02:35:23 +0000
Manifest next update:     Tue 20 Oct 2026 02:35:23 +0000
Files and hashes:         1: tJhXdJtDHfMjL417C4OVpy_9GEk.crl (hash: IUXzqGEh0NiIpsdCevoLJhD7BrPUvjKloG4+HRIxIdE=)
                          2: D865F69A233111EE813C5D26C4F9AE02.roa (hash: i4fkr2yi7rKl11iHs6wQVlIoLCufxpnrDVj0EZBu5xg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl
                          rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 02:35:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E293, serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849
        Validity
            Not Before: Oct 13 02:35:23 2026 GMT
            Not After : Oct 20 02:35:23 2026 GMT
        Subject: CN=6acd98eb-61f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:13:0b:37:71:65:06:13:4b:0a:c8:bf:82:b9:
                    59:af:aa:6a:81:7e:e7:da:84:08:47:92:60:5c:66:
                    39:84:e1:85:12:44:d5:cd:d1:0e:0e:8c:37:48:53:
                    85:c6:08:25:bd:2b:b5:01:8d:fa:fb:df:45:b7:be:
                    7b:18:51:7e:92:81:4f:9d:bf:b3:7e:24:9f:15:fb:
                    59:26:df:c1:4e:c9:93:7a:a3:88:86:d2:e6:08:6e:
                    ed:63:ed:0f:26:6c:38:e8:6b:2f:6c:b2:40:e6:a6:
                    ee:57:65:e9:19:86:0a:d0:51:69:a4:09:ed:6c:3e:
                    ad:b1:35:7c:f7:b7:06:f0:f2:fc:0b:a0:d3:2e:b3:
                    fa:59:55:90:12:ba:a6:da:f1:99:dd:fe:60:40:23:
                    11:ed:80:91:29:2b:9e:97:db:fe:38:6c:03:bf:e6:
                    c3:9c:30:90:f4:dc:37:0c:c7:f8:39:e9:cc:34:68:
                    5d:a2:ff:9a:2e:ec:d2:30:48:84:c4:98:ea:8b:f9:
                    e3:ea:eb:d2:4c:00:57:65:9b:98:6f:22:03:86:15:
                    d4:e8:a6:2f:1b:63:9f:7f:96:e6:ad:c0:02:4c:af:
                    8d:63:84:ae:69:92:2b:0b:ec:c8:16:ce:61:63:47:
                    bd:95:39:ae:a6:93:ab:8d:6e:d8:53:ae:94:a3:1e:
                    9a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:29:B3:96:4A:E6:32:32:D0:E1:C8:08:18:CA:93:A9:88:24:3B:13
            X509v3 Authority Key Identifier:
                keyid:B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:c9:fc:f8:6b:19:df:52:bd:2e:16:96:6f:3f:62:db:d7:22:
         c0:b1:e7:3d:56:61:6d:85:5c:48:14:69:ad:e4:14:25:3d:09:
         c9:72:c1:f0:6c:21:5c:89:4c:52:26:cb:e1:e1:8d:13:d1:7f:
         de:d0:14:ee:5e:8a:f5:0e:e4:ab:64:eb:e7:6d:73:5c:93:53:
         5f:f3:ba:c9:75:06:73:43:f8:43:2a:9e:9a:f5:74:35:b7:16:
         4d:b4:2f:4e:cb:9a:8f:38:aa:31:17:e4:c3:e3:e1:1d:3b:5e:
         b4:ae:9d:e9:95:42:ea:09:0b:6e:96:31:f2:e8:89:bd:99:df:
         7f:8e:0c:a3:94:93:76:f1:2a:50:38:a7:5f:7e:9a:93:55:12:
         da:9d:56:93:5a:2d:3c:39:35:ee:f6:5c:14:db:4c:dc:bd:1a:
         86:dd:ce:1e:c9:24:24:59:9d:b6:69:1a:1a:6a:63:ee:d5:da:
         64:8f:8c:ca:d9:98:7a:b1:e1:d2:83:78:79:11:08:fa:91:65:
         75:ce:a2:89:c4:80:a3:c2:07:dd:34:22:65:61:43:d0:d5:ba:
         00:54:d1:be:8c:4a:7c:11:e1:77:f0:3f:a8:51:4b:a9:98:79:
         2d:e1:00:a9:7c:10:c1:2e:83:d8:42:db:9b:69:89:fe:70:3c:
         6f:a9:1c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:48:18 2026 by rpki-client