Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft
File:                     rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft (raw, json)
Hash identifier:          y+2IL2Iv9X41Hmz4RUSwWgLyaXnJfoQpoTaCCF4apnA=
Subject key identifier:   5E:1E:72:40:BF:19:36:72:52:F7:5A:DF:51:6D:34:AD:3D:89:77:37
Authority key identifier: AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F
Certificate issuer:       /CN=A918EBC3/serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F
Certificate serial:       0965
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft
Manifest number:          095B
Signing time:             Fri 02 Oct 2026 20:23:44 +0000
Manifest this update:     Fri 02 Oct 2026 20:23:44 +0000
Manifest next update:     Fri 09 Oct 2026 20:23:44 +0000
Files and hashes:         1: rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl (hash: VtiaHKarRdAFgMo7tBlAx86OtCCqlJbVmkoNaoogm98=)
                          2: 7CDBE740C7FD11EAB795396AC4F9AE02.roa (hash: h62+VMn+Dt63VlfLK40869a9uvaLhnaJW7JV3wldaEk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl
                          rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 20:23:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2405 (0x965)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EBC3, serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F
        Validity
            Not Before: Oct  2 20:23:44 2026 GMT
            Not After : Oct  9 20:23:44 2026 GMT
        Subject: CN=6ac012d0-eb3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5e:5c:59:82:ac:67:54:71:87:0c:28:06:e9:
                    7d:9d:3b:18:f7:41:95:26:f7:ce:81:de:5d:64:c8:
                    61:70:20:f6:bf:ee:27:86:54:d5:97:3c:9c:5f:03:
                    25:c9:09:cb:bf:b1:a5:39:d8:b5:4a:83:7d:1e:e7:
                    b0:e2:f9:1b:a1:c1:8c:5c:e4:f4:14:17:55:6b:31:
                    99:65:f1:b5:c3:29:1f:8d:cc:01:6f:2b:fb:d6:20:
                    96:32:02:b9:4a:c5:a7:4b:f0:08:56:ed:26:3f:a8:
                    6b:a1:25:9b:61:e5:82:5b:03:cc:ce:ae:95:73:24:
                    ad:58:b3:bf:56:a2:23:e1:7f:16:0f:8e:24:b0:3b:
                    d7:d9:db:2b:35:10:a7:20:56:a9:f0:66:1b:59:31:
                    54:a4:ec:f2:da:60:2e:66:d1:e5:5d:7b:27:93:b1:
                    bc:4a:ab:c8:c3:5c:1c:fd:8a:4b:b9:0b:07:64:57:
                    8e:83:51:95:9a:38:11:32:7e:bc:e0:ba:3b:a0:da:
                    2d:84:1f:5a:dc:17:73:e4:0a:64:7b:9b:9e:09:37:
                    91:ac:f6:90:8c:6b:52:3a:ca:74:fe:bc:38:e3:a6:
                    8b:1c:00:bd:f1:87:f9:83:b2:dc:64:c6:a4:00:86:
                    eb:10:07:6f:df:8b:bf:2b:1e:96:ec:f1:da:51:d0:
                    9a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1E:72:40:BF:19:36:72:52:F7:5A:DF:51:6D:34:AD:3D:89:77:37
            X509v3 Authority Key Identifier:
                keyid:AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:12:ec:81:5d:3c:a3:b7:1b:a1:4b:09:8f:c7:b0:36:1b:9a:
         23:51:c6:91:ab:7a:42:9f:9a:12:3a:4f:75:61:9b:31:b0:fa:
         1f:78:df:79:72:84:d0:50:dd:7d:0a:62:4d:f3:6c:3d:eb:ff:
         6e:91:b9:6c:d5:08:12:c2:09:41:04:c8:51:6c:58:50:e0:bb:
         6b:50:b7:fc:3d:e3:dc:4a:c6:1f:8c:ef:0b:db:c4:ca:c2:f1:
         de:1e:18:0c:5c:c8:e0:0d:db:e1:8a:92:93:15:91:bf:68:ae:
         c8:b4:b8:8c:91:8f:46:28:3a:20:8e:24:c7:59:6b:1a:c2:d6:
         df:20:be:f1:15:8e:af:da:6f:fb:35:21:f7:d7:91:49:77:bc:
         bd:a7:51:6d:50:85:ce:5a:40:72:21:59:27:b1:94:c7:a8:5d:
         51:1e:a3:7d:47:83:7f:82:51:f9:ed:47:07:87:93:34:8c:e6:
         d4:84:0d:09:59:b0:b5:11:92:7b:4c:67:f3:51:a3:05:39:7d:
         c7:08:cd:e6:e4:ff:8a:81:e2:8e:27:05:c7:99:17:5c:ec:78:
         5c:ac:58:f6:cc:5d:4f:c6:92:e1:78:df:35:7a:89:4c:55:1f:
         bf:58:d2:42:ec:29:98:b3:5c:ab:c7:00:6a:f0:06:82:ea:67:
         2e:d2:78:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:34:51 2026 by rpki-client