Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
File:                     xIqs603a7jxgQuZiFq15FQe0fGs.mft (raw, json)
Hash identifier:          pdqnUIIBerBqz8Zx0U2OamD6c6NxCaHUDkXTibzgKqU=
Subject key identifier:   75:D2:56:DB:75:03:7F:A2:2F:A9:79:21:50:A8:35:0E:B0:59:24:B9
Authority key identifier: C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B
Certificate issuer:       /CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
Certificate serial:       1A0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
Manifest number:          1A02
Signing time:             Tue 06 Oct 2026 16:23:31 +0000
Manifest this update:     Tue 06 Oct 2026 16:23:30 +0000
Manifest next update:     Tue 13 Oct 2026 16:23:30 +0000
Files and hashes:         1: xIqs603a7jxgQuZiFq15FQe0fGs.crl (hash: y+C42KKUJU3FP+vwnZ6ZAdOVkmk0fsIGDEoSlOiy49E=)
                          2: C44B0ADA83DA11E7AD4F156CC4F9AE02.roa (hash: /wO07VK/99aXev5AumAxW3oQhnQNNhg5LiUR2P7i400=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl
                          rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 16:23:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6671 (0x1a0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EF61, serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
        Validity
            Not Before: Oct  6 16:23:30 2026 GMT
            Not After : Oct 13 16:23:30 2026 GMT
        Subject: CN=6ac52083-28be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:75:f3:6d:45:0e:41:47:5a:96:c9:57:4b:64:
                    bf:22:c5:d9:3c:ec:39:8e:5a:62:8b:e4:da:77:0c:
                    43:eb:21:e9:ed:ce:f6:41:b7:62:f7:ef:a1:a8:ba:
                    a0:88:6d:ae:6d:0f:5d:0a:79:95:a5:1d:dd:f1:16:
                    09:a2:0f:93:da:3b:d5:80:17:30:f6:db:08:e9:32:
                    c6:d2:18:40:5c:56:f4:7a:ff:27:67:b8:f4:de:2d:
                    95:aa:e8:2b:fd:68:f7:d9:bd:93:ee:d1:f2:aa:0a:
                    d9:1f:7a:32:07:d8:18:97:de:f8:cc:87:7b:5a:11:
                    dc:02:2c:11:16:c0:66:7d:97:ea:2e:04:52:4a:65:
                    eb:e3:ad:50:74:01:4e:0e:35:76:3b:f2:37:38:9d:
                    ed:c6:64:00:61:38:be:f4:df:b3:1b:b1:27:bc:1d:
                    f4:eb:e1:0e:d9:19:51:dc:98:98:c0:aa:da:f5:4f:
                    0f:75:b7:b8:e9:52:d5:c5:36:06:9a:9b:47:0d:be:
                    d7:82:8b:02:d0:b6:e2:32:b5:0a:44:3d:24:e6:bd:
                    75:5f:49:c9:92:bb:03:98:0e:38:af:52:35:19:e0:
                    fb:03:85:ac:3a:0b:f1:e1:f0:8f:50:61:9a:ff:40:
                    c5:73:6e:33:cf:18:e8:b5:bd:4c:a1:39:8e:b8:dc:
                    79:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D2:56:DB:75:03:7F:A2:2F:A9:79:21:50:A8:35:0E:B0:59:24:B9
            X509v3 Authority Key Identifier:
                keyid:C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:2b:bd:2a:b6:e9:30:f9:26:c6:42:62:76:d5:d6:9b:c4:dd:
         4d:89:f6:4f:4e:c5:30:81:79:44:0c:06:0b:c8:17:f2:00:b7:
         ac:b6:18:ef:63:90:86:1b:78:d4:29:52:a0:44:6b:e4:28:d8:
         06:d9:63:b1:3d:b8:3b:7a:ce:00:d5:46:95:48:76:0c:f5:d6:
         b5:db:26:05:91:58:1c:2b:40:99:cc:fd:34:00:a0:44:31:58:
         da:42:af:3c:90:6f:3d:0c:3b:1d:2f:f5:b4:10:5d:80:bd:cd:
         43:59:c3:88:29:c1:32:fe:e7:48:48:de:0e:cc:5e:37:75:23:
         2c:5e:1a:64:89:0a:9a:19:ce:41:fd:94:75:8e:b2:cf:1c:49:
         a7:62:23:31:73:2a:39:f2:14:59:10:49:49:63:85:60:19:84:
         65:c1:ba:d5:df:24:65:ad:e0:1b:86:35:5a:ae:f9:a2:81:fb:
         8f:84:73:7c:54:5f:5c:0b:8e:e6:80:00:16:88:5f:e9:6b:03:
         68:9b:9e:41:61:eb:41:eb:c5:cd:7c:97:0c:ce:fe:fc:48:73:
         82:b3:39:7e:6b:ae:4a:c8:7c:60:26:d0:31:10:43:31:c6:97:
         9a:4b:2d:95:6b:0b:64:55:d9:2f:2b:42:24:d6:30:3c:40:43:
         07:bb:b6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:14:51 2026 by rpki-client