Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft
File:                     2xy4SFQGnkPKG3JdQuprqbU5gVs.mft (raw, json)
Hash identifier:          Kyw6qmAo4uOp/LlRjmD3AWXjkTb+vjg1zriceRZFmx0=
Subject key identifier:   D0:71:DF:C9:73:CA:AC:7E:07:EB:80:F5:73:60:6E:13:7F:AA:C1:B2
Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B
Certificate issuer:       /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B
Certificate serial:       0DBF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft
Manifest number:          0D92
Signing time:             Sun 04 Oct 2026 18:05:36 +0000
Manifest this update:     Sun 04 Oct 2026 18:05:36 +0000
Manifest next update:     Sun 11 Oct 2026 18:05:36 +0000
Files and hashes:         1: 2xy4SFQGnkPKG3JdQuprqbU5gVs.crl (hash: a1tpHXuSFI/twkz2LlA4DDku8cEPQaKU87uZnfXHAJc=)
                          2: E9DEE50ABCE211F188EFB1283A11F970.roa (hash: 8XxYrAxCCkwxSX5gvZFcX9S2KjuOsaa9oX/qG4nIOio=)
                          3: 75B2EA02BC2711F1869C95754111F970.roa (hash: 9AOWM5vSiMMKkvhdj1t6gHsk+38e9UbgZQcIL0Mc+0o=)
                          4: 55903190A67E11F0BBF9853FC4F9AE02.roa (hash: 4LEYJL5AX5PWlCqKTlZUy7qHGLo4uYAp+saoJjmZfVo=)
                          5: A45810226E0B11F1B444C73C6CA30FBC.roa (hash: Xtf0/6y3YC6FhVot6UpoOkskXFie6As5P2KK3d/KTL0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl
                          rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 18:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3519 (0xdbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F88D, serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B
        Validity
            Not Before: Oct  4 18:05:36 2026 GMT
            Not After : Oct 11 18:05:36 2026 GMT
        Subject: CN=6ac29570-ba38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cb:d3:fe:4c:90:32:62:fe:bc:a3:71:db:4f:
                    18:fa:23:19:ea:22:0c:05:de:db:e5:38:8d:da:8d:
                    e6:a8:9b:cc:f9:60:c6:4a:b4:e1:1d:67:95:51:6c:
                    01:da:39:65:78:6f:ec:ab:ad:a2:d7:94:0e:4b:51:
                    6d:93:c0:63:51:bc:f4:34:7a:29:3b:6e:28:a5:62:
                    b4:6e:27:9f:f0:ea:4f:7e:17:ea:36:80:b2:f8:1b:
                    a9:91:e5:0f:57:e6:f6:84:32:f0:0a:92:8c:73:fc:
                    20:1e:17:c7:e1:25:65:20:88:ab:80:5c:65:31:c8:
                    70:0a:12:1b:fd:0c:9d:e9:a9:ee:8c:37:3e:38:51:
                    5c:f9:3e:e7:4c:fa:3e:c2:29:e3:f9:08:15:ff:66:
                    f0:93:ac:35:6d:06:36:c1:49:d1:2a:62:79:09:aa:
                    10:45:08:c4:e0:2c:1a:09:3e:64:f5:84:c8:d4:ad:
                    bb:11:18:f4:7e:d7:a1:0b:09:f4:58:d7:29:39:e8:
                    5f:2e:4f:28:e1:49:ac:74:3b:36:7b:ed:f5:64:08:
                    4a:4e:36:0a:00:22:33:a2:00:b8:af:c4:11:e6:ca:
                    43:81:ec:8c:a5:70:67:b9:c7:00:dc:05:bb:c6:b1:
                    43:1e:b8:6c:1d:fa:0f:39:56:9f:7d:b7:8d:18:29:
                    85:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:71:DF:C9:73:CA:AC:7E:07:EB:80:F5:73:60:6E:13:7F:AA:C1:B2
            X509v3 Authority Key Identifier:
                keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:50:91:f8:e3:18:67:84:13:6d:70:03:ab:35:8e:cd:80:9a:
         09:32:88:b3:13:ef:2d:c6:fd:9c:24:58:63:0c:f9:ac:a1:56:
         5b:22:25:a1:a2:f9:8c:1d:df:e1:12:25:f5:c5:ef:7d:16:6e:
         e5:13:43:52:e7:ed:56:51:6e:40:39:f0:67:42:b8:39:8b:f1:
         d3:79:51:58:61:f5:13:09:f0:af:2f:ac:c2:2c:d3:29:58:4f:
         25:8b:46:81:ce:5f:f8:c3:85:4e:b8:07:f8:93:dc:c1:9f:0f:
         54:59:e4:53:ae:67:82:fc:27:5d:bf:f3:48:ca:00:6b:c4:49:
         5c:1a:8b:0b:eb:55:bd:81:50:8b:78:eb:ab:a0:f8:84:cb:0f:
         7b:98:df:8d:78:03:be:cc:01:87:32:21:43:be:78:c9:53:68:
         b5:16:d2:16:7d:ff:37:a4:c1:83:94:cc:71:81:d0:45:f5:74:
         e8:19:9a:6d:c5:0a:c8:81:d5:bf:d3:e1:62:69:7e:13:a4:e9:
         f7:2b:e6:53:ef:f7:36:49:6c:1b:b6:cb:1e:6e:aa:22:3a:68:
         be:ed:41:72:00:ec:83:6e:d4:38:4a:69:85:e0:2e:7e:c3:46:
         cc:c2:3e:68:ac:ad:21:83:d9:ee:32:b6:b7:72:d6:55:ac:06:
         d9:24:f5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:46:32 2026 by rpki-client