Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
File:                     DqjhgHgwQyFWBjSjtPJuxux2ISY.mft (raw, json)
Hash identifier:          XmY683iMqYbXN6i4Uc/H8NwVxQBycuWp034ochc7fRg=
Subject key identifier:   B5:2E:03:6A:5E:CE:A1:C0:F2:72:8C:48:DD:AC:CE:75:E8:9C:DA:2F
Authority key identifier: 0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26
Certificate issuer:       /CN=A918FA35/serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
Certificate serial:       CA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
Manifest number:          C7
Signing time:             Sun 11 Oct 2026 07:25:31 +0000
Manifest this update:     Sun 11 Oct 2026 07:25:31 +0000
Manifest next update:     Sun 18 Oct 2026 07:25:31 +0000
Files and hashes:         1: DqjhgHgwQyFWBjSjtPJuxux2ISY.crl (hash: r+KtMw8UexnhKp2NuVKOz3FqKHJ2tj2mqUR64e2csdM=)
                          2: E0C97CB098BB11F0B5530B6CC4F9AE02.roa (hash: yYUv/khv6OAoyBrf4zkCcISoGGPdBxE1qGPYP2BP2Oc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl
                          rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 07:25:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FA35, serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
        Validity
            Not Before: Oct 11 07:25:31 2026 GMT
            Not After : Oct 18 07:25:31 2026 GMT
        Subject: CN=6acb39eb-a868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5e:b2:84:21:db:c4:bd:1b:56:e1:cb:fb:05:
                    4f:13:0d:64:4e:aa:c1:bb:86:b0:6c:6c:e0:f2:66:
                    bf:09:4a:fb:61:9a:5a:c9:c0:2d:ba:c5:3b:56:3b:
                    f1:10:d8:41:93:2b:e5:47:0d:33:30:0b:a3:09:91:
                    2b:58:5a:d4:de:47:7e:1e:2e:4a:27:4d:5e:95:a3:
                    b0:bc:95:48:fc:d3:34:77:10:f8:c7:b3:1b:0c:89:
                    e2:85:bc:0e:18:be:da:ad:f6:e8:3f:aa:51:c8:93:
                    34:e6:80:af:fe:1e:e3:b5:90:fe:47:d5:cf:6f:d3:
                    f0:ac:62:a8:07:4a:86:6e:c3:f1:31:94:d8:df:2e:
                    7a:3e:2d:88:a2:b0:47:12:40:ec:50:74:94:f5:8b:
                    a6:a1:17:08:a6:96:27:b8:17:f8:fa:fb:33:d2:ce:
                    bd:29:5b:2f:d1:64:88:c9:1f:5b:55:26:27:8c:42:
                    13:87:29:54:34:af:31:66:87:4d:00:f3:ed:81:27:
                    3d:b2:ef:f4:0b:bc:4b:31:d5:42:38:be:b7:c4:e4:
                    be:e6:65:64:46:02:22:40:29:9f:8c:c8:86:e6:0f:
                    7f:7e:84:49:8f:ec:63:53:91:91:39:ca:b1:2d:0b:
                    9a:12:1d:93:a4:3b:e2:67:70:b9:5b:ae:a3:87:c7:
                    0a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2E:03:6A:5E:CE:A1:C0:F2:72:8C:48:DD:AC:CE:75:E8:9C:DA:2F
            X509v3 Authority Key Identifier:
                keyid:0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:be:b7:2a:88:51:d6:06:41:0b:fb:80:5a:d8:3e:bf:1c:9e:
         ac:0e:2e:79:cd:23:5b:bd:d8:ac:b4:46:01:cc:4c:f9:fb:aa:
         a6:66:48:7d:1a:2a:e7:7a:98:db:dc:61:0c:19:a0:8f:08:40:
         49:f6:3b:88:4f:2a:94:00:d6:30:21:24:c3:3b:a6:4b:25:d5:
         df:35:43:14:a6:80:81:29:b8:eb:8c:2f:7d:47:c3:8f:8e:92:
         1a:b9:3c:41:11:ad:ca:82:09:c8:1d:d7:52:8e:3b:07:d6:7a:
         97:72:b8:ff:30:2f:5c:ac:e6:de:72:ff:01:1b:5a:15:f8:ad:
         41:f2:79:c1:12:f3:d3:75:a3:71:1e:4d:4d:19:2d:6a:e0:46:
         17:db:24:42:ca:5e:fe:2a:c6:41:34:b2:fe:af:c1:48:f5:aa:
         ee:e9:73:ad:19:e7:74:f3:d1:d9:32:ce:7e:64:24:bf:2c:e2:
         97:bc:3b:83:76:0c:01:d0:a7:72:d6:27:81:46:ce:35:aa:5e:
         6c:ed:13:9e:97:31:26:15:34:be:7b:45:19:2d:d8:74:be:4e:
         25:9d:3f:b9:3d:23:79:1d:c7:a0:7f:a0:a7:2d:bb:4a:d0:c9:
         81:14:5d:fa:a7:58:2e:f0:86:2c:8f:d3:96:b0:27:ca:d1:42:
         a2:ab:70:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:30:19 2026 by rpki-client