Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
File:                     584ZoXhVIoFdq2P_ZttviQP8-fo.mft (raw, json)
Hash identifier:          P4DguXYbCMsZISuZdA9y/G6J3j3UrWN8sdlZj7LIViI=
Subject key identifier:   6F:DB:77:C2:CB:41:BF:CA:75:16:35:B6:A3:E9:00:42:9E:DE:57:46
Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
Certificate issuer:       /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Certificate serial:       0312
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
Manifest number:          02EC
Signing time:             Sat 03 Oct 2026 01:40:02 +0000
Manifest this update:     Sat 03 Oct 2026 01:40:01 +0000
Manifest next update:     Sat 10 Oct 2026 01:40:01 +0000
Files and hashes:         1: 584ZoXhVIoFdq2P_ZttviQP8-fo.crl (hash: k6kbvZXMEW7bgM1kLpOkGsUbjQVtUpYSq6FGH84Ph8I=)
                          2: 455D199EE38B11EE84566164C4F9AE02.roa (hash: gOV5rPqQrYO4YVfNAWomUe0MtcUzLHbDhM46sP91PRA=)
                          3: 0BC0C374A7D711EEB631CA47C4F9AE02.roa (hash: IUtOdJiE9Ch7kGLlPuHyU4+jmWHwHE+NOWpak4vAtYM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
                          rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 01:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786 (0x312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190CC7, serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
        Validity
            Not Before: Oct  3 01:40:01 2026 GMT
            Not After : Oct 10 01:40:01 2026 GMT
        Subject: CN=6ac05cf1-2f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9a:c4:53:df:13:eb:ae:22:d6:c3:cb:c2:79:
                    37:fa:88:ac:f9:1d:91:2b:39:8b:c1:af:1e:3d:e8:
                    76:fc:e8:29:19:85:99:7d:53:1b:dd:a4:87:d4:f9:
                    58:8c:71:46:75:74:0b:f9:c6:e8:ba:d8:3a:b6:25:
                    57:55:1e:bc:55:80:97:4b:cc:f4:5c:1a:83:ad:df:
                    c0:33:ec:14:9d:d7:12:34:eb:39:0e:65:34:6a:10:
                    a4:f6:26:b1:3a:32:d0:b5:86:e1:ba:aa:b1:73:38:
                    6c:f9:b9:c8:8a:df:dc:9f:59:fa:b4:68:36:38:38:
                    ef:63:6a:1c:f9:48:7f:fa:b7:1e:08:eb:7a:e5:65:
                    2d:32:3f:89:d8:cd:78:c8:a3:d5:58:03:91:47:96:
                    5f:7a:83:5d:4e:d5:e1:1f:9e:c9:c1:55:fe:2a:b7:
                    66:dd:2c:86:14:9a:c9:97:2f:b3:b8:64:03:1a:85:
                    15:e2:ae:7a:4e:16:98:8f:27:6b:f1:0e:56:34:9a:
                    89:84:3b:10:54:e5:f6:9f:07:63:79:a5:26:ad:ae:
                    0f:52:41:f5:6b:7a:8f:7f:f6:e6:97:6a:e0:27:7b:
                    78:4e:25:6b:3f:da:6f:aa:d9:34:1d:be:92:b2:84:
                    e3:aa:fb:a7:94:44:76:5a:3e:37:b4:33:65:ce:a5:
                    5d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DB:77:C2:CB:41:BF:CA:75:16:35:B6:A3:E9:00:42:9E:DE:57:46
            X509v3 Authority Key Identifier:
                keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:07:dd:17:10:25:ed:cb:a5:75:bd:d1:6c:de:d0:ce:a7:e8:
         44:a4:a7:c1:ae:37:42:61:78:02:67:80:2d:bd:9d:79:9d:28:
         f6:57:7e:39:f8:b8:60:f9:cc:db:34:8d:2e:10:a3:38:9d:a6:
         59:2a:8a:7b:ed:e4:69:9c:2b:2f:89:52:66:59:5f:31:c8:fa:
         67:f1:ec:30:31:86:f8:b8:cc:a8:52:8c:12:fb:1f:6c:ef:0e:
         f3:72:81:57:ca:da:49:96:df:85:2a:74:86:d0:54:5f:7c:f4:
         b3:ea:d7:ed:6a:89:da:68:3e:73:c2:02:25:fc:13:4a:d6:06:
         cd:96:e8:97:6d:4b:53:72:03:26:0a:7c:b4:c8:50:cb:f1:b6:
         ef:f5:a0:71:ae:95:3a:df:2f:01:c9:c2:5d:be:7d:b2:e8:fd:
         59:f7:49:95:fd:fd:b2:3c:9a:1f:21:14:f8:f0:b4:b2:0d:f3:
         39:5f:0d:cc:ee:80:8a:6d:42:c4:26:be:ac:c0:80:e8:a2:f7:
         47:25:70:b3:49:c5:57:96:f3:62:8c:a9:fc:13:1f:1e:af:d5:
         f0:27:14:9a:2f:66:26:9d:96:4b:18:45:69:f7:c8:54:ae:b8:
         df:75:47:32:70:5a:17:e7:7c:ed:3a:40:1c:26:c3:e8:be:54:
         62:2a:fb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:38:23 2026 by rpki-client