Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft
File:                     0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft (raw, json)
Hash identifier:          kI5NHFZEm3r+s3delvSbAWMaDJ+FZsZIy0+Hg4OqfZE=
Subject key identifier:   F3:14:8D:DF:E8:66:8B:41:FF:D5:1B:4F:D9:29:F5:A4:23:CF:62:0C
Authority key identifier: D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9
Certificate issuer:       /CN=A919608D/serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9
Certificate serial:       11D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft
Manifest number:          11AF
Signing time:             Tue 06 Oct 2026 17:14:38 +0000
Manifest this update:     Tue 06 Oct 2026 17:14:37 +0000
Manifest next update:     Tue 13 Oct 2026 17:14:37 +0000
Files and hashes:         1: 0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl (hash: yu77RsL68b7MN+cw2KDnnqywYgVd+nF04IZoeKR0AOM=)
                          2: 0E17B1AE78F511EC83E56014C4F9AE02.roa (hash: W4h7IWYUmM/hyejWwAL7UxMd6DDsYA0doq+8X7am/ms=)
                          3: 1ED5B13E30C111ECBB5A4116C4F9AE02.roa (hash: FMzrYGVGOtWt5cmIpjK8kf84YehxjN48qZYSg0E+H9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl
                          rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 17:14:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4560 (0x11d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919608D, serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9
        Validity
            Not Before: Oct  6 17:14:37 2026 GMT
            Not After : Oct 13 17:14:37 2026 GMT
        Subject: CN=6ac52c7e-ed80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bb:2c:c3:f7:47:6b:19:5f:69:70:3b:72:20:
                    66:9e:86:e8:0b:d1:b2:f0:ff:0a:63:c0:69:36:a8:
                    c8:80:67:7e:74:12:9a:c4:3c:75:a5:cd:76:22:23:
                    f7:72:fa:ae:2c:21:5d:47:57:22:9e:73:61:67:0f:
                    cc:a0:b8:ea:86:4a:60:ba:6f:0c:7d:6b:91:f9:5c:
                    42:b4:62:ba:9a:dd:46:56:29:a2:c2:f8:0e:1f:45:
                    58:81:32:86:f3:4a:d2:da:bf:8f:23:1a:ad:8e:93:
                    64:24:ca:c0:12:52:99:ce:8c:37:5e:b1:f0:a7:10:
                    47:37:6c:e4:76:36:32:b0:db:cc:d1:83:68:ec:6a:
                    92:d1:15:2d:24:2f:54:10:2b:2c:fc:55:5c:56:c5:
                    db:74:4d:9f:14:08:4a:15:1f:97:6d:da:26:32:af:
                    4e:96:cd:1d:2f:f2:cd:ed:d2:b6:e0:81:6f:b0:6e:
                    a1:ea:8d:10:4c:63:02:d1:c0:48:7a:db:8d:95:76:
                    e1:8e:7d:17:0a:21:a4:25:e3:02:9f:9d:94:61:a2:
                    21:65:f2:d7:bf:4a:d9:78:2b:7a:4c:63:a5:ff:c3:
                    5d:d2:15:53:78:12:f3:18:c5:f6:39:76:f2:0f:c8:
                    94:85:8f:9d:2f:46:d4:68:09:0d:48:56:68:42:d2:
                    ca:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:14:8D:DF:E8:66:8B:41:FF:D5:1B:4F:D9:29:F5:A4:23:CF:62:0C
            X509v3 Authority Key Identifier:
                keyid:D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:80:00:f9:19:0a:b3:f8:79:4f:9c:8d:87:8a:2d:bd:83:88:
         cb:f3:45:d7:38:44:d4:10:17:95:07:a5:88:89:ab:2f:bd:2c:
         a8:af:cb:ab:ca:cf:e7:e0:e7:57:64:c5:da:91:f1:b9:d1:15:
         da:53:69:98:7a:f6:9c:7a:fb:9d:c6:ed:6b:d5:e0:5d:ef:e1:
         20:47:20:4b:55:f7:56:7d:66:ec:3c:65:1e:9a:03:0b:83:53:
         53:e9:8f:64:b1:07:e9:68:db:d2:53:32:10:ad:bd:e9:b6:cd:
         36:e3:0b:28:4d:29:b5:ac:64:53:1d:fc:e0:8b:7d:c5:03:85:
         53:0c:a8:26:c4:2e:ce:2f:d5:a2:b9:17:52:35:1f:b2:7a:6f:
         4d:3c:06:07:23:73:74:d7:63:d6:d0:7d:8a:14:da:20:24:73:
         5f:d2:c0:44:43:33:55:6a:c2:98:bc:44:5f:e2:4f:c5:0f:d4:
         ac:8b:09:02:3b:99:99:d2:b3:df:f4:6f:63:6c:d5:29:62:96:
         b6:79:b7:f2:84:00:63:1b:dd:e8:ca:29:e9:be:fd:78:f5:93:
         c5:78:c9:cd:e8:2b:a1:9a:78:79:0f:6f:83:3a:04:dc:d8:ca:
         50:d4:ad:ae:be:5e:7f:01:a7:18:af:92:21:de:3c:6a:a1:e9:
         81:80:33:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:03:41 2026 by rpki-client