Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
File:                     2DkrDZFbmsH00jv5hBlxQG-2GsY.mft (raw, json)
Hash identifier:          bf0p7nLwK52ULm9ISvhiV7a21rb/ll9ino2j0UNlx1U=
Subject key identifier:   F9:AA:E6:ED:32:12:8E:11:41:BE:50:2C:82:17:35:28:18:1C:CE:35
Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6
Certificate issuer:       /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
Certificate serial:       0ABB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
Manifest number:          0A8F
Signing time:             Fri 16 Oct 2026 19:48:17 +0000
Manifest this update:     Fri 16 Oct 2026 19:48:16 +0000
Manifest next update:     Fri 23 Oct 2026 19:48:16 +0000
Files and hashes:         1: 2DkrDZFbmsH00jv5hBlxQG-2GsY.crl (hash: 5/9Ed6ho/JnCM/LUWI0+IghhUrxKD4wtLdVb/D08T/8=)
                          2: 7AAA81CC97A211F1B4CCDFD05411F970.roa (hash: tmTcUM1Gt6DkqNwBrnAaOzy4iBZeySyylbDIucJKHRw=)
                          3: 5AEF27A42ECD11F1AE5BE4D1C4833773.roa (hash: cmVZdqv7w9NRqhgcmC2ej8pHoBznVSbIbEo4RoHW2Pk=)
                          4: 92B2469A90D411F09BC0A564C4F9AE02.roa (hash: PkC4dRO+Wlbu8dm7WWCNEBHmc6F+L3L9mcM175HSXiw=)
                          5: 41622F82F82E11F0BC7D9928396F56BC.roa (hash: 5jC5+vB+RNAR1xgd8lYPtE5GXYcgqWVuOUMwuqN2UnY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl
                          rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Oct 2026 19:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2747 (0xabb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
        Validity
            Not Before: Oct 16 19:48:16 2026 GMT
            Not After : Oct 23 19:48:16 2026 GMT
        Subject: CN=6ad27f81-e24e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e4:01:d5:13:18:9e:b5:06:aa:b9:4f:76:73:
                    22:86:78:36:53:97:80:45:43:c8:a7:53:48:91:a1:
                    58:8b:ba:2e:45:d5:99:91:5a:91:6c:83:03:0e:e0:
                    1f:fe:39:86:2d:f5:a0:7f:35:3f:bc:b1:3b:f4:8d:
                    31:36:c7:25:7a:6c:36:cc:90:4e:46:a9:f5:0d:12:
                    cd:76:29:11:97:a8:3c:5d:f1:38:8a:10:c8:b0:05:
                    33:2d:4b:fa:37:27:be:8a:34:5a:ce:fa:13:ce:ed:
                    58:a6:5e:dd:a0:aa:ad:74:01:77:d8:36:eb:9b:c1:
                    33:43:b2:1c:ca:d0:73:1e:97:c8:b3:7b:30:19:55:
                    da:ef:f1:4f:e4:e4:0e:f7:42:6c:fd:b1:c0:f9:24:
                    ee:1a:78:30:ec:8a:fa:3e:9d:74:a1:70:2d:86:d0:
                    35:fd:4e:10:1b:c6:34:8e:15:d7:b9:c7:d7:e4:6a:
                    45:83:37:7c:97:a3:99:81:89:43:ec:79:b0:13:ec:
                    10:a5:8f:b2:49:bd:cd:7b:f1:c0:68:e2:32:e0:dc:
                    05:44:4a:13:21:f9:64:3e:ea:0a:60:81:b8:a5:16:
                    e9:1e:4d:f4:9d:f3:11:d0:bd:21:9b:bb:8c:97:b7:
                    d7:d1:d0:ef:0c:21:41:41:6b:50:26:06:7f:43:88:
                    de:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AA:E6:ED:32:12:8E:11:41:BE:50:2C:82:17:35:28:18:1C:CE:35
            X509v3 Authority Key Identifier:
                keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:73:a2:65:e9:c7:70:f2:b1:3d:d4:60:c8:42:11:00:b1:e7:
         54:11:8c:46:25:54:2d:bc:b5:e9:07:17:4f:ac:14:bf:10:9a:
         d8:4e:d0:77:ac:15:ce:e4:c5:49:45:a6:fd:e5:0c:a5:55:b2:
         07:1b:6b:fb:db:03:0a:4e:07:15:02:4f:65:9b:4a:b2:5c:ad:
         48:e0:61:0c:e1:2a:18:bc:a8:d6:26:65:77:78:99:0b:0c:b1:
         8c:9c:2a:20:4d:1a:d7:b9:e0:a0:07:f6:93:a7:8c:ae:af:a0:
         11:01:7d:53:c6:c4:e0:3b:fd:d2:04:b9:a2:33:0c:2d:47:e4:
         aa:a9:3c:a4:45:2c:f7:39:53:26:19:17:7e:e6:67:13:3a:47:
         cc:51:96:bc:1c:d3:0b:0f:e7:ce:6f:0b:2e:ee:b4:47:84:46:
         68:3a:a2:03:ce:95:30:2b:39:e5:74:91:2e:e8:fe:f8:34:77:
         85:a3:cc:78:bf:a9:89:5e:d6:fe:72:66:65:ce:43:22:11:00:
         ee:31:c1:0e:23:28:cf:85:02:39:1c:b3:ff:d4:07:43:60:ae:
         9a:10:c3:71:44:ab:5d:f6:4f:25:7c:a0:46:02:88:61:7d:9c:
         ba:d1:e9:0f:55:b6:d9:04:89:8b:58:81:b6:cd:ce:f5:36:a6:
         71:46:a2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:50:11 2026 by rpki-client