Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
File:                     iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft (raw, json)
Hash identifier:          mq0Sa0Sf3x4X8KKqx37OgwWduqt5xJBcKgxaNpD3xFI=
Subject key identifier:   54:3A:6F:97:7E:3C:DB:A3:EE:89:B8:46:92:04:E9:7B:6D:48:BB:56
Authority key identifier: 88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93
Certificate issuer:       /CN=A919821D/serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
Certificate serial:       0224
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
Manifest number:          021D
Signing time:             Wed 07 Oct 2026 03:20:48 +0000
Manifest this update:     Wed 07 Oct 2026 03:20:47 +0000
Manifest next update:     Wed 14 Oct 2026 03:20:47 +0000
Files and hashes:         1: iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl (hash: Nd/ZdM+YWTPeSEo93rr61CjXKASD5hL70wZ9wH1qEuQ=)
                          2: 51D4585A89B211EE9ADA615EC4F9AE02.roa (hash: Kopjf9ZoJzRg8VCg2Qj9EUxQF2CjA+68cqIxaYzasxc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl
                          rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 03:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919821D, serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
        Validity
            Not Before: Oct  7 03:20:47 2026 GMT
            Not After : Oct 14 03:20:47 2026 GMT
        Subject: CN=6ac5ba90-a141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b2:f3:85:5e:6a:62:ad:6f:b6:a5:4e:d3:30:
                    e9:3b:5e:bb:da:e9:21:8b:7a:7c:4d:ff:6b:95:36:
                    6f:3f:fa:6c:69:f3:40:31:6b:a0:e2:4e:4e:99:b5:
                    cd:d2:d0:25:92:7a:e2:30:72:e3:b9:bb:19:ec:fc:
                    7c:13:6b:2c:15:59:ca:01:b2:29:1f:63:f3:01:3f:
                    1e:e0:d2:c2:78:cf:52:ac:cc:50:15:14:c5:db:ff:
                    a5:91:a9:7e:7d:1b:4a:5c:5f:3e:37:44:bc:45:30:
                    79:fe:08:b6:ca:6c:de:32:80:78:c2:46:26:89:26:
                    7f:1c:fc:47:cf:39:3b:ec:9e:01:55:a6:33:14:88:
                    dd:08:ec:f5:6d:1c:51:f1:e6:ec:cd:0c:20:cd:da:
                    0b:4b:39:32:cd:89:15:9f:66:2c:07:9e:b4:81:03:
                    fc:fc:12:73:f1:f1:e8:76:84:ce:1a:15:21:ef:3f:
                    96:f2:e7:07:95:32:64:2f:de:30:38:9d:2b:f8:97:
                    4d:cb:be:ee:00:f4:bc:1f:fb:bf:5d:aa:64:76:7d:
                    66:c8:89:01:5a:ab:c8:ea:3f:60:5b:ef:ed:86:a5:
                    27:71:2a:08:3c:fc:1a:1b:7b:30:ff:e6:d0:16:45:
                    02:e1:2d:03:85:43:69:fa:6f:19:0f:ac:c3:47:be:
                    ec:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3A:6F:97:7E:3C:DB:A3:EE:89:B8:46:92:04:E9:7B:6D:48:BB:56
            X509v3 Authority Key Identifier:
                keyid:88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:63:a3:1b:71:bc:c3:fa:fd:62:12:49:a1:fa:a5:6f:71:04:
         9b:84:b7:41:ae:ba:14:8e:cd:57:15:aa:cd:d9:6e:79:98:3a:
         ba:f3:6e:ae:7d:78:88:41:ae:5d:c0:de:fe:3b:fb:f0:76:56:
         b4:73:18:c4:f5:da:53:b9:87:36:71:28:45:03:6e:ca:04:0b:
         1e:d4:13:46:33:3e:a8:17:84:e1:53:63:6b:39:31:7a:d3:8a:
         00:1f:1e:6a:ff:83:79:0b:7f:d3:7a:43:b0:f8:0e:7d:e7:09:
         ed:b6:1b:06:98:ca:bd:c4:d6:c6:10:93:aa:d2:36:b7:c0:f3:
         86:a0:bd:09:e4:5f:51:42:01:3b:51:fe:a2:28:5f:3f:6a:be:
         a1:e6:ab:ec:39:23:b8:a0:bb:bd:6c:1b:d3:ec:ce:2d:5e:8f:
         f1:58:8b:95:a2:8c:59:9e:38:b5:0a:a7:e5:c7:02:44:fc:95:
         93:ff:6b:59:a2:50:b5:48:2b:91:e0:56:b2:97:ff:b5:dd:68:
         93:1d:a7:08:c0:01:72:b3:cf:2b:9f:7b:a5:32:32:aa:c0:0d:
         92:cb:60:e5:cb:aa:94:ee:1a:74:a8:fe:43:d2:40:67:63:b9:
         4e:3d:c6:66:08:d9:6a:9b:ab:2a:3c:b9:8f:6b:4e:41:84:63:
         9f:7a:61:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:19:12 2026 by rpki-client