Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
File:                     ips7kjmTluj8a4YwntVzMMlOEX0.mft (raw, json)
Hash identifier:          CaejvmAoul63/FvFCYlaJYcZNvRIfY2+cN3Mj+iWLOM=
Subject key identifier:   17:D8:BB:BE:FF:DE:D3:E5:3C:33:2A:5F:6E:96:21:85:20:4A:C6:C2
Authority key identifier: 8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D
Certificate issuer:       /CN=A919A3CA/serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
Certificate serial:       0A91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
Manifest number:          0A85
Signing time:             Tue 06 Oct 2026 19:43:18 +0000
Manifest this update:     Tue 06 Oct 2026 19:43:18 +0000
Manifest next update:     Tue 13 Oct 2026 19:43:18 +0000
Files and hashes:         1: ips7kjmTluj8a4YwntVzMMlOEX0.crl (hash: k813sv5bvyFq9o6IAXInGlM/RXzVCtpxZIMT1TkBuPc=)
                          2: B972C58C8FA611EAB095C928C4F9AE02.roa (hash: Lmz5u1XQZ5pr8gx+0xG0dq5xcsKIBrpCQ17vf78quGQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl
                          rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 19:43:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2705 (0xa91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A3CA, serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
        Validity
            Not Before: Oct  6 19:43:18 2026 GMT
            Not After : Oct 13 19:43:18 2026 GMT
        Subject: CN=6ac54f56-2c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:69:95:cc:04:36:f8:7e:26:5a:ef:3c:34:ab:
                    86:0e:44:c9:ff:74:a0:b8:6b:ae:bd:83:ce:94:27:
                    dc:b7:92:8e:25:4d:1c:1a:7a:30:21:fa:0d:06:63:
                    87:82:a9:4b:80:37:3c:d7:1f:47:8d:f8:8b:cd:ea:
                    eb:dc:35:7f:55:2f:f8:76:a6:c8:e3:68:59:10:54:
                    13:f3:fd:f5:31:62:b2:d6:bb:b0:b9:1c:32:b0:2b:
                    75:43:ad:94:80:d9:41:df:c7:31:8c:74:8d:14:0c:
                    f9:a2:6a:2d:0a:5c:48:81:c6:8a:3b:7a:4f:1e:35:
                    47:e2:9a:e1:e9:5a:f8:57:d5:ee:59:64:9e:a2:2f:
                    b0:f5:2a:ef:3c:10:a5:fe:71:46:b1:d3:22:f2:a6:
                    6c:60:43:d1:3e:eb:9b:bd:16:a1:36:d9:78:9e:dd:
                    e9:59:53:db:57:27:3e:ab:c0:91:c9:3a:f7:8d:6d:
                    d6:bb:91:33:ea:a7:ff:ce:6e:86:ed:d6:06:74:1c:
                    dd:99:df:c6:03:bc:fe:52:be:2b:39:4c:cb:e8:da:
                    ed:5c:06:12:62:c0:d3:93:36:b8:e9:c8:c5:e4:66:
                    30:cb:fc:23:d9:d1:f5:12:74:eb:e1:80:51:c2:38:
                    37:c1:f9:bf:bc:3d:c5:66:8c:19:70:2c:68:20:23:
                    70:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D8:BB:BE:FF:DE:D3:E5:3C:33:2A:5F:6E:96:21:85:20:4A:C6:C2
            X509v3 Authority Key Identifier:
                keyid:8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:80:b7:bb:7a:7d:2c:a1:31:f4:54:b7:e5:41:df:aa:b9:c3:
         08:eb:ff:7d:48:00:68:d3:97:25:46:c2:4a:b4:83:a7:fd:d0:
         66:6b:ca:8e:ee:19:97:98:05:b0:0b:ed:61:22:24:20:ec:38:
         17:ca:03:51:99:a3:3f:bc:44:d6:5e:0c:2c:19:ea:f5:26:a0:
         f8:87:0a:c7:a8:9c:8b:24:6b:74:3d:1e:a8:3b:96:c7:64:5d:
         9b:0e:46:3a:64:2a:25:99:b8:16:f2:8d:35:cf:ce:8f:6f:b0:
         df:db:c1:af:62:db:92:64:3f:10:c8:83:8d:16:2e:a1:8e:90:
         4f:51:cc:7e:df:2c:90:c6:c8:fe:03:cd:03:64:9d:d3:eb:ac:
         80:44:b3:94:db:f7:b7:69:12:22:b6:fa:a8:87:20:9a:f5:fc:
         dc:7b:b5:10:f2:15:56:20:79:c0:25:d5:3e:69:58:21:b7:47:
         38:f7:71:af:0b:22:75:16:6a:99:2e:c0:da:7c:34:9d:cc:21:
         ba:c3:c3:30:89:2a:a3:05:b4:2c:dd:ac:ba:09:fe:81:34:7b:
         76:45:48:02:2f:58:6f:a8:38:30:7a:49:54:35:e6:c9:e9:7f:
         81:af:ff:cc:0b:bc:ec:a6:8c:a8:09:ef:95:f2:96:11:de:c4:
         1a:cf:10:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:49:20 2026 by rpki-client