Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
File:                     M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft (raw, json)
Hash identifier:          2YtR0wOn7dyP+EwnioWx7OEGwHAVAmnDrGVmsAA28CI=
Subject key identifier:   78:79:E4:9B:C5:16:57:10:25:9D:8B:80:D0:FC:88:F9:04:99:91:A5
Authority key identifier: 33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5
Certificate issuer:       /CN=A919D3F9/serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
Manifest number:          0116
Signing time:             Mon 05 Oct 2026 06:20:26 +0000
Manifest this update:     Mon 05 Oct 2026 06:20:26 +0000
Manifest next update:     Mon 12 Oct 2026 06:20:26 +0000
Files and hashes:         1: M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl (hash: FSglR6ZLEDVBB1RwmBrByvBq32Ad0QxhIQ8SDWUQHVc=)
                          2: 35C008E818C811F0BF9E881FC4F9AE02.roa (hash: EwTXYjhkuYmnK5REc5ttyfrL9ha6tGMNAAZThk/k3Bo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl
                          rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 06:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D3F9, serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5
        Validity
            Not Before: Oct  5 06:20:26 2026 GMT
            Not After : Oct 12 06:20:26 2026 GMT
        Subject: CN=6ac341aa-db3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:64:06:e7:72:2e:24:6f:42:54:e8:92:e5:09:
                    22:4d:fd:f6:1d:cd:f6:42:b7:41:19:6a:dd:23:69:
                    20:10:43:1d:5f:7a:14:eb:b5:d9:42:3b:a6:dc:14:
                    79:5c:e3:92:d7:41:7e:54:d8:25:da:64:52:f6:cc:
                    91:39:05:23:06:c6:5f:90:3e:6e:60:84:4a:e2:20:
                    46:48:61:fa:33:a5:3d:0d:e9:f2:94:c1:06:58:80:
                    a9:d3:f0:3b:82:ef:b5:fb:a8:45:10:6e:b8:1a:02:
                    cd:75:f3:e6:03:c8:a3:69:11:87:a0:3a:6f:0b:15:
                    0e:d2:cf:c4:d9:7e:e1:1c:0c:03:92:76:d9:27:7c:
                    70:e0:f9:57:3b:30:f5:48:a6:f3:8a:68:d0:6b:f6:
                    54:ae:3d:44:2e:20:70:20:69:05:98:b8:a8:08:d0:
                    29:49:5b:92:fd:a8:47:d7:82:69:39:d1:be:12:77:
                    27:84:cf:3f:8c:b9:d5:64:b5:d5:aa:2a:a4:cc:9a:
                    c4:6c:ed:ec:b0:5d:1d:4e:e1:17:44:8d:0e:17:72:
                    d5:ad:d9:29:ca:6f:0f:3c:16:c4:56:58:c6:2e:84:
                    49:ed:7b:32:eb:ec:36:f3:80:71:cc:6b:90:bf:d1:
                    ca:fd:52:0b:28:84:ae:11:06:15:c7:7b:6f:a1:37:
                    81:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:79:E4:9B:C5:16:57:10:25:9D:8B:80:D0:FC:88:F9:04:99:91:A5
            X509v3 Authority Key Identifier:
                keyid:33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ae:33:73:19:de:1c:51:a9:3c:60:ab:6a:c9:a0:bd:17:ff:
         fc:a0:02:5c:d6:26:6d:c9:64:58:9a:52:b2:6c:6d:ec:a1:4a:
         ec:11:01:17:a2:0b:e8:86:68:c5:47:9d:36:3e:e4:c3:6a:2d:
         7b:8a:cc:fb:39:70:8e:0e:c7:af:eb:0f:ef:20:4e:ec:ca:11:
         fa:6c:b6:87:d6:34:3a:46:73:fc:a8:a3:86:9d:68:1b:5e:d5:
         83:0b:67:4f:63:3e:43:d6:7d:92:ce:3b:69:7a:0c:d6:cd:f5:
         b8:0d:26:53:de:d0:ed:39:0c:07:47:b2:29:5f:56:03:8d:bc:
         bc:b9:63:3f:14:f6:30:df:11:81:0a:84:e6:18:37:4f:51:22:
         89:bd:60:45:06:4f:6e:b5:ed:d5:21:9b:12:e3:e5:84:77:7b:
         92:af:d5:a2:2b:73:22:d3:c1:bf:ff:4c:6c:b3:5a:eb:2c:18:
         12:31:89:4c:e6:9d:04:c0:81:7f:ff:77:9f:c1:0c:eb:9a:e4:
         c5:0d:e7:32:4a:b8:e4:75:7a:ac:a3:64:1b:2b:b9:95:ff:f5:
         b8:3d:8b:84:f6:87:95:6c:d8:c0:cc:ad:77:f6:1f:68:c1:8f:
         63:bd:5c:22:8b:f2:df:c3:fe:b0:bd:d4:a7:c6:e5:07:53:7c:
         2b:c4:7f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:51:20 2026 by rpki-client