Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.mft
File:                     9wpgFV53FUM_JUSW4nuAimPIyXQ.mft (raw, json)
Hash identifier:          jkjAP6mO/reU7//WZ0BxWzX4qKfuoWjpUGI0ESxpgCk=
Subject key identifier:   A6:A3:A8:C2:3F:E4:34:08:A1:EE:1A:4B:8C:A0:E0:23:35:C8:27:4A
Authority key identifier: F7:0A:60:15:5E:77:15:43:3F:25:44:96:E2:7B:80:8A:63:C8:C9:74
Certificate issuer:       /CN=A919F83E/serialNumber=F70A60155E7715433F254496E27B808A63C8C974
Certificate serial:       0F6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9wpgFV53FUM_JUSW4nuAimPIyXQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.mft
Manifest number:          0F59
Signing time:             Mon 26 Oct 2026 17:32:36 +0000
Manifest this update:     Mon 26 Oct 2026 17:32:35 +0000
Manifest next update:     Mon 02 Nov 2026 17:32:35 +0000
Files and hashes:         1: 9wpgFV53FUM_JUSW4nuAimPIyXQ.crl (hash: JNe0OIUKBeBn/nZsmr2gowUPdRz28IvRvMRzECqpIvo=)
                          2: A44F5CE29E1B11E9AE66905DC4F9AE02.roa (hash: DeFv9wi/paeVEojNDZbBZNRtoz2McbO09aXhcq9qNAs=)
                          3: A4DF63AA9E1B11E9AE66905DC4F9AE02.roa (hash: afouxIlWO+WOLChFDq7mxaWTbYMWsgiwN3ywgEYWYN8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.crl
                          rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9wpgFV53FUM_JUSW4nuAimPIyXQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 17:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3950 (0xf6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F83E, serialNumber=F70A60155E7715433F254496E27B808A63C8C974
        Validity
            Not Before: Oct 26 17:32:35 2026 GMT
            Not After : Nov  2 17:32:35 2026 GMT
        Subject: CN=6adf8eb4-7988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:db:20:a3:9c:cd:7c:3d:13:21:d2:fa:08:c1:
                    cc:5d:72:1e:c1:34:51:30:c4:6b:77:cc:2c:fd:88:
                    de:73:dd:dd:d4:f4:80:44:f0:44:f5:92:e2:0a:32:
                    c8:18:5d:d0:46:4e:62:44:54:f4:af:93:74:d6:40:
                    1c:26:19:b9:5a:1b:58:cf:81:4a:99:79:ac:ce:b3:
                    79:23:90:22:c4:b1:a5:66:81:d9:88:6e:f8:b4:96:
                    01:80:74:4f:75:8e:0b:a2:19:b6:33:e5:83:dd:3a:
                    8e:3f:fc:ed:88:0f:2c:f1:be:83:ff:44:16:c6:cb:
                    83:84:ff:6f:da:ad:32:bd:26:de:8f:8f:f3:f1:75:
                    95:9c:53:5f:df:26:4f:01:8a:d3:ca:50:70:09:8c:
                    d4:98:e1:26:bf:38:cc:8a:23:d7:9e:6b:9c:c6:7b:
                    f6:d0:87:de:78:1b:9a:ab:8b:c1:c7:67:0b:7e:f7:
                    5f:e7:ff:18:4f:fc:e5:a2:ce:66:22:fe:fa:7f:7e:
                    ec:c0:20:e5:53:7b:82:16:ce:d0:37:89:19:64:ca:
                    c9:b7:9a:44:b5:6c:ca:4b:2e:42:f4:b9:36:70:7a:
                    43:91:3c:83:a9:36:fc:18:f7:90:72:df:d6:04:5a:
                    ae:f4:ba:2a:2a:85:08:bb:0f:1f:ad:62:4d:33:ff:
                    8a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A3:A8:C2:3F:E4:34:08:A1:EE:1A:4B:8C:A0:E0:23:35:C8:27:4A
            X509v3 Authority Key Identifier:
                keyid:F7:0A:60:15:5E:77:15:43:3F:25:44:96:E2:7B:80:8A:63:C8:C9:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9wpgFV53FUM_JUSW4nuAimPIyXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f1:0e:e8:fb:3a:d8:ff:5c:1c:db:1b:28:80:f3:20:78:8d:
         fd:23:4d:e6:68:06:9b:bc:2b:b7:3a:dd:68:ce:e2:0c:61:35:
         ec:5a:2e:11:14:55:86:8c:2f:01:3e:03:7a:d7:69:a1:91:c5:
         0c:11:eb:b4:b3:d4:e2:e8:1c:69:3a:18:3d:12:9a:9d:94:25:
         29:3b:be:09:b7:7b:fe:ab:94:3f:3c:fb:ee:8a:27:1e:cd:3c:
         a4:c6:51:27:c3:ea:bc:c7:dc:5e:22:0c:6c:1a:d3:df:72:da:
         2f:f8:e4:78:72:8f:07:91:0a:a2:21:ad:69:f5:f8:9a:6e:68:
         44:b4:e5:39:b5:0d:2d:79:4d:fc:a0:19:f2:96:c9:a9:a3:41:
         8d:98:08:90:38:f2:cf:6b:5c:c2:8d:e1:89:a8:fc:7a:47:23:
         8f:9c:35:8c:5a:44:68:72:6b:d2:b0:6d:f3:da:5e:22:49:72:
         f3:75:4e:ca:3e:61:65:8f:76:d8:5c:d5:06:63:70:c9:23:15:
         2f:4e:86:95:7a:37:fb:cf:fc:fd:dc:aa:74:66:e0:5b:8d:eb:
         0e:2d:e4:47:14:e7:90:eb:e4:63:80:ee:66:e3:0b:59:1e:3e:
         a9:58:ed:ca:a2:ae:81:41:c8:52:0f:ee:21:db:27:7c:ff:e8:
         b9:fa:ae:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:29:42 2026 by rpki-client