Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft
File:                     72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft (raw, json)
Hash identifier:          NzQRvjs4nP2G0gTFi9Vt968HzW9SC09DV+arvkVqh+I=
Subject key identifier:   ED:F1:30:39:8A:7A:FA:36:68:92:14:E4:4A:5C:FC:7A:96:40:49:C7
Authority key identifier: EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94
Certificate issuer:       /CN=A919FEA1/serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194
Certificate serial:       0F55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft
Manifest number:          0F4A
Signing time:             Fri 02 Oct 2026 17:44:15 +0000
Manifest this update:     Fri 02 Oct 2026 17:44:14 +0000
Manifest next update:     Fri 09 Oct 2026 17:44:14 +0000
Files and hashes:         1: 72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl (hash: 139iuPZXyBjjXw1Xjngjc5TgVmjSZrKFBfu7os42Was=)
                          2: 0DFAD3529E1611E98059B049C4F9AE02.roa (hash: 6jkA83GPmT1sTdP9/+4bkkPNn9zJBgan8JssNW53vPg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl
                          rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 17:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3925 (0xf55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FEA1, serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194
        Validity
            Not Before: Oct  2 17:44:14 2026 GMT
            Not After : Oct  9 17:44:14 2026 GMT
        Subject: CN=6abfed6f-7e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:13:2c:18:17:6d:08:f8:fc:bf:82:89:0a:99:
                    17:68:96:dc:07:65:94:d1:41:b0:bb:cb:17:84:c8:
                    8c:c5:a1:7d:14:4e:c3:b6:e3:6b:09:cc:7e:fd:43:
                    fa:11:e4:c0:78:0c:87:5a:d9:d0:1c:f6:29:83:72:
                    4e:bd:24:3f:bb:b7:64:15:9d:e5:e9:93:f0:3e:71:
                    94:93:9f:02:8d:28:0b:dc:c3:4d:35:b8:0d:ab:c8:
                    e0:3c:c7:ba:f2:ea:a4:7f:a0:40:04:df:3f:12:1d:
                    ec:17:ae:64:5f:fa:43:9e:0d:55:4e:98:d1:85:78:
                    6c:90:65:e8:b4:20:98:86:41:60:73:f6:27:16:a0:
                    dd:f4:84:f8:d2:b4:7c:10:fd:62:e8:53:5c:98:c8:
                    18:26:c6:61:89:fb:1a:a8:b9:82:14:0c:05:6b:12:
                    78:76:fb:80:9e:e4:66:52:13:a3:b2:8d:c6:a8:07:
                    34:34:83:ba:75:5b:1a:5b:66:40:1d:7a:15:66:e2:
                    50:82:61:dc:b2:07:36:3d:ae:09:10:e3:3e:52:46:
                    1a:e3:46:bf:26:3f:7d:53:04:0c:8f:a4:8e:38:e5:
                    47:ee:37:70:c4:48:48:fb:79:c7:bb:43:95:00:9f:
                    ab:1d:51:af:dc:13:8b:fb:56:63:92:f6:6e:e5:a4:
                    e0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F1:30:39:8A:7A:FA:36:68:92:14:E4:4A:5C:FC:7A:96:40:49:C7
            X509v3 Authority Key Identifier:
                keyid:EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:cc:15:a3:74:e3:4f:1c:4a:67:bf:ec:bb:8d:82:d4:73:fc:
         cc:cd:95:c2:0f:55:8b:61:eb:d4:d2:16:c4:1c:93:6d:9e:60:
         a6:f4:4d:24:13:26:9c:e4:a5:fd:48:23:fe:52:d9:c1:3c:3c:
         68:40:15:1e:54:e9:1b:ea:c9:e1:e1:4c:c2:69:5a:f0:92:d5:
         64:ae:60:6c:47:98:4a:6d:f6:3f:e8:0c:e5:9b:17:fb:a5:ad:
         23:e6:a2:72:0f:d0:78:ce:2c:04:ba:da:0e:4a:bb:90:a6:2b:
         8b:7d:cb:de:33:ed:c8:a3:20:b0:d2:2c:22:4d:1a:09:15:23:
         06:88:86:63:43:f5:e3:26:29:55:2b:f6:41:30:db:3b:a9:97:
         68:be:82:f1:ce:14:d6:18:05:7e:10:7c:ab:ab:96:c8:e3:41:
         cf:3f:35:97:9e:2b:2d:ae:36:13:77:fc:c7:15:b0:9f:fc:5c:
         72:b0:1e:f7:fa:42:18:fd:96:93:b5:87:9b:f8:3d:19:b0:67:
         a3:2e:78:df:c2:f9:15:fe:25:b1:f6:38:c3:7f:3a:46:c4:a9:
         cb:64:a2:c0:77:83:02:3a:60:ab:3f:8c:cf:a8:d7:f2:5e:25:
         85:8b:42:f7:8b:9d:0d:4b:2d:6b:b1:ea:19:02:61:61:2b:6d:
         9f:cb:7b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:57:44 2026 by rpki-client