Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
File:                     Mgs39ulwReOJhGEP-kfpaEqEZ30.mft (raw, json)
Hash identifier:          vducqZ96MZ9cI60FfnABtEj2msfZLbf4RuatbOZnglc=
Subject key identifier:   B5:2F:CC:EB:0F:95:06:3A:72:EE:E1:1A:A3:16:91:60:6E:0E:6C:A3
Authority key identifier: 32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D
Certificate issuer:       /CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D
Certificate serial:       26A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
Manifest number:          268A
Signing time:             Sat 10 Oct 2026 15:41:13 +0000
Manifest this update:     Sat 10 Oct 2026 15:41:13 +0000
Manifest next update:     Sat 17 Oct 2026 15:41:13 +0000
Files and hashes:         1: Mgs39ulwReOJhGEP-kfpaEqEZ30.crl (hash: ic/+aVCO+Bedj8YkDJtQkhPloStqCgUHinhk3ndeAHU=)
                          2: 34FC96E8CFE711EB93714D2FC4F9AE02.roa (hash: PwNqKcYZhajR/KdGGezpNZmD2Nl8G3s805wTHD5hc9A=)
                          3: 08B3B40EB14311E58FF2C717C4F9AE02.roa (hash: 0+dhsLV0hEijLWmW5GRXfj6s2WTHqpeZ24Q4A7DWnzU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl
                          rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 15:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9895 (0x26a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911918E, serialNumber=320B37F6E97045E38984610FFA47E9684A84677D
        Validity
            Not Before: Oct 10 15:41:13 2026 GMT
            Not After : Oct 17 15:41:13 2026 GMT
        Subject: CN=6aca5c99-ff4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:72:49:97:f7:0f:a5:9f:ee:9b:15:6f:61:56:
                    b0:c3:5f:1e:f6:d9:43:4b:4f:3a:e9:53:b8:83:c7:
                    f4:60:c0:65:40:70:0e:17:7f:05:c6:e3:6d:b9:87:
                    9f:50:dd:63:41:03:23:e7:51:6a:41:ae:a6:d9:ae:
                    4a:2c:d2:db:47:68:1c:15:51:db:ea:6a:bc:6b:9d:
                    7a:77:67:5a:be:48:4c:1d:85:aa:22:0b:62:2c:11:
                    2f:e3:c5:44:94:da:ea:ac:f4:d4:85:fe:4d:26:ca:
                    6d:0a:86:2b:67:87:4f:6c:62:a1:29:75:71:c0:81:
                    f1:9e:93:6b:5d:35:b5:ac:29:80:bf:53:6d:8c:37:
                    75:09:38:65:cf:36:1a:72:57:60:96:76:b0:ea:cd:
                    0c:fb:31:4c:14:b4:26:1a:78:e4:73:f2:64:c7:54:
                    b4:31:d6:7f:86:ad:f0:3b:8c:b5:6f:34:d2:77:63:
                    ac:76:e3:f5:f6:63:32:dd:09:68:6d:20:33:9d:74:
                    91:17:2f:35:b2:03:56:59:f3:7e:86:b8:72:14:ef:
                    d6:a1:e0:1d:c6:eb:6a:c5:48:92:04:8d:25:66:1e:
                    a7:56:bb:06:eb:ad:19:f3:6a:2e:a5:18:fb:a7:9d:
                    b2:89:3b:e1:ad:3f:05:4a:85:4b:22:f8:ca:61:ab:
                    39:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2F:CC:EB:0F:95:06:3A:72:EE:E1:1A:A3:16:91:60:6E:0E:6C:A3
            X509v3 Authority Key Identifier:
                keyid:32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:a6:bb:a5:5d:e9:b0:20:a8:46:37:c0:91:44:ca:3c:e3:0f:
         90:b7:7a:a4:1f:67:3f:58:09:73:89:aa:5b:16:d1:e6:1e:50:
         c2:c6:9d:2f:ba:dd:c9:85:fd:62:a0:82:1b:bf:d3:5f:eb:76:
         54:e1:5b:8e:97:4e:0d:b9:a0:e5:a2:40:d5:0f:f7:61:be:d6:
         4b:a4:63:44:1b:d8:2d:bd:35:57:e3:db:0d:8a:9c:ff:83:e6:
         7a:8c:41:67:9f:d0:6d:43:0f:7f:78:98:52:82:0c:fa:cd:82:
         18:18:aa:b8:32:fe:04:53:a1:b0:fa:eb:36:0a:a7:8d:b2:0e:
         3e:e3:4b:2a:2e:85:fe:f9:7d:88:19:af:60:72:7b:6b:49:e0:
         79:86:99:76:18:f1:d0:22:37:13:a4:e1:30:79:52:27:f8:0e:
         e0:59:7c:c1:d6:4d:f9:62:de:e5:53:4a:12:c8:f4:79:f7:f9:
         89:6e:f9:ec:5f:c1:44:bd:bc:e0:aa:61:d6:c8:75:26:ca:81:
         97:1d:b2:32:56:05:cc:7f:0b:69:4a:72:52:6d:00:51:0d:26:
         88:2c:22:64:6e:91:5c:61:11:90:5d:e6:fd:74:88:30:5e:c6:
         b5:1a:98:f6:70:81:d3:6e:e6:87:b1:29:93:0e:71:e9:57:89:
         33:c2:ff:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:49:46 2026 by rpki-client