Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft
File:                     d2KqgncCDQu1x1mX3l99ilFC3xQ.mft (raw, json)
Hash identifier:          R7+ca3o3sgoo8NqUnHLmWLI2dx+B561WaOnR1oZdqas=
Subject key identifier:   C7:4B:76:AF:C0:7E:DC:03:47:81:11:56:D3:26:49:25:F3:69:6F:6C
Authority key identifier: 77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14
Certificate issuer:       /CN=A911FAC3/serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14
Certificate serial:       14B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft
Manifest number:          1493
Signing time:             Tue 06 Oct 2026 16:55:04 +0000
Manifest this update:     Tue 06 Oct 2026 16:55:03 +0000
Manifest next update:     Tue 13 Oct 2026 16:55:03 +0000
Files and hashes:         1: d2KqgncCDQu1x1mX3l99ilFC3xQ.crl (hash: MMEv45ZpLB/RmWTpYv+Em9ujeljj3oSi0YSvwoD3FWk=)
                          2: 43A759B0C82811F0B893BE0BC4F9AE02.roa (hash: WqLIwuJ/7DrpYR3z9TNqi+cQRJQneuJiijOPEO2pCoE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl
                          rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 16:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5304 (0x14b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FAC3, serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14
        Validity
            Not Before: Oct  6 16:55:03 2026 GMT
            Not After : Oct 13 16:55:03 2026 GMT
        Subject: CN=6ac527e8-7d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:81:99:bb:f5:32:bc:ed:e6:02:5e:76:bb:85:
                    43:50:5d:8e:92:76:1d:2b:5c:07:96:6d:3e:a8:d5:
                    41:2f:8f:5a:16:e1:86:fa:a4:f7:4c:1c:4c:70:66:
                    ef:92:e7:55:14:57:47:5d:6f:08:2d:e5:f7:eb:0a:
                    0d:13:45:88:f9:32:06:17:2a:f7:65:ba:03:9e:76:
                    42:50:01:12:ce:1b:f1:ec:1b:b1:b2:2a:7b:21:bc:
                    e2:78:75:7a:8f:51:28:8a:83:2e:b7:6e:61:f5:4f:
                    ba:0c:57:67:91:d8:0a:34:7c:53:12:54:a3:b0:10:
                    ef:02:4d:4e:dd:05:11:67:09:f3:86:66:12:7a:29:
                    15:2e:69:46:91:d1:9a:6f:98:fc:80:d6:17:e9:71:
                    b9:ef:36:1d:79:46:25:ca:4d:ba:c6:5c:e6:41:46:
                    13:df:a3:80:e8:22:9f:e3:5c:80:1c:bf:14:e8:2c:
                    5d:19:0f:21:65:fe:14:bf:16:77:73:13:5b:0d:ef:
                    54:5d:80:eb:2a:e3:bf:3b:6c:8a:49:5e:09:8c:0b:
                    55:46:00:5a:a3:2a:e0:6d:3c:cd:77:c5:43:37:48:
                    3d:05:17:9b:65:d4:e5:f0:40:48:3d:a0:e3:16:b4:
                    95:e1:64:f3:81:95:54:9a:b2:b3:79:f9:df:f6:5d:
                    22:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4B:76:AF:C0:7E:DC:03:47:81:11:56:D3:26:49:25:F3:69:6F:6C
            X509v3 Authority Key Identifier:
                keyid:77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f8:b7:d5:16:9e:a4:50:92:72:bf:b6:78:af:72:6c:ed:a4:
         d4:59:4a:08:33:be:19:9b:50:ae:ba:78:f5:b3:75:2f:30:b3:
         08:ed:04:47:b4:30:9e:64:c3:49:b6:28:0b:be:8f:67:f2:b6:
         2f:42:ea:28:1c:92:66:42:10:5e:c6:71:67:a5:33:14:b2:05:
         51:6e:9d:e3:e3:31:a4:c8:a9:44:a8:19:31:ad:00:6e:ab:74:
         a7:d9:57:42:d5:a9:b2:15:2d:42:f0:fc:16:9e:8f:88:d8:c3:
         94:2c:6e:45:42:65:f5:18:54:a6:73:70:2b:1c:a2:f6:55:b3:
         92:31:8f:5e:51:26:9f:90:af:8c:24:09:21:98:9c:05:d9:cf:
         3a:88:7b:8a:99:e2:41:f2:0d:92:a9:21:3e:a2:e7:8c:f6:82:
         4d:0f:4f:b0:b5:0c:69:51:dc:f0:12:fc:30:c8:55:b3:0f:2a:
         0a:76:2a:43:61:00:16:82:8f:2f:8d:bb:da:f4:10:82:df:47:
         24:d5:4b:c1:c6:73:8b:11:42:df:c5:0a:21:07:cc:d5:0f:81:
         0f:e0:84:b8:ab:41:48:2f:25:09:b9:30:55:b7:d1:75:46:7d:
         13:d7:3f:e4:09:e2:36:ae:b9:6b:8a:bb:c5:9d:c8:51:d6:59:
         ae:af:2e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:20:50 2026 by rpki-client