Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft
File:                     1r894WRB7X2HUG3gnk3V1jjgumk.mft (raw, json)
Hash identifier:          KmTq3Y5gML1IW/zPU3W23qABh3+Y6xzQ18y9gjreC/o=
Subject key identifier:   96:1B:7A:5C:55:29:27:C4:C1:03:25:AF:AF:2B:B6:B6:69:97:FC:B1
Authority key identifier: D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69
Certificate issuer:       /CN=A912F190/serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69
Certificate serial:       01E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft
Manifest number:          01C9
Signing time:             Sat 03 Oct 2026 04:47:47 +0000
Manifest this update:     Sat 03 Oct 2026 04:47:46 +0000
Manifest next update:     Sat 10 Oct 2026 04:47:46 +0000
Files and hashes:         1: 1r894WRB7X2HUG3gnk3V1jjgumk.crl (hash: ED33SztatmLtqXkpssChmONZB0ljzMZnFlxpnJjtqow=)
                          2: 23CFDCD244BE11EF8FA8A37FC4F9AE02.roa (hash: b7tTkIQLwSx6JAaS4yo7JlLAOBsvulqfSiRwtnC5b7E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl
                          rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 04:47:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F190, serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69
        Validity
            Not Before: Oct  3 04:47:46 2026 GMT
            Not After : Oct 10 04:47:46 2026 GMT
        Subject: CN=6ac088f2-45d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:88:98:33:be:df:3f:11:46:7d:20:39:b1:53:
                    9b:25:b9:49:cc:fa:61:26:63:ff:1c:90:64:88:3b:
                    b5:f4:cc:c0:55:61:33:ea:95:f5:61:f5:82:70:19:
                    0c:46:14:05:c3:d1:d7:7d:15:c6:7b:ee:f9:ea:c7:
                    64:f8:9f:7f:38:1f:14:9a:9b:7c:de:5e:6d:0d:78:
                    fd:fd:8f:44:bd:61:51:19:c2:a0:4e:ad:bc:42:17:
                    a2:53:61:a9:84:75:f1:c6:97:d4:b0:6b:2f:30:07:
                    d8:71:e7:44:3e:dc:c8:0d:43:0d:c4:97:21:74:0e:
                    ab:b3:77:28:b2:1f:7f:d4:95:0b:0e:36:64:df:c6:
                    68:88:5c:fb:77:27:b6:1b:d4:03:d5:ba:f9:89:a2:
                    8a:0e:ce:f0:8e:6e:70:4d:33:27:50:fd:76:cb:14:
                    2b:fa:d8:b8:de:10:2d:a7:e3:03:29:6b:f8:fa:86:
                    5a:72:e2:a1:88:bd:14:48:b0:95:52:2d:88:0b:15:
                    de:ee:30:86:e4:31:15:77:e9:57:a4:76:b3:8c:52:
                    f2:0f:74:f2:25:b8:04:20:6a:ee:9e:4a:b7:9d:0a:
                    d0:27:6f:7f:b2:56:39:c5:1c:cb:a8:b8:ea:a4:f4:
                    03:8c:6a:c1:de:16:ec:6f:32:96:cc:5b:58:bc:35:
                    c9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1B:7A:5C:55:29:27:C4:C1:03:25:AF:AF:2B:B6:B6:69:97:FC:B1
            X509v3 Authority Key Identifier:
                keyid:D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:fd:36:2b:7a:d8:ba:ff:c3:b2:b0:8d:b8:05:98:75:bc:74:
         5f:7f:69:d4:21:82:b0:7d:51:cb:d8:7a:03:c4:e0:38:7c:26:
         cb:aa:fc:7b:a2:b8:40:89:66:ee:b3:21:66:20:95:26:3e:51:
         37:8f:f8:07:52:fa:1f:22:87:39:78:9f:29:4a:21:43:ad:ec:
         40:11:93:55:14:87:65:0b:48:23:07:d3:da:e7:a7:70:4a:b5:
         8e:e6:f2:1a:14:2d:fa:3a:ed:62:f9:73:30:91:17:df:0e:76:
         39:9d:19:c7:56:ba:bb:66:74:38:41:0d:fc:7d:68:83:28:34:
         df:32:8c:11:ea:38:44:90:5b:4f:3a:e9:f3:01:cb:bb:c8:f0:
         00:e6:e8:d4:58:a7:e2:7f:49:45:d3:ff:0f:fd:cd:4e:4c:0b:
         53:78:da:3d:82:45:fa:d9:cd:85:04:3c:bd:ce:15:e7:ea:21:
         31:10:6f:c4:d9:ef:90:5b:39:2e:9e:20:03:41:b9:32:45:0a:
         ad:f4:8f:37:f9:83:9d:e7:06:bd:dd:fb:5c:ea:27:91:1b:d1:
         c6:ca:54:30:c2:eb:37:87:14:60:be:5e:45:7d:b2:0d:65:67:
         1d:ec:c4:1b:d0:18:b0:ad:b3:0b:19:0a:00:ef:71:b9:6b:19:
         dc:6e:bb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:12:23 2026 by rpki-client