Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft
File:                     8reSQiqNuXlUdjz-iRZuki5jGYQ.mft (raw, json)
Hash identifier:          AP0rlOtbLSgXHOAtOaUmHeNHVKMdZ556zQ/QZIJ60Yo=
Subject key identifier:   56:4D:52:F2:55:47:7A:CC:4D:60:FE:97:AB:63:8F:BC:3B:18:71:6A
Authority key identifier: F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84
Certificate issuer:       /CN=A9131AB9/serialNumber=F2B792422A8DB97954763CFE89166E922E631984
Certificate serial:       0218
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft
Manifest number:          0212
Signing time:             Sun 11 Oct 2026 03:33:03 +0000
Manifest this update:     Sun 11 Oct 2026 03:33:03 +0000
Manifest next update:     Sun 18 Oct 2026 03:33:03 +0000
Files and hashes:         1: 8reSQiqNuXlUdjz-iRZuki5jGYQ.crl (hash: nVlY68C/UivwwHqrNiZUBuEbiai6H6o1QfCdiTIYTMI=)
                          2: F609B0309D5F11EE94076E6FC4F9AE02.roa (hash: 7bHHLIgES8ByM7fP5YN9h2I6mW2n114NAaaCpRW1pN8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl
                          rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 03:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536 (0x218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131AB9, serialNumber=F2B792422A8DB97954763CFE89166E922E631984
        Validity
            Not Before: Oct 11 03:33:03 2026 GMT
            Not After : Oct 18 03:33:03 2026 GMT
        Subject: CN=6acb036f-2199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f7:65:fc:cb:ba:ac:18:12:e9:ae:95:57:90:
                    3c:04:5e:ba:70:e0:d6:c3:d7:f5:34:d5:2f:e9:63:
                    08:d0:31:6a:6a:22:64:74:79:34:16:ee:cc:bf:5a:
                    55:92:27:6f:ce:05:d0:35:40:35:ef:63:e9:8b:89:
                    6c:75:99:42:83:a1:b2:6c:d9:ff:22:e5:9c:08:0b:
                    61:b7:51:54:b8:50:72:a4:00:4f:1a:81:78:2a:62:
                    c0:10:09:30:a5:a9:c8:01:f7:f0:d8:c9:02:8b:50:
                    5c:18:bc:6d:ee:eb:19:d8:43:da:3c:40:8c:e5:da:
                    d5:7b:74:14:2a:2b:f6:cc:90:bf:20:e4:13:e3:61:
                    e9:cd:a9:59:44:b0:28:95:20:61:a3:a3:ae:d8:45:
                    de:6a:37:0e:2d:70:c1:6e:49:55:53:be:18:fa:68:
                    f5:cf:da:56:2d:85:1f:25:e6:e4:2f:57:36:ec:7a:
                    d9:78:72:d4:22:b7:79:e9:5a:1d:78:1b:ff:1a:fd:
                    88:cb:17:8a:b3:71:f6:f1:db:2d:66:9a:81:bb:7c:
                    4e:2f:e8:ab:f6:6a:c9:87:fa:83:0f:20:b8:6b:2b:
                    20:60:5f:ca:b7:67:6f:d0:19:57:e9:ba:6b:8b:72:
                    78:00:e8:bd:64:2e:f1:d5:45:45:c1:b5:1a:4f:e9:
                    d7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4D:52:F2:55:47:7A:CC:4D:60:FE:97:AB:63:8F:BC:3B:18:71:6A
            X509v3 Authority Key Identifier:
                keyid:F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:a2:b4:e8:91:69:36:bb:57:ff:e6:88:93:16:d8:48:04:bd:
         a3:f9:97:1a:3e:80:de:29:24:e0:76:86:31:2c:a8:e0:75:8b:
         58:24:8b:cc:19:e2:19:65:b7:7e:21:82:95:af:37:e8:40:b8:
         83:fb:b2:af:b1:79:23:22:28:43:7f:2e:18:51:5a:4a:d5:77:
         6c:03:90:1f:3d:12:ad:df:a1:0f:e5:8e:fd:e6:c3:8c:be:cb:
         02:e1:91:7a:a6:74:52:5f:2e:ff:8e:a0:a3:92:eb:24:0e:28:
         32:5e:c6:ca:2a:39:46:9f:fc:68:ae:8b:d1:5b:98:d0:53:38:
         a4:c3:55:31:e4:8a:a6:f7:32:a5:6c:b7:ea:82:23:fc:3d:59:
         d2:48:97:cb:ec:4c:92:ff:9b:54:2a:77:84:1c:b7:21:4d:87:
         6e:ea:08:31:d9:44:f0:62:12:4c:59:d7:b5:f4:79:b6:af:38:
         b3:df:3a:96:a6:8b:f7:09:5c:77:9f:b2:8d:69:aa:62:14:63:
         ba:b7:f5:76:a9:49:71:d5:2f:ab:f2:42:aa:94:aa:4a:ff:d1:
         7e:df:b5:78:a7:17:93:a9:d8:ea:ba:a8:26:fc:28:e2:66:c9:
         1f:62:3c:0b:bd:b8:58:ae:93:a5:cf:09:aa:c4:1c:48:d6:34:
         4c:3d:21:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:54:01 2026 by rpki-client