Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft
File:                     SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft (raw, json)
Hash identifier:          8dC2na4+9X8M5j+cFG1RlEVV24tRQDvd/t7NxNUHSds=
Subject key identifier:   EB:EC:B6:DC:46:C8:90:F5:A2:B6:04:8B:6C:3A:97:21:DF:9F:89:02
Authority key identifier: 48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41
Certificate issuer:       /CN=A9136BEA/serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft
Manifest number:          69
Signing time:             Sun 11 Oct 2026 08:38:54 +0000
Manifest this update:     Sun 11 Oct 2026 08:38:53 +0000
Manifest next update:     Sun 18 Oct 2026 08:38:53 +0000
Files and hashes:         1: SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl (hash: JVD308cJ/cXt8hm+ovp9k/2edW80DeGKA6n0tJdcqPk=)
                          2: 870077D67E9A11F1ACB132C361A30FBC.roa (hash: j/Veg91WVOxBOE2x+CFx84+oTH0wTF8HWi+UAwsfAcw=)
                          3: E86962E47E9A11F1BA87E1CE61A30FBC.roa (hash: r053k+9BngwOs8liZ7NrLuZJcmmTygGFd/pGOUQXUUY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl
                          rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 02:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136BEA, serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341
        Validity
            Not Before: Oct 11 08:38:53 2026 GMT
            Not After : Oct 18 08:38:53 2026 GMT
        Subject: CN=6acb4b1d-c998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f0:0a:97:17:5a:9b:b2:8f:be:f4:8f:c0:d0:
                    1c:86:12:6b:1a:e5:db:84:1c:b1:09:7b:3f:f7:98:
                    11:03:53:c7:1b:1d:42:f2:8d:f4:5e:0e:7e:89:eb:
                    9b:32:1c:5f:0b:83:20:89:ea:0b:4c:c7:6e:2f:e0:
                    6e:f2:6d:1e:dd:cc:35:c7:cd:05:1b:26:eb:37:7a:
                    3c:74:c6:bb:21:52:4a:01:85:0f:41:c4:1b:9b:49:
                    11:77:92:bc:59:87:82:f4:c3:45:cb:33:2f:03:fc:
                    db:3f:f1:5b:51:d8:77:f3:cd:f1:10:e5:09:5d:89:
                    81:90:aa:45:c8:65:0f:75:13:ef:f9:67:d0:69:b1:
                    f2:8b:62:35:a2:97:3f:0d:62:d2:74:40:6f:15:fa:
                    9a:b8:40:41:84:c0:e8:5e:86:44:34:68:3b:8d:49:
                    73:b2:23:47:ec:57:00:2d:1d:58:77:ff:6a:8e:9b:
                    1f:90:5f:bf:91:63:a6:ae:95:0c:c3:14:be:d4:9e:
                    0a:b5:6c:58:f8:28:2f:70:69:d3:d4:90:fd:bb:e1:
                    42:db:ab:fb:31:8f:87:ac:9b:1f:e4:98:83:9d:08:
                    93:b0:39:3d:3b:3a:7f:72:63:e6:65:6a:72:ba:61:
                    bd:39:4c:b9:2f:c0:8c:64:68:d8:1a:52:3a:20:6f:
                    b9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EC:B6:DC:46:C8:90:F5:A2:B6:04:8B:6C:3A:97:21:DF:9F:89:02
            X509v3 Authority Key Identifier:
                keyid:48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:27:ea:e1:b0:23:b7:0a:1b:9f:3a:22:2c:85:8b:3e:0c:da:
         55:38:76:ab:66:dc:0c:20:c6:48:53:11:d9:2b:36:0d:61:1b:
         89:5b:ea:50:05:f8:71:c8:38:47:6b:7b:12:3f:5b:e5:74:66:
         f2:62:f1:3b:4a:af:9a:eb:89:fb:6c:39:cf:de:80:bc:5b:e2:
         de:46:48:c4:6c:7d:af:76:71:37:a2:d0:68:8c:cc:2d:50:c1:
         ff:96:a5:c8:13:71:ac:7d:ac:92:b6:c0:d2:40:c9:e3:2b:51:
         ae:2f:84:8c:09:74:21:e9:73:d7:43:0b:f6:a1:f9:87:01:f7:
         0a:57:b9:90:1d:1b:fb:81:0d:d6:e9:42:3d:81:0c:ce:5d:31:
         51:f2:a3:d5:84:15:fd:22:af:bc:16:a2:41:b4:ef:3b:16:52:
         40:1e:d6:7b:a5:12:87:18:80:17:97:72:99:dc:d7:df:25:6d:
         10:8c:8b:48:cd:99:39:ee:77:37:a7:9d:37:da:83:8a:2b:25:
         24:37:69:49:e9:49:63:04:4d:3c:a2:07:89:51:f6:52:ad:39:
         54:bd:c5:39:cc:53:2c:83:d7:23:ab:2b:f3:bc:06:f1:21:47:
         b3:16:10:ed:01:60:61:e7:97:96:d0:d2:c0:51:e5:48:fd:47:
         23:0b:37:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:33:03 2026 by rpki-client