Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
File:                     R1JQ5qBVR49Kwerx7TLVZyw80bM.mft (raw, json)
Hash identifier:          lWDNZr7N+86ry3Wkn7HtR0/rUn4hR/hMGsHXuhspq8U=
Subject key identifier:   76:22:AB:2F:1F:6B:D1:7A:37:1F:82:F7:54:D2:88:98:FD:63:5A:A7
Authority key identifier: 47:52:50:E6:A0:55:47:8F:4A:C1:EA:F1:ED:32:D5:67:2C:3C:D1:B3
Certificate issuer:       /CN=A9140EE2/serialNumber=475250E6A055478F4AC1EAF1ED32D5672C3CD1B3
Certificate serial:       0E24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
Manifest number:          0E10
Signing time:             Fri 02 Oct 2026 18:02:41 +0000
Manifest this update:     Fri 02 Oct 2026 18:02:41 +0000
Manifest next update:     Fri 09 Oct 2026 18:02:41 +0000
Files and hashes:         1: R1JQ5qBVR49Kwerx7TLVZyw80bM.crl (hash: vAWz8ChHgu7I+FKmNeyn7t0sTyM+vQ9H1sPfX2CI4mc=)
                          2: B523DAE68C9211EABC682867C4F9AE02.roa (hash: DzBm/4YOy2Ud9WznE6B9DI03ozT3npO/B3S5GNicR1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.crl
                          rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 18:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3620 (0xe24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140EE2, serialNumber=475250E6A055478F4AC1EAF1ED32D5672C3CD1B3
        Validity
            Not Before: Oct  2 18:02:41 2026 GMT
            Not After : Oct  9 18:02:41 2026 GMT
        Subject: CN=6abff1c1-a81d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f7:b8:fa:dc:47:7d:11:e0:17:ad:29:f0:7f:
                    1e:b1:85:4d:18:b5:ce:b9:ff:b9:64:9f:5a:95:e2:
                    4b:07:e8:32:75:91:64:06:78:07:76:9e:27:4e:62:
                    c6:ed:78:6f:fa:28:7b:ff:58:d0:c9:33:48:bd:83:
                    68:b4:ee:83:38:46:fa:56:d5:dc:05:76:07:78:af:
                    ba:c3:29:03:e8:15:f3:b7:df:c5:96:9f:80:f1:26:
                    7f:32:1c:f0:d8:31:80:da:4e:3f:43:27:5a:e9:79:
                    ae:a8:3d:e6:c1:70:19:a6:9c:b5:ba:0d:85:5b:53:
                    9a:3b:54:9b:27:c3:21:92:09:09:99:6c:11:69:17:
                    53:fd:9b:fb:52:13:95:10:f1:d3:94:8f:8a:5f:a6:
                    3d:f0:b7:69:f7:74:2a:c4:e7:44:0a:7e:77:e6:27:
                    20:6a:02:6f:25:0d:72:11:f8:e7:f3:2f:09:8a:6a:
                    f8:fb:3c:3e:ac:95:4d:fb:e8:6c:77:57:09:e3:65:
                    d3:da:e7:8b:70:3b:24:37:b9:18:31:7b:16:cc:26:
                    31:97:e7:1e:35:20:fa:fa:4c:56:2a:7b:25:18:34:
                    62:b3:e1:c4:2e:eb:21:48:4f:0c:3d:08:0d:27:1c:
                    28:86:ff:8b:ca:d6:a5:7a:51:ce:b4:00:29:73:71:
                    32:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:22:AB:2F:1F:6B:D1:7A:37:1F:82:F7:54:D2:88:98:FD:63:5A:A7
            X509v3 Authority Key Identifier:
                keyid:47:52:50:E6:A0:55:47:8F:4A:C1:EA:F1:ED:32:D5:67:2C:3C:D1:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c0:a4:c6:f1:6a:7f:d7:c9:62:94:b5:65:49:41:d4:f3:21:
         23:2b:7a:45:a2:b5:4a:b7:ae:9d:84:a9:06:fc:1e:d2:e3:19:
         e3:54:39:cb:3f:79:a3:4d:60:f1:eb:38:67:a0:13:10:ce:2a:
         05:82:3d:60:88:e8:f2:2b:d6:86:5a:35:86:00:c3:0a:2c:56:
         b3:65:7b:45:dc:c9:a9:c6:19:61:f3:2c:d8:87:5f:a5:7e:0f:
         cb:4a:7d:a1:76:61:cc:d1:03:c8:98:11:a8:d8:fc:10:5f:16:
         41:92:cb:71:ae:6d:d9:f5:33:1f:13:c0:ce:da:e6:eb:12:9f:
         72:aa:cf:1c:a2:7a:30:78:63:9d:a3:e0:21:5d:46:e4:2c:08:
         d4:ff:d5:54:da:91:03:e6:e2:59:ea:25:1d:69:06:4c:85:79:
         c6:9a:71:ba:04:53:7d:1f:72:53:e3:cb:88:47:73:29:7e:aa:
         ad:27:20:0d:0f:46:03:44:39:31:f9:14:ad:ea:fc:74:ec:e5:
         7f:cb:18:93:af:83:68:85:3e:e3:b5:77:7b:ae:40:b3:31:1a:
         09:28:23:85:cb:e2:a7:35:ae:f1:59:e9:9d:16:07:92:a8:46:
         27:b3:55:74:4c:c9:59:22:1d:c4:c6:9c:02:1b:c0:8b:9b:54:
         f4:53:93:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:18:34 2026 by rpki-client