Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft
File:                     S18cktxo2UEqrDB3GD-jbdA9zRU.mft (raw, json)
Hash identifier:          R7P0kSX3udnbycOu2Q6a9yEmdGphQrFlByL4eE98Wkc=
Subject key identifier:   D8:BC:EC:BF:A4:EC:A2:B8:FA:DF:D7:55:0B:28:65:4B:5E:93:F8:B6
Authority key identifier: 4B:5F:1C:92:DC:68:D9:41:2A:AC:30:77:18:3F:A3:6D:D0:3D:CD:15
Certificate issuer:       /CN=A914D29B/serialNumber=4B5F1C92DC68D9412AAC3077183FA36DD03DCD15
Certificate serial:       5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft
Manifest number:          4F
Signing time:             Fri 25 Sep 2026 08:37:05 +0000
Manifest this update:     Fri 25 Sep 2026 08:37:05 +0000
Manifest next update:     Fri 02 Oct 2026 08:37:05 +0000
Files and hashes:         1: S18cktxo2UEqrDB3GD-jbdA9zRU.crl (hash: OiZzF0CmmaiK7I/pIk8cEFR7HFlAOCbg5s9c4ubz8Ik=)
                          2: D10BC2D6AC0D11F1A921711A7011F970.roa (hash: 9LbT55FCc16CNUy2s7bNTZP1oBsFf0RchQv0XwtmSYA=)
                          3: 56A844E8AC1611F1AA5AD2963211F970.roa (hash: v980uvWuLQy9lKYhi9+4L/P7xT5fQQvKPW40O/eoMus=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.crl
                          rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D29B, serialNumber=4B5F1C92DC68D9412AAC3077183FA36DD03DCD15
        Validity
            Not Before: Sep 25 08:37:05 2026 GMT
            Not After : Oct  2 08:37:05 2026 GMT
        Subject: CN=6ab632b1-15c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7c:af:75:ee:6a:b5:04:8a:f6:8e:a9:ef:48:
                    84:90:37:72:f4:cc:ba:4a:22:ff:64:97:58:88:0c:
                    a3:6f:5c:d6:a6:0c:b8:6c:2d:b8:dc:9e:66:08:fb:
                    46:2c:ab:5d:ac:09:13:be:3a:f1:58:c6:4a:ea:32:
                    05:ca:09:a7:e2:20:d2:02:99:5d:b8:65:fc:18:7f:
                    af:87:0c:0f:4f:c5:70:a1:95:cd:a4:e2:ba:00:4e:
                    87:41:4a:06:5f:02:39:87:57:e9:00:cf:e1:d5:a4:
                    cc:59:c1:d6:23:f3:89:50:b6:d7:71:ae:68:1f:a9:
                    34:a6:8a:18:fb:1f:64:fc:4e:81:12:3a:ae:dc:bb:
                    58:ba:0c:8e:ce:23:14:3f:4c:61:c3:71:d0:1d:3c:
                    20:23:61:a8:ff:93:b8:62:a9:ea:2c:0d:70:5f:7b:
                    97:33:21:ce:cd:18:2a:a8:d6:4a:c2:03:d0:65:2b:
                    1b:de:23:87:80:43:d5:03:d0:4b:00:39:da:86:21:
                    09:a8:38:bb:4d:66:fc:07:05:dd:b4:0d:c5:e2:c4:
                    6e:1a:56:60:20:05:5d:5e:81:c6:cc:f8:b1:9e:64:
                    d9:65:2e:7c:e5:fd:fd:4d:5b:2a:69:7c:83:5b:24:
                    cd:72:e9:84:91:12:f0:9d:8f:94:77:55:c4:e4:ea:
                    af:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:BC:EC:BF:A4:EC:A2:B8:FA:DF:D7:55:0B:28:65:4B:5E:93:F8:B6
            X509v3 Authority Key Identifier:
                keyid:4B:5F:1C:92:DC:68:D9:41:2A:AC:30:77:18:3F:A3:6D:D0:3D:CD:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:22:e6:91:0d:8f:9a:6b:f7:c0:65:3c:1f:a1:d8:8b:91:34:
         80:4c:36:ae:01:e9:86:46:f2:aa:e2:65:e9:8e:c8:74:d4:7b:
         1d:f8:7b:84:42:09:72:c8:31:04:0a:e1:ec:c7:4e:19:5a:40:
         8a:48:58:1c:83:c8:78:9a:5b:88:ea:49:36:5e:15:84:16:e4:
         a0:63:11:da:7c:8d:8b:79:54:c3:eb:6a:be:3f:6a:70:33:65:
         83:96:53:c5:be:80:9b:89:cf:48:2f:ec:c1:97:d6:30:3f:63:
         3b:2e:e4:95:54:b9:98:c9:cb:ae:6d:58:f8:71:84:9e:8e:c7:
         0f:fe:b5:08:65:a7:53:52:45:8f:23:19:9f:b2:ed:9f:36:06:
         25:70:83:b3:0d:e6:f5:a9:6f:66:31:4f:f0:0c:e3:d6:24:6a:
         05:69:64:1b:ba:74:a6:d8:5d:65:ba:ec:34:64:2d:07:38:7d:
         14:02:8e:50:b9:96:6d:18:36:e8:60:89:00:a2:2f:04:7d:4a:
         fc:f8:b4:71:08:36:84:d7:bc:a6:57:f2:f0:91:c6:d4:d1:ac:
         9d:bb:37:b4:84:2d:33:4e:55:25:59:aa:87:11:6f:bb:6a:de:
         d6:ec:f4:23:05:3c:0e:32:ae:ec:9b:5b:62:f7:74:1c:f1:11:
         7f:a3:be:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:19:07 2026 by rpki-client