Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft
File:                     -tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft (raw, json)
Hash identifier:          hpx+ImKzTRwjQJm2sGfl/ShFf9N+evy3XT2AimFw+M8=
Subject key identifier:   07:F3:8E:D6:A0:2C:86:F2:A3:7B:62:0F:60:D4:4C:12:19:D9:83:C7
Authority key identifier: FA:D4:29:9C:B2:05:AA:3D:DD:C4:90:A8:60:25:BA:5C:6C:1E:E0:E9
Certificate issuer:       /CN=A915E061/serialNumber=FAD4299CB205AA3DDDC490A86025BA5C6C1EE0E9
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft
Manifest number:          74
Signing time:             Sun 11 Oct 2026 08:27:27 +0000
Manifest this update:     Sun 11 Oct 2026 08:27:26 +0000
Manifest next update:     Sun 18 Oct 2026 08:27:26 +0000
Files and hashes:         1: -tQpnLIFqj3dxJCoYCW6XGwe4Ok.crl (hash: wlexKAUMTjrFrpz1UpGEpOy/GNtcspCwX1RLC2I586k=)
                          2: CE992CA0138D11F198EDAC703A3D8C67.roa (hash: hnj4b5BrR1oDY8K6unPrq2mmpWra5ZUyWl2C0okWTrc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.crl
                          rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 08:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E061, serialNumber=FAD4299CB205AA3DDDC490A86025BA5C6C1EE0E9
        Validity
            Not Before: Oct 11 08:27:26 2026 GMT
            Not After : Oct 18 08:27:26 2026 GMT
        Subject: CN=6acb486f-71b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ac:7a:b8:1a:62:52:3b:74:51:93:89:c3:a5:
                    37:c7:74:c9:3e:dc:2c:6e:97:6e:71:f0:f7:b2:fe:
                    f3:d0:88:27:18:ff:17:b5:c4:7a:59:70:d8:18:fd:
                    ed:05:74:fb:58:7d:b9:d6:4d:b9:ab:04:2f:6b:5b:
                    62:63:8c:bc:16:a1:8f:13:51:90:9c:bc:a4:90:80:
                    84:ca:35:1d:ee:05:f0:9f:35:61:1b:6a:bf:13:91:
                    79:24:65:39:56:d3:f0:e1:23:e8:37:4f:43:88:85:
                    99:e3:2a:08:aa:e2:90:2e:15:a0:10:a1:fb:36:0c:
                    18:f1:6b:d5:02:1d:64:88:32:a6:c4:76:5f:e5:8c:
                    34:d7:9c:ea:7d:d8:66:b5:2c:f7:a6:b1:e3:ef:fa:
                    2e:50:a6:36:9c:f5:7f:1d:38:6a:e7:a5:1f:e0:bc:
                    38:04:61:36:3f:b1:f8:3d:5f:50:9c:b8:be:5d:c7:
                    2d:f3:4e:5e:c1:7a:51:74:3f:92:71:29:28:68:5a:
                    07:53:25:d6:a0:65:82:4a:69:94:0a:07:1d:22:22:
                    15:f9:a8:c9:f2:c0:55:66:e8:c6:d4:8b:36:d4:8d:
                    25:16:a6:01:dc:ed:3f:b5:b6:47:1d:f2:01:31:3c:
                    cd:e8:3e:d2:42:74:86:4a:d8:f0:42:7f:df:4b:f9:
                    01:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F3:8E:D6:A0:2C:86:F2:A3:7B:62:0F:60:D4:4C:12:19:D9:83:C7
            X509v3 Authority Key Identifier:
                keyid:FA:D4:29:9C:B2:05:AA:3D:DD:C4:90:A8:60:25:BA:5C:6C:1E:E0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:4c:39:70:73:25:af:89:35:4d:c2:fc:d4:81:36:34:be:0a:
         e3:68:16:ca:ff:25:60:61:2a:20:83:80:58:c3:0f:77:67:8d:
         39:9b:c9:a5:80:fa:01:73:2f:c8:71:9d:e4:b3:6c:e8:d3:9a:
         ee:8d:b6:6a:e9:66:6a:c3:96:63:93:b6:b9:9f:1c:fb:28:db:
         4f:03:a1:49:ba:da:2e:a2:8b:85:3a:1b:49:d0:8e:ac:6c:e7:
         5c:cc:d4:b3:2f:aa:a0:96:fc:4c:84:8d:a7:97:df:95:12:9b:
         5d:59:84:97:4b:8c:06:a2:3e:13:65:fb:fb:94:bb:27:f0:0a:
         f4:98:e8:74:ed:70:19:e1:65:1f:d7:10:e8:74:ee:a3:89:c3:
         ae:dc:c1:0c:fd:f7:08:0b:7d:ba:b5:91:ec:2c:69:9b:b8:4c:
         10:cb:a8:36:f0:86:89:32:61:6c:8c:f6:ad:26:04:2c:11:5e:
         4a:b6:94:7e:ff:7e:3d:97:51:09:2f:dd:60:85:72:86:72:92:
         df:23:71:2c:3b:80:0e:cc:76:b7:28:5d:52:bb:34:59:53:0f:
         9c:56:7e:15:4d:cb:80:c3:86:a3:51:b4:ec:18:1b:ce:bd:61:
         86:78:a5:f1:0f:81:34:55:5d:ec:22:66:17:3e:fd:15:1f:8a:
         d7:3f:8e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:26:19 2026 by rpki-client