Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
File:                     Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json)
Hash identifier:          MNDimmTpHdWdUAPSvmltUG2eXlHLSr/5VdEc6oKbqIQ=
Subject key identifier:   26:65:9A:11:0B:EC:A2:C9:D6:DC:0B:0B:DA:8D:88:E5:54:C1:FB:F6
Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
Certificate issuer:       /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
Certificate serial:       2497
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
Manifest number:          244B
Signing time:             Fri 02 Oct 2026 15:53:39 +0000
Manifest this update:     Fri 02 Oct 2026 15:53:39 +0000
Manifest next update:     Fri 09 Oct 2026 15:53:39 +0000
Files and hashes:         1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: m0naJ6X+Gyoxmcv2+tPZ3pH2InAxlzlpOVJMXFKooE8=)
                          2: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: UQDttalCUYq3AyfTqyjYMyUyA3NfkM8GwwrJ36xb3vI=)
                          3: 4800F752477911F19E56FD3F95833773.roa (hash: qez/cx6tuHV5gAaxhcMUR0lT08Ll3czUeqFReo4sSpc=)
                          4: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: 9l01otiluOrZS9FX+cJseDWQEh8+cC5vRH5bfx/V2fY=)
                          5: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: uzYIIDH31TvwzWkSil5gSYUWeo40ZQiZC+P2iShFe5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl
                          rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 15:53:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9367 (0x2497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
        Validity
            Not Before: Oct  2 15:53:39 2026 GMT
            Not After : Oct  9 15:53:39 2026 GMT
        Subject: CN=6abfd383-a359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f3:f3:14:0d:5c:1f:f1:bd:4c:17:a5:cc:4c:
                    32:1e:05:fe:5d:51:ae:05:b8:08:29:cb:1b:1e:7c:
                    9d:c3:53:14:b5:16:bf:4a:00:96:27:40:72:90:88:
                    e9:b6:72:d5:7e:d3:2b:bb:b8:bb:96:3d:ef:a7:47:
                    b3:56:e9:0e:7b:e6:18:39:ed:af:85:9c:9b:7d:79:
                    96:0a:4e:bd:c3:b4:6d:05:6a:28:26:ed:d0:b0:f7:
                    90:c6:25:b6:55:1f:a9:32:07:23:3a:b6:c1:c8:b4:
                    9f:37:44:84:97:e5:16:ed:f1:04:e7:e4:0d:b4:0c:
                    f4:90:56:82:c2:3e:12:30:91:67:45:1a:d9:49:78:
                    0a:80:f0:be:ba:b2:5c:46:a6:48:4f:24:a0:9e:79:
                    d7:df:1b:4b:7e:f3:18:e2:2a:7c:62:d8:83:6e:ee:
                    75:98:0e:13:e6:14:63:77:1e:11:45:fb:19:b9:7d:
                    fb:f0:e6:64:ce:b0:7b:34:e5:7e:20:92:30:2b:d5:
                    58:f2:27:5e:16:72:82:41:00:53:30:d0:62:2d:60:
                    ca:ac:e3:93:55:1c:24:2f:64:45:ea:c8:ba:50:a5:
                    22:97:ba:07:59:50:a2:55:66:d8:25:9c:d7:4d:b6:
                    39:5f:af:8c:de:8c:4c:90:2b:c0:f9:78:ff:62:da:
                    e7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:65:9A:11:0B:EC:A2:C9:D6:DC:0B:0B:DA:8D:88:E5:54:C1:FB:F6
            X509v3 Authority Key Identifier:
                keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:5d:b7:10:da:f4:14:c5:0e:b2:7f:57:57:5f:ed:17:c8:d4:
         3e:f8:33:8d:d9:9d:91:b3:ed:8f:4c:70:60:3b:e1:66:49:17:
         99:a2:88:26:5f:c6:dc:c7:36:5d:e1:11:c2:a2:9a:0b:86:be:
         51:fe:54:cc:81:0b:1f:4e:36:da:e4:5f:08:1a:43:3c:b0:75:
         ba:8a:f6:0d:d2:fc:11:fd:a5:fd:aa:b1:9b:91:81:40:ca:1d:
         4a:99:d3:b0:78:f1:e3:e2:50:5f:d6:6b:10:56:68:47:3c:c6:
         dd:c8:b8:17:d8:ca:f9:89:cf:83:14:fb:d3:1c:37:fe:4a:2e:
         06:12:e6:c8:30:19:5f:3a:9e:fa:06:76:17:59:89:dc:66:42:
         e3:e6:0c:32:d2:11:c4:a5:5d:9d:e1:25:4e:ca:72:e0:2e:99:
         95:96:35:01:33:d1:1a:a1:1c:58:17:01:56:15:d5:dd:dc:af:
         f8:75:2b:53:7d:f3:6c:f6:4a:d6:84:b4:9f:ca:1a:d2:61:83:
         d9:c3:36:b9:a0:8c:4d:ae:81:09:7b:4f:3f:07:7d:7a:b8:44:
         a1:7d:6f:86:f0:5b:a6:ed:43:c1:0e:23:5f:a7:b6:bd:4c:b0:
         a0:b2:07:6d:ae:28:41:4e:bc:f4:af:e1:cf:0f:22:20:8b:0a:
         fc:d2:d5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:12:15 2026 by rpki-client