Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
File:                     MviQDThWvkOnLWx_k-kEtbg8w00.mft (raw, json)
Hash identifier:          /4iZGKS88Ciej8heu/Qvr9yrA+QSmB5AJ75oa2cbwvA=
Subject key identifier:   3E:C4:07:04:79:B4:67:9C:AA:09:17:10:25:07:48:F4:C8:30:80:0B
Authority key identifier: 32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D
Certificate issuer:       /CN=A9199371/serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D
Certificate serial:       05A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
Manifest number:          059B
Signing time:             Mon 12 Oct 2026 23:21:46 +0000
Manifest this update:     Mon 12 Oct 2026 23:21:45 +0000
Manifest next update:     Mon 19 Oct 2026 23:21:45 +0000
Files and hashes:         1: MviQDThWvkOnLWx_k-kEtbg8w00.crl (hash: Rgae6kh7wgIZRkLLU6DSpjY1yqVo4UqcUY05JItJmro=)
                          2: 5FC6CEFC38BF11EC9BA51E52C4F9AE02.roa (hash: 02njxqH2L4wOnvQejnJTMQG2JPDgzeMC5zu+OD6du44=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl
                          rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 23:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1443 (0x5a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199371, serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D
        Validity
            Not Before: Oct 12 23:21:45 2026 GMT
            Not After : Oct 19 23:21:45 2026 GMT
        Subject: CN=6acd6b89-edaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b8:9f:c2:03:13:ee:4f:e6:bf:88:54:c0:93:
                    bf:9a:9e:16:66:78:ff:9b:c6:5b:85:aa:d9:79:79:
                    60:92:81:82:e8:2d:76:ed:20:7f:9f:75:43:44:7c:
                    22:86:fc:b2:82:b5:11:e4:41:75:aa:8a:c0:dc:df:
                    19:8e:ea:61:94:77:f4:41:cc:69:bc:5c:4d:00:63:
                    fa:4d:c8:05:37:3f:97:19:e9:2c:19:8b:61:55:9a:
                    08:79:6e:cc:18:0c:3e:c9:6c:c6:31:1b:01:83:27:
                    5b:cd:b8:14:fc:66:e4:e3:fc:d0:08:b3:7e:3e:da:
                    5c:e3:ea:3b:ff:dc:59:a3:2e:71:eb:dd:7f:eb:7a:
                    36:33:c0:fb:68:eb:40:35:a3:1a:42:a3:4e:9f:59:
                    ad:ba:03:95:38:a4:57:e6:78:ee:da:b2:e9:26:b4:
                    f5:46:8e:9d:19:55:ea:af:2c:67:ce:8d:eb:0b:00:
                    d7:85:2f:70:a6:49:ed:20:a9:3b:f0:8f:0c:47:9b:
                    01:56:43:75:af:02:e0:5e:43:61:d8:c5:00:da:a9:
                    71:1b:1e:26:1d:bb:0c:9e:e8:fe:9d:be:37:9f:34:
                    f4:16:db:1f:e0:95:42:9f:b8:fb:49:99:08:47:1c:
                    17:ea:14:db:6d:6a:58:4f:71:ff:57:88:d4:da:df:
                    02:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C4:07:04:79:B4:67:9C:AA:09:17:10:25:07:48:F4:C8:30:80:0B
            X509v3 Authority Key Identifier:
                keyid:32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:66:5e:84:27:6d:a6:95:56:d0:19:f0:44:cd:a9:11:9a:12:
         90:96:5d:30:00:37:9e:40:e4:de:3a:93:1a:36:ae:95:17:3e:
         e5:79:ea:a7:2f:70:c9:3c:81:26:35:ee:ab:b6:f7:b6:40:9e:
         5e:73:6d:33:3c:03:e7:f8:2f:64:eb:35:d7:65:cf:0c:89:3b:
         14:a2:91:25:24:79:91:1f:95:f5:96:9f:cf:91:cc:51:34:75:
         4c:d3:a3:d0:bf:b8:2a:28:c6:be:78:25:20:d4:44:a9:bc:16:
         66:7c:db:2d:29:be:3d:68:ec:c5:6e:ca:b0:fc:6d:b3:19:a8:
         27:72:bf:3d:a9:31:80:63:c4:96:af:87:7a:a6:b7:40:50:3c:
         3a:e3:c1:f3:86:a9:ef:62:b2:b4:47:43:ec:16:cb:a4:32:81:
         e1:f5:46:da:db:85:94:89:1d:9b:68:8d:e0:90:ee:42:fa:25:
         80:3a:b2:6d:62:a5:47:03:0d:a6:0e:b3:c8:db:5f:8a:37:25:
         e8:c2:0d:ae:75:fc:83:19:e2:1d:b8:bb:27:ec:f7:b0:91:e4:
         29:21:56:94:cc:44:c1:b4:f6:38:5a:89:f6:31:a8:28:dc:5d:
         66:3d:08:4a:98:ec:31:e2:e7:a6:ed:66:ce:48:43:92:d5:99:
         53:21:00:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:32:59 2026 by rpki-client