Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft
File:                     05oQ5hqMqVBO2xVIaTazd0OiTc4.mft (raw, json)
Hash identifier:          znY0UZwebvrH8AiwuB2av5lvG5Mb4ZcGTZgS6qRjpYE=
Subject key identifier:   FF:BC:3B:5F:D4:A8:07:ED:36:74:26:26:D3:F6:E7:9B:82:0A:AC:6E
Authority key identifier: D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE
Certificate issuer:       /CN=A9110BE2/serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE
Certificate serial:       0259
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft
Manifest number:          024C
Signing time:             Sun 11 Oct 2026 02:57:05 +0000
Manifest this update:     Sun 11 Oct 2026 02:57:05 +0000
Manifest next update:     Sun 18 Oct 2026 02:57:05 +0000
Files and hashes:         1: 05oQ5hqMqVBO2xVIaTazd0OiTc4.crl (hash: XQrs36iBGtQbVw7NYlasOTqBRCAMmCQwbErg1WHWL48=)
                          2: 410453A46E7011F183E89C7A8DA30FBC.roa (hash: xsNDfbSjnDIufNZbsKl1QXXaYA1qoH/om+9lo3kJdSQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl
                          rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 02:57:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110BE2, serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE
        Validity
            Not Before: Oct 11 02:57:05 2026 GMT
            Not After : Oct 18 02:57:05 2026 GMT
        Subject: CN=6acafb01-b58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c8:91:a5:c8:d0:61:e4:fe:fe:49:0c:3e:b9:
                    5d:05:d6:c3:bd:ac:3f:bc:bf:aa:d9:e5:f6:a1:cc:
                    fb:9c:02:cc:42:83:b9:5c:37:a8:e2:2d:8e:5a:18:
                    47:23:ab:77:cb:72:11:e8:9b:53:37:e9:22:04:a8:
                    ae:b5:54:25:07:49:50:09:a1:4d:a7:9b:76:d1:30:
                    e6:10:37:0f:81:0d:ca:4c:ed:c0:af:e0:42:96:63:
                    bb:9d:f6:b1:5e:7c:31:bf:a9:9f:80:85:ef:be:78:
                    d2:05:d2:bd:4a:d2:f2:a8:90:dd:71:62:17:b6:0e:
                    89:80:4b:51:76:5d:73:ea:6c:13:7c:4a:50:a4:be:
                    9e:66:8f:38:20:cb:d1:23:f8:6e:36:da:2c:c3:6d:
                    fe:39:3c:73:d4:65:ac:0a:6d:0b:64:96:c7:fd:23:
                    1f:8b:74:2a:d1:e3:c5:93:d2:d6:0d:36:1c:88:ca:
                    66:04:88:2b:eb:b4:f4:7e:38:39:79:11:4c:4f:63:
                    ca:7a:1a:1e:f6:71:2a:50:a0:ee:7c:f5:d8:3d:98:
                    00:39:1f:dd:a5:bf:f8:04:14:14:67:de:4b:98:77:
                    4e:d5:aa:ea:df:62:48:0a:7b:86:f4:95:3d:f3:9e:
                    87:a2:35:fe:2c:98:1c:7b:c9:f1:75:9b:98:f1:69:
                    26:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BC:3B:5F:D4:A8:07:ED:36:74:26:26:D3:F6:E7:9B:82:0A:AC:6E
            X509v3 Authority Key Identifier:
                keyid:D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:af:0e:e8:c1:ff:e0:0e:28:82:4b:f2:7b:c5:f6:aa:19:03:
         52:9e:b4:80:d2:d3:47:4d:5a:03:20:ee:06:a4:27:9c:59:53:
         d8:10:7d:65:5f:16:e9:d1:43:1b:a4:fc:27:a1:9d:b4:53:9c:
         c6:36:11:c1:55:27:48:ff:11:e2:2a:73:d4:d0:84:82:49:1b:
         9f:17:bc:a9:d4:d0:9d:64:55:be:26:6c:64:00:c8:7e:a5:19:
         56:e8:f5:7e:38:b1:f1:8b:bf:d1:ff:ed:0c:72:3d:f6:50:71:
         a3:99:07:03:e6:f0:2e:18:78:68:7a:e8:9a:37:82:ef:1d:a1:
         f4:f8:d4:79:dc:ce:25:56:ff:08:4c:8d:41:ec:a0:1b:c0:fb:
         fd:5a:ab:d4:b4:7b:a7:a1:03:25:ea:61:91:24:f5:22:76:ae:
         03:58:e2:a8:60:86:0d:cb:b9:80:03:b1:3e:a8:86:47:02:9b:
         59:b7:d1:8a:8d:16:f3:10:4b:0c:23:ed:fc:eb:cf:16:6d:ae:
         50:1b:68:f3:95:6b:ee:26:ff:6e:d9:7d:7c:33:90:9a:51:db:
         8a:89:73:1c:29:fb:f5:51:16:92:52:9e:8b:c5:54:ec:6f:aa:
         d9:4e:2c:3a:7d:c4:b1:2c:91:a2:84:76:48:03:f5:18:37:55:
         b5:38:91:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:51:41 2026 by rpki-client