Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
File:                     Mgs39ulwReOJhGEP-kfpaEqEZ30.mft (raw, json)
Hash identifier:          yw5d3Rh1isQF5FJic3F7W2jOBqfSqc4y5QhokRVrlSk=
Subject key identifier:   FF:6B:11:61:B1:9B:BF:87:FE:80:1A:5D:CA:A8:12:88:D6:DC:28:3C
Authority key identifier: 32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D
Certificate issuer:       /CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D
Certificate serial:       26A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
Manifest number:          268B
Signing time:             Mon 12 Oct 2026 15:43:00 +0000
Manifest this update:     Mon 12 Oct 2026 15:43:00 +0000
Manifest next update:     Mon 19 Oct 2026 15:43:00 +0000
Files and hashes:         1: Mgs39ulwReOJhGEP-kfpaEqEZ30.crl (hash: 8ogjv4pVxSukXJ2MSkHgq3EHYoJYyaeF/OFCh69o8gU=)
                          2: 08B3B40EB14311E58FF2C717C4F9AE02.roa (hash: 0+dhsLV0hEijLWmW5GRXfj6s2WTHqpeZ24Q4A7DWnzU=)
                          3: 34FC96E8CFE711EB93714D2FC4F9AE02.roa (hash: PwNqKcYZhajR/KdGGezpNZmD2Nl8G3s805wTHD5hc9A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl
                          rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 15:42:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9896 (0x26a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911918E, serialNumber=320B37F6E97045E38984610FFA47E9684A84677D
        Validity
            Not Before: Oct 12 15:43:00 2026 GMT
            Not After : Oct 19 15:43:00 2026 GMT
        Subject: CN=6acd0004-2980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a6:56:cd:4a:ae:22:ae:8f:d7:3a:33:bf:f7:
                    29:31:e6:18:4e:24:9c:ea:18:a9:90:63:a3:a6:41:
                    6c:8f:88:14:30:a0:8e:71:28:2b:98:38:ff:52:8b:
                    b4:cd:b0:60:4e:dd:64:02:9d:d0:3b:4a:be:65:f5:
                    64:8a:d8:31:14:ca:3e:b1:8f:34:6a:6e:13:2b:b0:
                    6c:c5:4e:df:01:d7:9b:cf:36:0c:4a:07:5f:ec:f4:
                    fb:04:a5:5a:ed:98:c2:ad:38:1d:2f:96:52:96:ed:
                    18:67:9a:8d:35:1e:ec:02:18:0d:b1:83:38:e7:c3:
                    af:76:6e:5c:a4:b2:f1:7c:07:d1:22:5e:46:66:55:
                    d0:8d:71:20:eb:da:20:c9:ee:f2:19:94:65:db:83:
                    87:4d:47:93:2c:f6:26:f2:62:82:65:18:e6:4c:2e:
                    cd:91:42:25:ce:10:dc:fa:8f:fb:a7:93:73:ba:21:
                    2b:70:37:c6:d1:d7:98:cc:ef:30:07:d6:49:d7:96:
                    70:f9:88:15:5a:40:ff:f1:5c:d2:33:5d:b4:34:5b:
                    c5:b5:92:9c:b6:f8:27:a8:07:27:82:fe:06:81:da:
                    00:77:f9:d5:da:e9:cd:6e:4c:e4:87:b9:d5:d2:7c:
                    21:d2:d9:77:97:73:11:84:cb:98:79:de:53:52:1d:
                    05:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6B:11:61:B1:9B:BF:87:FE:80:1A:5D:CA:A8:12:88:D6:DC:28:3C
            X509v3 Authority Key Identifier:
                keyid:32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:a1:a7:92:7a:0a:a1:51:3d:e7:d3:56:97:c7:fe:4d:e9:9e:
         9c:c5:21:de:05:25:38:b2:83:a4:55:e7:bb:21:c4:5e:8a:6f:
         dc:9e:1e:b5:5c:ee:a1:a3:8f:9c:e4:46:a1:68:cd:f4:38:46:
         4e:af:ef:32:61:9d:45:d2:5f:7e:19:fb:20:97:55:db:e2:50:
         61:90:80:58:6b:5a:1d:bf:3b:14:8d:e0:68:73:ba:0b:59:2c:
         af:fb:9e:ab:79:c3:7c:8f:f0:d8:c3:c5:6f:e6:3b:20:ce:a0:
         d0:d4:16:31:5e:e8:03:47:b3:0b:f9:86:af:4b:a4:62:87:97:
         ba:24:fc:39:97:64:75:a7:5b:ee:4b:bb:49:ae:60:73:5b:06:
         4e:fc:27:fd:f5:0e:8e:3a:fd:b6:b1:d6:0b:9a:b8:89:36:29:
         5f:e6:24:9e:a7:09:a0:e3:4c:eb:d8:81:3b:7b:44:93:a1:16:
         c3:36:f4:79:96:dc:fd:48:ea:16:34:07:f5:d6:82:41:ef:40:
         d0:a4:c2:01:a8:72:65:64:ec:9c:c3:a4:d1:15:60:67:bf:ba:
         28:21:c8:f5:0a:84:1c:f0:15:21:a7:57:b8:8a:8e:37:2f:4c:
         03:22:d5:14:9b:ea:fd:9a:88:23:b4:0f:ba:8a:ad:d9:fa:59:
         e9:4d:7d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:51:27 2026 by rpki-client