Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
File:                     rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft (raw, json)
Hash identifier:          MAECUYNrHk8UVh3PSwAG5fSkv7tDVnqOzCMmYbFHu4o=
Subject key identifier:   E0:50:15:BB:70:10:90:C1:3A:20:6D:C6:EC:71:EB:52:42:DC:A4:39
Authority key identifier: AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04
Certificate issuer:       /CN=A911A69A/serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204
Certificate serial:       01A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
Manifest number:          019C
Signing time:             Sun 11 Oct 2026 04:52:16 +0000
Manifest this update:     Sun 11 Oct 2026 04:52:15 +0000
Manifest next update:     Sun 18 Oct 2026 04:52:15 +0000
Files and hashes:         1: rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl (hash: UuzjYD+8GA2id0Uj4UZpvnKHdJ1EzGUCp/GFUrk0hgM=)
                          2: 39E76DD0589311EF88BF4665C4F9AE02.roa (hash: uV62YvsKnuEUdWquqH2JLcNuEUU3algiTlAGdgEQfJg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl
                          rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 04:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A69A, serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204
        Validity
            Not Before: Oct 11 04:52:15 2026 GMT
            Not After : Oct 18 04:52:15 2026 GMT
        Subject: CN=6acb15ff-9d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bc:25:00:69:ca:97:81:69:1c:db:58:ed:c4:
                    a4:90:b1:03:8b:fc:e6:90:b2:7f:31:e5:14:0b:50:
                    70:63:b4:9b:5b:f1:ee:84:d3:74:e2:06:c7:d7:62:
                    05:62:4a:1f:84:13:26:b4:97:39:20:d1:48:a7:51:
                    b5:e8:e2:66:f9:10:c8:4b:e7:82:6f:f1:ff:34:6b:
                    04:46:40:c4:3a:f2:43:c8:97:ed:7f:2c:97:fe:78:
                    69:e6:ed:36:af:19:6d:a5:ed:83:7f:47:6f:da:48:
                    9c:cb:2f:e7:5a:3c:b2:23:30:e2:34:d9:b3:98:3f:
                    b7:07:3b:78:40:7e:b4:80:d3:6c:3f:97:8e:4c:9e:
                    84:a6:54:cb:8d:36:f7:ac:56:12:d6:5a:28:79:78:
                    ca:82:63:13:78:8f:f2:fb:82:96:ab:00:4e:5e:dc:
                    ec:9d:19:33:b5:9d:f4:5a:bf:d7:60:49:c0:bb:84:
                    ca:d5:25:8d:cb:6c:83:e6:d5:56:49:c0:b5:2d:a5:
                    d7:e6:fe:76:d7:95:7f:4a:63:ac:fa:9d:b4:71:92:
                    dd:dc:2a:7d:e4:f5:65:89:a5:19:05:45:02:13:32:
                    c3:59:7a:03:f5:35:6a:f5:b3:f6:08:b4:06:5f:7c:
                    74:a2:44:d9:33:d6:2e:2d:c4:e8:fa:a0:e5:ad:7c:
                    78:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:50:15:BB:70:10:90:C1:3A:20:6D:C6:EC:71:EB:52:42:DC:A4:39
            X509v3 Authority Key Identifier:
                keyid:AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:00:35:97:dc:77:50:b7:b7:fc:f4:0c:90:ce:8e:77:0d:f1:
         7c:c9:e9:03:69:91:61:e8:63:96:65:1b:34:b9:e4:06:06:1c:
         8c:45:ed:ea:dc:15:36:63:aa:bf:de:07:31:d9:ad:66:e1:27:
         30:62:cf:8a:28:30:c8:5f:03:a6:d3:64:3f:b7:a0:b0:22:39:
         65:b9:fc:6b:5c:91:b8:2e:8a:43:ef:34:7e:82:b7:dc:d6:74:
         79:f4:fa:10:5b:a7:dd:b6:c3:71:f1:b6:82:8a:51:cb:d8:3a:
         66:6f:43:02:86:53:ce:9a:32:f3:51:a8:7d:f2:f9:92:ec:61:
         7b:4d:da:94:1c:49:10:3b:ea:94:89:c0:df:91:83:dd:cd:83:
         94:c3:a5:82:b1:9d:b2:90:fc:0e:6b:7e:ea:e4:26:00:5d:3b:
         cf:c4:b3:ed:3d:d2:12:ef:ae:c7:fe:58:4e:aa:5b:8a:ba:7c:
         25:12:dc:05:23:80:ac:e2:4b:54:d1:9c:be:bc:28:e4:2e:4e:
         91:58:fe:33:c4:75:ce:03:00:0c:85:d8:6e:ff:2d:24:84:0c:
         94:90:37:63:7a:5e:bf:a7:ac:45:6a:28:dd:d5:5b:e1:25:a9:
         c1:a1:30:a9:ea:d2:6d:17:af:59:e2:99:3b:b6:87:ee:a8:bf:
         12:08:59:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:58:13 2026 by rpki-client