Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
File:                     0qCHG82DdsEajwSaOYVa_NsYMGQ.mft (raw, json)
Hash identifier:          rqmhyB3PKuc45+bsasVxnyLGjwR5TgQPUm6NrXwOs6s=
Subject key identifier:   B4:24:9A:63:02:9A:6A:25:91:EB:75:6E:34:1D:A1:91:33:93:94:FA
Authority key identifier: D2:A0:87:1B:CD:83:76:C1:1A:8F:04:9A:39:85:5A:FC:DB:18:30:64
Certificate issuer:       /CN=A911CA82/serialNumber=D2A0871BCD8376C11A8F049A39855AFCDB183064
Certificate serial:       0726
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
Manifest number:          0709
Signing time:             Sat 26 Sep 2026 22:25:04 +0000
Manifest this update:     Sat 26 Sep 2026 22:25:04 +0000
Manifest next update:     Sat 03 Oct 2026 22:25:04 +0000
Files and hashes:         1: 0qCHG82DdsEajwSaOYVa_NsYMGQ.crl (hash: IQCGJ1atuhQGnhZd9Ww37OV0dVkiEO2R9P+MqV0vWD8=)
                          2: CB304C36307111EDB0CBD946C4F9AE02.roa (hash: ODIX3oDpfnNWOwtgKPini7l1bVtlb/9n+o+dXisnTbg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.crl
                          rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 22:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1830 (0x726)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA82, serialNumber=D2A0871BCD8376C11A8F049A39855AFCDB183064
        Validity
            Not Before: Sep 26 22:25:04 2026 GMT
            Not After : Oct  3 22:25:04 2026 GMT
        Subject: CN=6ab84640-4f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:cb:fe:e3:54:0b:18:17:21:8f:19:c5:d0:
                    5c:47:16:ae:ac:ae:ed:ba:32:8f:b0:06:3a:ec:08:
                    86:fe:83:63:4d:7d:3e:87:79:23:4d:40:fd:a6:bc:
                    58:34:19:3d:33:e0:82:ed:89:ad:47:93:33:a9:47:
                    99:5e:af:11:79:c9:0a:44:37:99:0b:65:45:3d:60:
                    8f:e7:60:6e:05:c9:b7:f4:29:5d:72:7a:17:63:7f:
                    20:84:41:99:bc:e7:cb:65:ad:8c:6b:b2:6d:71:78:
                    9d:f3:bd:78:cf:f4:a7:ed:96:e0:38:ed:05:c9:6f:
                    fc:5d:7e:e9:dc:e5:db:b1:23:9d:1c:ab:dc:5f:17:
                    49:76:08:80:27:1c:6a:18:a7:5a:ef:d8:4b:84:bf:
                    86:23:c6:bb:54:dc:50:b2:a7:98:f1:56:2c:db:07:
                    23:a2:71:9c:7a:54:04:40:96:9a:52:5a:f7:67:14:
                    38:a3:3f:0d:33:8b:4b:3f:8f:dc:8d:0f:64:12:1d:
                    d2:ca:fa:a2:12:9e:7e:a0:5e:84:38:02:01:1c:81:
                    bf:ae:c1:f2:fd:15:22:40:4a:a6:8a:a2:2d:f7:5d:
                    b4:7f:ad:51:46:c8:4b:5c:dc:2b:38:70:47:b5:d0:
                    22:7d:01:69:9e:2b:28:c0:36:73:01:a4:49:e4:2b:
                    46:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:24:9A:63:02:9A:6A:25:91:EB:75:6E:34:1D:A1:91:33:93:94:FA
            X509v3 Authority Key Identifier:
                keyid:D2:A0:87:1B:CD:83:76:C1:1A:8F:04:9A:39:85:5A:FC:DB:18:30:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:b7:bb:f3:30:13:16:ca:04:ab:c9:5c:c0:9f:e8:51:26:c4:
         66:8a:f2:97:7f:c1:4f:9b:af:0f:b9:27:4e:1d:13:d2:ae:d3:
         1a:f4:50:d1:ef:86:8f:d7:99:7e:b3:97:d0:a8:e8:f2:59:fc:
         42:81:50:50:aa:06:91:c5:1f:7f:57:a3:52:b8:cb:26:43:cf:
         5c:58:f8:91:82:88:ca:41:0e:b6:de:da:9c:b3:36:9a:09:12:
         98:b5:37:51:f0:43:1c:24:8e:a7:78:ed:f2:e0:11:f6:62:a8:
         7b:59:e8:2d:8b:40:c8:18:1b:49:00:79:69:56:0d:d2:0e:9f:
         91:a3:82:ea:29:ad:27:d4:0b:f2:1d:f7:8d:5c:6c:e4:df:83:
         7b:31:66:38:96:b0:15:21:da:44:92:64:bb:d6:67:70:65:5e:
         ad:63:60:48:95:0f:80:dd:a6:9c:89:0d:4d:3b:24:69:4a:d3:
         be:f1:6c:e8:fb:8d:a7:f7:88:a2:7e:31:e9:ac:00:f0:ad:3e:
         ba:c0:53:d8:31:0d:91:fd:36:28:43:2d:6f:c9:30:8a:69:c5:
         0d:5d:0b:f4:83:23:ba:5c:c5:16:bd:38:4a:91:8c:28:cb:3d:
         b9:01:bb:87:61:c6:18:7c:fc:ad:b3:1c:89:62:0a:5f:01:72:
         4c:84:ce:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:09:24 2026 by rpki-client