Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
File:                     c0H2TqslF-qZON3k-wqBTly7fnc.mft (raw, json)
Hash identifier:          pRoOt7zzjUO+l35r6hC4tbo7ti9vRHkShhnWeqqf6jU=
Subject key identifier:   02:52:AA:BC:D9:70:2E:37:AA:76:61:61:A9:BC:E0:52:7D:A3:F2:57
Authority key identifier: 73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
Certificate issuer:       /CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Certificate serial:       1F25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
Manifest number:          1EFF
Signing time:             Sun 04 Oct 2026 16:02:50 +0000
Manifest this update:     Sun 04 Oct 2026 16:02:49 +0000
Manifest next update:     Sun 11 Oct 2026 16:02:49 +0000
Files and hashes:         1: c0H2TqslF-qZON3k-wqBTly7fnc.crl (hash: IrE0FBTbTd//VAP1a5ZHNeGI9td1z3tfiut7VI8FGnk=)
                          2: 22DC230C299311F0B32D9F82C4F9AE02.roa (hash: Q8meJh+l3QvnqqqYOUJJQlzzASdq6o1tO+VcZsCelFk=)
                          3: 51D65180A2DC11E9B63C6C2BC4F9AE02.roa (hash: UYMwVYPaK7nzCwDIb/TjC1GQVHBFdraAzq6uV6QZN+c=)
                          4: 8144C55412E611E98A4A6A35C4F9AE02.roa (hash: liMT6OAzfvJnsspgI1FzQ6ZwFHNyDq37HvK43oMb2f8=)
                          5: 234A6628299311F0B32D9F82C4F9AE02.roa (hash: /qsVaB9Ik2QgEaAelOskN07kdqvopeyP2GfAlI1Wn9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
                          rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 16:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7973 (0x1f25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912184B, serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
        Validity
            Not Before: Oct  4 16:02:49 2026 GMT
            Not After : Oct 11 16:02:49 2026 GMT
        Subject: CN=6ac278aa-a99f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d9:ba:97:5d:a5:57:45:ea:4f:68:29:df:da:
                    34:ce:ad:85:8b:b6:f3:4d:f4:ac:63:8a:6c:74:95:
                    07:3c:42:87:af:10:f4:4f:b8:4c:fe:e3:8b:38:ee:
                    44:e7:69:0a:d7:e0:ac:a9:97:9a:dd:06:96:d0:50:
                    b8:d6:e8:c6:a3:44:12:ed:1e:d0:c3:1c:36:97:86:
                    01:bd:c3:a2:75:85:e1:a4:65:88:cb:79:e6:40:3a:
                    2b:43:43:0f:00:59:f9:e6:10:02:b3:dd:65:1a:88:
                    1e:3c:c8:dc:39:da:6f:c0:03:23:fd:25:d4:1a:28:
                    bd:3c:06:5d:33:c3:46:c3:57:e8:52:1a:75:d9:8f:
                    d7:49:2b:bd:c2:38:09:f0:82:0f:46:cd:fc:2c:95:
                    2b:c4:08:c7:93:a8:f3:15:75:64:7c:0c:33:17:dc:
                    40:98:a5:ad:0b:c8:ad:2d:c3:60:86:79:0d:57:cb:
                    0d:b6:65:75:85:d9:c4:2d:ea:ba:3b:e8:74:76:f7:
                    87:19:eb:b5:6c:c0:24:3f:b6:f4:6f:f1:3c:03:24:
                    a4:bc:74:d2:c6:4d:e9:81:bc:27:03:76:ab:d1:08:
                    b9:5d:34:40:02:a0:de:dc:8b:e6:13:62:81:17:b9:
                    85:b9:7e:c0:54:03:39:11:be:26:fc:d4:fa:e9:60:
                    5a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:52:AA:BC:D9:70:2E:37:AA:76:61:61:A9:BC:E0:52:7D:A3:F2:57
            X509v3 Authority Key Identifier:
                keyid:73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:e3:28:97:d5:d7:c1:21:05:f0:d2:95:b1:03:33:0b:a4:e1:
         89:3c:23:44:13:01:ec:b7:41:36:37:f3:ea:6a:58:6f:9d:d8:
         88:56:d2:04:ae:8d:27:42:8e:1f:e8:c2:fc:77:01:f7:c2:ef:
         ea:fc:3f:db:9b:b1:d3:ea:3a:74:62:78:4e:43:cf:9a:e5:a4:
         a1:0a:ad:fc:e4:7e:63:bf:a9:e5:5a:42:7d:a8:9d:3b:14:c6:
         93:a6:e1:80:8a:df:77:f0:27:06:42:7e:c3:22:ef:44:02:94:
         a0:fe:56:f0:ac:cd:7e:cb:62:a9:be:b7:05:89:92:1f:5a:4c:
         cc:55:02:f2:5e:ea:86:4d:72:94:ff:0e:4b:e9:8f:be:67:44:
         85:72:da:7f:ac:d9:6c:4d:ba:d9:a1:cf:65:ca:1c:c7:05:5d:
         16:69:dd:4d:29:9c:d2:57:bd:f9:37:9c:2f:ea:9d:10:f8:c2:
         17:f0:28:a4:9c:94:c2:a3:7e:63:58:83:ff:d6:1b:37:d9:ff:
         d5:67:a2:7b:15:b8:3d:c3:5e:3e:8b:61:a0:18:2e:da:7f:74:
         e0:87:9c:03:38:9b:ee:98:82:a9:c4:50:55:d8:74:c5:dc:32:
         a9:e8:eb:2e:bf:ab:66:84:eb:07:88:7f:ab:74:99:98:30:fb:
         da:a8:1c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 23:16:19 2026 by rpki-client