Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
File:                     4mZe42LlzFj31n9Ka3YhqkYL044.mft (raw, json)
Hash identifier:          E4V1a1U7iwoDl0i1IfyG8ymeiZpV3QG/j4XvZ/Y3tjg=
Subject key identifier:   00:79:D9:14:18:19:50:04:BA:E9:00:D6:62:5A:08:2D:B2:68:FA:E6
Authority key identifier: E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E
Certificate issuer:       /CN=A912675B/serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
Certificate serial:       0888
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
Manifest number:          0873
Signing time:             Wed 14 Oct 2026 21:10:04 +0000
Manifest this update:     Wed 14 Oct 2026 21:10:03 +0000
Manifest next update:     Wed 21 Oct 2026 21:10:03 +0000
Files and hashes:         1: 4mZe42LlzFj31n9Ka3YhqkYL044.crl (hash: aVbEX+xw/tRckJ8e/4gQEBCQpfyUXzF3HZKiezQknwQ=)
                          2: D57EF608BC6C11F0894F2331C4F9AE02.roa (hash: bxmtoo9Mi52T+qWLWPtmIQ+3oo8uoIe54/5a6/+rAEo=)
                          3: C08B23401DA511EBAD78BB46C4F9AE02.roa (hash: 6dxQbscKD9BpisiGIvmhEruYks1OCWVGKkbkjxYZYu0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl
                          rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 21:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2184 (0x888)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912675B, serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
        Validity
            Not Before: Oct 14 21:10:03 2026 GMT
            Not After : Oct 21 21:10:03 2026 GMT
        Subject: CN=6acfefac-9a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8f:28:f8:2b:3f:4b:79:ae:4a:41:9f:f9:32:
                    2f:ab:9e:19:7f:50:a3:11:7d:64:ea:da:25:3e:d6:
                    06:51:18:db:9d:fd:f4:a9:36:80:19:84:57:29:f6:
                    08:38:6b:07:18:81:05:35:03:56:1e:b5:4d:4c:8c:
                    2b:7f:19:63:55:3f:71:4d:d7:f1:0d:78:f0:67:d4:
                    a2:01:20:3a:01:9d:a9:ee:a4:53:86:ef:a3:19:9e:
                    98:bf:3f:0e:5e:b9:35:82:88:76:68:7f:a3:72:3b:
                    a6:11:24:ce:e4:75:43:7d:cb:2f:0e:33:5b:49:a9:
                    e7:37:bf:92:ae:3a:d9:43:be:b9:de:16:4b:bc:9a:
                    ed:f8:41:b5:9c:a7:d5:cd:d7:a7:63:d7:2b:da:71:
                    9d:5e:1d:2c:d2:bf:0a:71:f1:5c:0a:f1:da:b9:3f:
                    5f:5a:75:08:7c:b8:2b:a8:9d:5c:23:5b:8d:f7:04:
                    f2:5c:b6:59:b4:b0:47:99:76:ec:3c:37:f1:20:86:
                    c4:5c:11:77:67:a3:05:69:a2:c4:51:71:9a:8e:54:
                    50:37:9a:cb:02:a1:c7:66:97:03:ce:7c:af:93:a1:
                    85:69:f7:32:b0:1f:30:03:1a:8e:72:22:79:a8:5d:
                    96:dc:50:0f:8c:9c:aa:ae:46:22:be:c7:e8:a9:c6:
                    1f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:79:D9:14:18:19:50:04:BA:E9:00:D6:62:5A:08:2D:B2:68:FA:E6
            X509v3 Authority Key Identifier:
                keyid:E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:56:07:97:99:a4:0b:17:d9:81:c4:d8:fd:00:95:f5:66:81:
         d9:d1:db:d9:bf:ce:4e:c1:ce:38:41:06:b4:88:e5:7e:69:27:
         b4:aa:8d:5e:f6:75:ba:3b:da:12:8d:30:34:28:26:64:92:da:
         c3:d9:19:c6:75:4c:50:a1:ce:34:79:55:a4:ff:ae:65:55:64:
         a4:21:e6:01:f8:9d:27:2e:f1:66:6d:5a:23:4d:6e:71:9d:0f:
         b4:42:fa:1e:62:7c:c7:6b:b0:03:d7:fa:6a:7e:e9:93:b8:e0:
         67:df:39:fe:79:b8:0e:f8:63:d6:39:b3:47:26:ca:a8:ed:e1:
         58:d1:76:4c:93:2c:fa:45:8e:82:3f:e3:8f:97:25:19:a5:cf:
         ca:c6:23:59:ee:ce:e5:30:ca:d6:43:f5:ce:7d:5d:be:2d:93:
         93:fc:e6:77:5b:d2:cb:20:c3:68:a3:37:11:1c:b1:c9:c5:89:
         ae:f5:ef:ca:e3:65:39:e9:86:96:b1:f5:f5:96:27:f8:b6:72:
         78:70:71:cc:27:ce:e4:71:0f:e3:db:bc:72:c2:ba:49:c4:4d:
         4c:c1:ab:60:4e:6e:1a:19:8f:60:be:4c:b7:ed:67:02:29:36:
         42:f2:3c:04:ae:15:f9:8c:5a:d3:d9:73:30:9a:99:03:f8:e6:
         6a:43:ae:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:21:39 2026 by rpki-client