Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
File:                     RoxqeSq7PkX-7iIo0o54AxNytFU.mft (raw, json)
Hash identifier:          jGOgc5hZSxgoTi8mbztm13gOedUMClDGvAdJTPlwPVM=
Subject key identifier:   FA:69:26:4D:08:05:9F:E3:A3:5F:88:36:36:12:4A:AD:FA:3E:DF:A4
Authority key identifier: 46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55
Certificate issuer:       /CN=A912DD15/serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455
Certificate serial:       02A4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
Manifest number:          029B
Signing time:             Sat 03 Oct 2026 02:18:41 +0000
Manifest this update:     Sat 03 Oct 2026 02:18:41 +0000
Manifest next update:     Sat 10 Oct 2026 02:18:41 +0000
Files and hashes:         1: RoxqeSq7PkX-7iIo0o54AxNytFU.crl (hash: o4DVkm+Pb4d8/EI9Tf/6tAMqxfpc6K3BYsOUTCypSW4=)
                          2: 43CE5D5A236911EEAC33285DC4F9AE02.roa (hash: DI/eG9DXOFb9EKRR2bPnL0OAziLMqCbunU7psCFOUsk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl
                          rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 02:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 676 (0x2a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DD15, serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455
        Validity
            Not Before: Oct  3 02:18:41 2026 GMT
            Not After : Oct 10 02:18:41 2026 GMT
        Subject: CN=6ac06601-bde0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ed:18:7f:51:8b:27:31:d1:bb:c8:55:50:a4:
                    57:91:62:71:36:4c:5f:c0:1a:2b:2c:37:11:7f:10:
                    7a:82:c1:4e:98:da:6f:97:b0:89:89:e8:3b:37:58:
                    69:e8:44:89:25:a7:15:9d:7f:40:bb:3e:19:a1:b2:
                    f6:9c:bf:ba:46:82:b4:3f:e7:d4:ef:b1:df:e4:8b:
                    ef:cc:d2:3c:4d:df:c3:de:26:cb:68:20:2a:13:9b:
                    54:6c:14:db:94:f1:a0:fc:42:93:ed:88:0b:5d:c6:
                    2f:95:7b:a4:bb:a5:94:30:e3:61:b5:37:dc:02:a5:
                    c4:47:ca:db:aa:f5:23:19:bc:3a:fd:f4:7b:02:a9:
                    c2:06:76:37:97:82:fa:8e:94:7a:8f:8d:ef:ef:c1:
                    e9:64:10:a7:01:97:d8:18:17:f7:0e:ff:39:9b:fa:
                    e3:5c:10:d0:20:c4:16:4a:de:e1:6b:58:2e:69:2a:
                    b1:e9:2f:ef:05:30:18:e5:96:0a:8e:77:eb:d7:87:
                    38:5e:96:7c:40:09:6b:62:81:c6:98:d3:b9:5b:87:
                    e3:fc:50:f3:91:2e:eb:ea:09:53:86:8e:eb:76:bb:
                    08:80:00:72:13:24:cc:dc:30:33:e4:cc:6e:96:ef:
                    6c:5a:5a:3c:ec:ef:a5:3e:a2:fd:62:c1:98:67:46:
                    ad:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:69:26:4D:08:05:9F:E3:A3:5F:88:36:36:12:4A:AD:FA:3E:DF:A4
            X509v3 Authority Key Identifier:
                keyid:46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:f1:16:f0:2f:e3:4c:86:7f:05:92:b6:05:4f:0a:a1:f3:fd:
         88:32:45:38:ce:8e:ad:ce:ca:5f:f7:3f:82:3c:c4:c3:1a:3e:
         8e:96:40:a5:2b:78:e1:40:65:4e:9e:08:e8:91:4d:d3:95:d1:
         93:42:29:33:66:ad:57:67:e3:79:aa:d5:3f:04:99:cc:20:2c:
         fb:bf:49:f5:28:e4:2e:83:ae:d0:7a:eb:71:9d:b3:eb:25:82:
         da:c3:7b:4a:c3:c8:5a:ff:cd:c3:6f:94:53:12:c2:ff:02:07:
         4e:0e:7b:96:d0:98:7d:e3:a2:3c:6f:fb:cb:0e:f9:19:c0:27:
         3c:b0:17:bf:d6:09:30:ad:ad:76:8f:6f:43:54:ed:ac:ae:5f:
         96:3d:63:d8:0b:ec:24:f5:90:34:b0:56:66:d8:f6:4e:a2:e4:
         02:c3:57:c3:c1:fb:10:84:bd:c8:92:cd:7b:cc:d1:18:7c:5e:
         5c:9e:24:1f:42:7c:14:77:4a:2a:65:1a:14:be:e9:48:ee:ef:
         95:b3:aa:b0:4d:02:14:db:27:0d:74:4e:b1:66:1e:65:89:fd:
         a7:5b:41:7a:c7:f0:21:c7:8b:34:e0:31:01:d3:ce:64:56:dd:
         12:85:a6:85:3b:f1:8b:62:d6:ce:be:04:2d:1d:54:13:18:8c:
         c1:92:5b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:18:17 2026 by rpki-client