Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft
File:                     ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft (raw, json)
Hash identifier:          7LbA8cU83X7rGy5U3byqXA636q5hW7/XR1G9NwwbtyE=
Subject key identifier:   2E:97:C7:4F:57:59:5E:9B:81:A2:D7:23:D4:C9:68:4C:5A:FC:E8:C8
Authority key identifier: 72:D6:5B:B3:CA:D4:A0:98:F3:6F:41:37:59:4C:C7:FE:C2:FA:28:A3
Certificate issuer:       /CN=A913C91D/serialNumber=72D65BB3CAD4A098F36F4137594CC7FEC2FA28A3
Certificate serial:       1181
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctZbs8rUoJjzb0E3WUzH_sL6KKM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft
Manifest number:          1171
Signing time:             Mon 12 Oct 2026 17:17:36 +0000
Manifest this update:     Mon 12 Oct 2026 17:17:36 +0000
Manifest next update:     Mon 19 Oct 2026 17:17:36 +0000
Files and hashes:         1: ctZbs8rUoJjzb0E3WUzH_sL6KKM.crl (hash: LTTWjjd51oNprCBn3chfjJCXdg0PHkSYyd5xUfY0p80=)
                          2: 39C6EF3688BF11EABC04973FC4F9AE02.roa (hash: 5ml9uPc8uMuL0GuHpS5bB1PAJRBicj+ravnTT1fBrO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.crl
                          rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctZbs8rUoJjzb0E3WUzH_sL6KKM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 17:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4481 (0x1181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C91D, serialNumber=72D65BB3CAD4A098F36F4137594CC7FEC2FA28A3
        Validity
            Not Before: Oct 12 17:17:36 2026 GMT
            Not After : Oct 19 17:17:36 2026 GMT
        Subject: CN=6acd1630-e125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:26:60:0c:3d:a8:c1:02:e9:5d:b9:0d:ca:64:
                    37:df:33:53:95:e9:44:2b:a9:ba:b3:f1:6f:16:dd:
                    2c:01:11:f0:56:6b:ce:64:15:81:1c:15:85:73:e8:
                    01:65:ba:55:a3:8b:e4:76:8f:3a:05:c5:3b:85:22:
                    49:c9:0b:0b:ff:af:46:f2:e1:a1:bc:fb:7d:b0:04:
                    f2:f2:70:92:ff:3e:6b:c9:81:fd:ed:d1:87:fd:14:
                    ad:39:88:50:0a:cb:9f:4a:da:ce:6a:2b:02:fa:2e:
                    06:54:c9:50:da:35:40:a7:fb:4a:f8:be:76:b9:73:
                    7f:f2:be:d0:1f:bf:10:d4:76:3e:1e:29:30:13:e7:
                    74:9e:5e:df:14:b9:81:07:4c:e9:3b:3c:07:47:55:
                    37:b6:87:47:64:34:1d:ea:25:88:49:4c:ed:b1:8e:
                    5f:4d:77:ad:71:78:1a:31:96:a6:18:38:d1:22:bd:
                    d7:67:ce:2d:cf:28:80:70:7e:57:d3:c4:d0:be:a9:
                    28:b4:84:de:c7:40:45:29:6c:8b:75:33:04:5c:f2:
                    93:cf:3d:6e:c6:42:ac:2a:82:7f:ad:7c:32:dc:4a:
                    18:31:24:17:ae:ef:13:69:da:46:f1:43:6c:98:5c:
                    67:dc:85:07:df:f5:74:ea:6c:70:15:e9:e5:85:3f:
                    21:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:97:C7:4F:57:59:5E:9B:81:A2:D7:23:D4:C9:68:4C:5A:FC:E8:C8
            X509v3 Authority Key Identifier:
                keyid:72:D6:5B:B3:CA:D4:A0:98:F3:6F:41:37:59:4C:C7:FE:C2:FA:28:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctZbs8rUoJjzb0E3WUzH_sL6KKM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ca:94:d6:bf:c8:9a:b9:4b:a4:30:8d:69:f8:9c:05:10:15:
         0b:7e:fb:84:9f:08:84:45:ba:82:eb:c4:bf:17:33:e2:e7:66:
         b5:a4:00:3f:77:33:75:e1:58:68:82:e7:10:ea:88:9b:18:83:
         49:7f:30:f4:16:3d:3c:0e:f1:d0:07:4b:c3:0c:dc:89:8e:04:
         4f:2d:6a:e6:6e:44:4b:5a:6d:e7:07:a1:c4:9f:af:28:3c:a3:
         a2:75:f7:b2:30:a9:5e:09:1d:f8:b7:d9:b4:44:94:30:db:a6:
         15:64:1a:30:1f:0c:c9:ee:7a:d9:3c:4d:4f:f7:1f:11:b6:b2:
         80:3b:bf:45:db:c9:68:d5:50:43:ad:94:e2:8c:21:66:67:6f:
         25:31:58:21:b8:6b:c8:b7:c1:19:5c:58:51:76:f5:4c:07:e5:
         33:6c:ec:63:68:8c:84:8f:39:d5:56:38:67:ab:29:04:21:7c:
         f8:dd:36:f3:02:1b:42:bd:2c:84:ce:59:5f:6b:ff:51:60:06:
         d8:fa:98:26:16:d1:c9:d9:0c:34:42:fb:c3:a0:29:9f:45:26:
         4d:42:fe:a5:36:f5:13:0d:46:a9:52:2c:6a:8c:c9:6f:97:39:
         37:14:6d:08:22:77:b6:3c:a3:eb:63:c6:93:28:d4:87:fb:20:
         1c:0d:c7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 19:41:29 2026 by rpki-client