Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft
File:                     2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft (raw, json)
Hash identifier:          zjHjCfWfy8rvwqmspfAmI9nbO6vDPLzdQUnQmP+hTpA=
Subject key identifier:   68:C1:EB:62:FA:4B:75:04:56:3B:BC:C6:92:4E:F3:4D:01:E2:9E:D8
Authority key identifier: DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF
Certificate issuer:       /CN=A9140E66/serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF
Certificate serial:       0D7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft
Manifest number:          0D6A
Signing time:             Sat 10 Oct 2026 18:02:58 +0000
Manifest this update:     Sat 10 Oct 2026 18:02:57 +0000
Manifest next update:     Sat 17 Oct 2026 18:02:57 +0000
Files and hashes:         1: 2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl (hash: YytOjGIvKDrQKUj+aUiZHSN5WdYTTU88LV757/bMG0I=)
                          2: 46CgcRR4DtfIkR4DTwxb5V4Ohl4.asa (hash: uaPGZE5Nz6Vu7GjF6pLPhtfgWBIaRaOrHDLiVX6Lp4s=)
                          3: 44FEC394589711F0B981A181C4F9AE02.roa (hash: wWWoExLKhdXKo+c07T6lvKy7CHheLkRqNVGs3DlMLvo=)
                          4: C21D3A065B7E11F0A8B76B2EC4F9AE02.roa (hash: XGpY3RP8rp7DjJ1Txu21meaiyAARXZvjCzho1tEWn3o=)
                          5: dx16kGG5nXP6JvuYobcTzIl0Ks8.asa (hash: WkMTszBWx8Ph9ZmhzRyQOiAiiRb3PJxxZo/Xe6A6nmo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl
                          rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 18:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3450 (0xd7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140E66, serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF
        Validity
            Not Before: Oct 10 18:02:57 2026 GMT
            Not After : Oct 17 18:02:57 2026 GMT
        Subject: CN=6aca7dd2-babc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e7:f8:97:11:8f:28:4d:f6:72:6e:29:e4:7b:
                    88:2d:93:e3:4d:a1:26:31:9c:7c:88:47:a1:ed:5a:
                    78:75:92:78:6c:4c:cc:22:21:c8:40:06:c6:a6:15:
                    4a:df:28:a2:13:74:35:f6:84:0c:ba:d5:2a:57:5c:
                    37:2a:54:fe:9a:90:cc:e2:ef:97:71:90:66:82:ae:
                    93:44:73:32:9d:e0:2d:d4:cf:eb:8f:04:3c:b7:8e:
                    22:dc:01:11:e0:85:60:fd:a6:15:e8:0c:35:9f:df:
                    43:5a:8c:12:b8:d3:ee:23:68:a4:7a:59:47:37:0a:
                    4e:22:64:64:93:03:8f:92:27:ee:b9:b6:13:08:d2:
                    44:e8:5f:2e:20:5d:1c:18:3b:d0:cb:71:e1:50:cc:
                    6f:27:c7:26:b4:ff:69:aa:ba:f4:55:b9:2e:a4:99:
                    8f:99:6f:c6:25:61:5d:64:10:30:11:0b:be:e6:da:
                    e6:87:dc:1c:88:57:8e:b7:57:41:5d:02:2a:5d:31:
                    5f:ae:af:8a:6f:33:e5:d8:86:bf:22:f5:a4:bb:93:
                    c9:01:b5:4a:37:b0:0b:31:d9:2a:c5:4a:98:fc:39:
                    2b:69:73:92:a0:ba:36:3c:1d:63:35:d1:53:d2:ec:
                    c8:04:b0:91:74:37:8f:c7:1d:73:fc:53:f4:a9:67:
                    ca:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C1:EB:62:FA:4B:75:04:56:3B:BC:C6:92:4E:F3:4D:01:E2:9E:D8
            X509v3 Authority Key Identifier:
                keyid:DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:1e:01:59:37:3c:20:e0:2c:39:f2:ce:c9:e2:c4:29:36:0e:
         64:3a:16:f8:60:4e:9a:78:7b:e5:14:77:4c:5f:e4:e3:9c:74:
         15:83:a4:3b:67:bf:17:28:6c:93:d0:cd:32:18:c8:1d:83:ad:
         d1:76:4f:6f:a4:59:db:eb:0a:2e:e7:82:42:0f:be:8b:c5:ae:
         c1:c5:fa:41:e0:73:1c:2a:ae:5d:39:7f:be:21:58:75:78:cb:
         d8:f8:91:80:28:cd:97:09:2b:b1:95:93:3b:2a:f6:aa:f5:02:
         c2:d6:ab:47:f0:cc:96:a5:76:f8:09:e8:ae:3c:d0:ee:e7:89:
         de:d3:ae:d6:b0:c9:e9:7c:27:6b:57:59:07:b8:a4:11:a4:d4:
         2c:de:7f:8c:2b:5c:74:13:5d:ac:ed:71:14:1f:1f:d0:aa:28:
         ae:06:1e:f7:53:20:72:63:f9:b4:97:ee:b5:e0:34:0a:f4:61:
         8f:d7:58:60:5b:7d:69:e6:4d:32:ff:2d:9f:95:4c:8f:43:9d:
         45:50:8f:e9:dc:48:f5:d3:57:61:ab:38:77:99:2d:96:70:61:
         8c:bd:79:c4:f9:4e:6b:4a:98:87:d2:0e:ac:68:e5:d9:99:1b:
         d1:1e:2c:cb:c5:aa:e4:25:62:9d:99:1a:8f:db:83:f9:37:7b:
         73:aa:ba:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:00:01 2026 by rpki-client