Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
File:                     A2aKIfDwHwaydP2IzJ4KboPVX4U.mft (raw, json)
Hash identifier:          oSu4Gz+bjZtqdXSuRzjO5qpvOA0aCftq+/Ggr+sCmWc=
Subject key identifier:   D3:7B:B3:B6:B9:CC:7C:B3:CE:22:3C:7A:62:47:D3:D2:BF:E8:5E:51
Authority key identifier: 03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85
Certificate issuer:       /CN=A9141620/serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
Certificate serial:       085D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
Manifest number:          084F
Signing time:             Mon 12 Oct 2026 21:10:23 +0000
Manifest this update:     Mon 12 Oct 2026 21:10:23 +0000
Manifest next update:     Mon 19 Oct 2026 21:10:23 +0000
Files and hashes:         1: A2aKIfDwHwaydP2IzJ4KboPVX4U.crl (hash: bu6tedzRCr7RQ1zBXPWh9uOaI1AD5mHWuKkc/cS4Ck8=)
                          2: CE899F0A66C311F08BE17B42C4F9AE02.roa (hash: /8KsOuQDF6YCKq+9HViCWxyMxMdtmN7AwyTJXtJg/FU=)
                          3: 2C0DD994525511F0A544424DC4F9AE02.roa (hash: r04Ye74EEDh36FeBnIWb59XMMU9Mx+tkFNipeNmkuAg=)
                          4: 5DDE6BC2293E11EB9DFA3C72C4F9AE02.roa (hash: +AUVvwTT7ST+BeSrArm8ZmuI1OzsiyoIqJ3c0xzwnVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl
                          rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 21:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2141 (0x85d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141620, serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
        Validity
            Not Before: Oct 12 21:10:23 2026 GMT
            Not After : Oct 19 21:10:23 2026 GMT
        Subject: CN=6acd4cbf-cfb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:84:e2:3c:69:cd:b7:da:53:68:93:0c:a9:0f:
                    21:a1:11:13:3c:18:3e:a9:34:2e:19:0f:c5:a2:12:
                    c7:56:6b:45:6a:4d:48:05:4e:3f:fb:51:80:6a:80:
                    4e:58:6c:f1:11:ce:d3:10:b5:47:4d:3c:5a:4d:e8:
                    9f:46:52:50:5f:c4:36:5a:5f:7d:e9:df:4e:4a:d4:
                    e2:41:1b:b6:06:4d:57:6f:23:34:b7:3d:8f:8b:65:
                    be:06:47:72:d4:54:21:6c:8e:e1:4b:25:95:10:18:
                    d7:9d:1b:8c:c4:27:f0:bd:f3:2d:48:6f:8b:71:7e:
                    c5:c7:dd:06:a9:d8:73:4d:27:9a:ac:82:c3:65:ef:
                    8d:5a:cd:fc:4f:b9:f9:b5:7b:29:94:14:bc:07:b8:
                    0a:8a:e9:f8:87:a2:8f:eb:0b:ed:cc:ae:ca:37:78:
                    ae:3e:d2:09:70:c1:c8:48:62:2f:89:55:66:d3:22:
                    52:d9:39:ab:37:2b:e5:8c:53:f1:6b:c0:3d:51:60:
                    b2:3c:88:6b:62:83:f3:0e:3d:a1:33:25:8b:d5:da:
                    19:25:97:8a:5e:26:14:c1:0b:c6:31:c0:cc:ac:fe:
                    25:5e:c6:53:4f:57:ac:3f:d5:73:51:dd:a9:74:5a:
                    5f:b0:bb:75:1f:9c:89:17:b9:13:ae:5b:6f:c5:ed:
                    cd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7B:B3:B6:B9:CC:7C:B3:CE:22:3C:7A:62:47:D3:D2:BF:E8:5E:51
            X509v3 Authority Key Identifier:
                keyid:03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:07:92:fd:bd:da:13:f7:8f:0a:01:3e:33:df:09:4e:12:ab:
         84:f7:24:67:c0:76:b7:7f:2e:ce:05:f3:d5:09:7a:5f:30:9b:
         6a:57:93:89:65:fc:68:16:89:c8:64:2e:7f:c3:37:eb:a2:15:
         3f:66:19:ff:c9:c5:41:53:4d:78:a3:30:95:ad:8f:1e:96:47:
         f6:d6:1f:95:03:06:49:de:e4:77:eb:d4:67:16:fb:ca:2d:b4:
         68:c6:7f:dd:88:7d:ef:33:67:b2:91:81:c4:3a:e5:10:1e:2b:
         44:52:a4:87:0a:87:5c:8e:64:eb:f1:a4:28:0c:c6:66:20:a9:
         41:1f:6c:cc:d7:92:c7:f0:18:a5:e7:e6:7b:17:97:19:20:a4:
         c3:b8:f6:f6:c5:27:d7:f7:07:03:12:95:e2:2a:43:83:fd:fb:
         78:46:b1:bb:b8:9e:55:57:5f:90:44:b0:af:b2:bd:b0:79:f1:
         4a:24:d5:d6:9e:41:b3:dc:04:06:c0:e6:0c:db:c7:4a:36:a6:
         d4:25:7b:c7:6a:ef:cd:c3:b9:d6:1c:04:c1:38:bd:5c:1b:3b:
         5a:e7:9d:c3:c5:71:d8:75:d5:e0:53:bc:a9:89:52:7a:d5:21:
         a1:90:37:61:47:59:a5:f1:44:41:b2:98:37:df:bc:2d:5e:d7:
         d9:60:93:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:23:55 2026 by rpki-client