Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
File:                     4nmL4YzWTgg46agi1HhCBArIA0M.mft (raw, json)
Hash identifier:          rPFHzZL76VuXhRdkz8DfMKOLGcqLNdQd8b/Lm7YEy3Q=
Subject key identifier:   BF:26:F0:49:1D:7C:DE:AF:D5:ED:78:9E:45:E6:11:40:BA:37:84:93
Authority key identifier: E2:79:8B:E1:8C:D6:4E:08:38:E9:A8:22:D4:78:42:04:0A:C8:03:43
Certificate issuer:       /CN=A914823C/serialNumber=E2798BE18CD64E0838E9A822D47842040AC80343
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4nmL4YzWTgg46agi1HhCBArIA0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
Manifest number:          4F
Signing time:             Wed 07 Oct 2026 08:55:13 +0000
Manifest this update:     Wed 07 Oct 2026 08:55:12 +0000
Manifest next update:     Wed 14 Oct 2026 08:55:12 +0000
Files and hashes:         1: 4nmL4YzWTgg46agi1HhCBArIA0M.crl (hash: ImRgotVkb+jdS2Tis5Q3IxmKxgCDHZN3LvBirzNWeCw=)
                          2: DB626DF24AF111F18CF4AA40CD833773.roa (hash: Qc04/3jafq1HIqjArWLPfNu0P5WLlwA1tLsJj60Zayw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.crl
                          rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4nmL4YzWTgg46agi1HhCBArIA0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 08:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914823C, serialNumber=E2798BE18CD64E0838E9A822D47842040AC80343
        Validity
            Not Before: Oct  7 08:55:12 2026 GMT
            Not After : Oct 14 08:55:12 2026 GMT
        Subject: CN=6ac608f1-2891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d6:4b:ce:c3:c2:be:21:26:90:e4:90:f6:ca:
                    e7:f4:5a:bf:67:12:d7:e3:77:8c:69:1f:10:cf:b4:
                    40:37:1c:1c:ef:af:42:9f:d8:a8:dc:14:13:54:9d:
                    48:12:be:45:00:9e:78:a8:a6:2f:3f:c3:7e:c5:5b:
                    ce:45:27:31:cb:e9:67:7b:59:90:f5:ea:a4:40:31:
                    6b:76:19:fb:cd:00:c0:7c:f5:db:56:c3:e7:83:53:
                    07:98:f0:f6:24:20:b9:6a:5d:ad:ab:af:fd:b3:4c:
                    e0:01:08:c1:b0:dd:94:7d:45:94:32:9a:3d:c5:61:
                    e5:d7:d5:70:78:f2:7d:5b:ed:f2:36:d1:93:b6:fe:
                    f0:3d:51:d2:51:11:59:39:3e:1a:55:86:40:e1:ed:
                    97:2f:74:1f:22:82:1c:4b:35:e6:17:0d:30:54:59:
                    86:ff:de:db:5d:c3:d1:5b:3a:b0:da:67:3f:d3:25:
                    12:ea:5c:c8:94:ba:66:60:da:11:f6:2b:53:9f:99:
                    8f:3d:52:ac:11:e3:a1:c0:5e:e2:e1:ae:01:bf:88:
                    68:99:d8:07:a9:04:c6:cd:1a:c7:ad:52:6d:46:ac:
                    22:05:dc:df:b7:b3:49:d0:79:c2:e1:c1:28:18:18:
                    12:94:87:3c:75:43:68:05:26:22:ce:ac:2b:f5:9c:
                    a1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:26:F0:49:1D:7C:DE:AF:D5:ED:78:9E:45:E6:11:40:BA:37:84:93
            X509v3 Authority Key Identifier:
                keyid:E2:79:8B:E1:8C:D6:4E:08:38:E9:A8:22:D4:78:42:04:0A:C8:03:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4nmL4YzWTgg46agi1HhCBArIA0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:0f:0e:20:c5:d1:b7:24:cb:b9:62:c3:72:3a:d8:ad:87:56:
         66:8b:40:6e:8e:5d:7e:eb:05:27:f8:97:05:97:75:dd:ce:6d:
         8f:2c:e3:f6:aa:35:0e:b4:d4:3e:6c:32:57:df:e0:a2:4a:9a:
         44:a7:c8:3c:3c:33:97:a8:90:93:d3:09:80:41:79:a5:5d:6e:
         59:14:08:6c:24:58:35:8a:03:29:9b:73:3c:16:4e:3a:7d:c0:
         d1:35:a6:95:e1:66:ed:dc:02:25:dc:7b:6a:ab:dc:f5:1c:bf:
         85:42:d4:63:88:a9:51:9c:8c:7e:50:43:47:05:49:4f:6b:e6:
         eb:d2:c9:bc:fa:32:ad:93:ba:81:1b:22:48:c0:47:79:ea:33:
         5b:d1:9a:5e:52:6f:dd:63:1e:80:b9:a3:31:e7:46:68:a1:12:
         18:a1:c5:da:4e:01:1c:98:5b:16:87:af:2d:9d:7a:b5:e7:ed:
         7c:29:04:c5:ce:4a:04:25:b5:51:75:e5:4e:af:5c:30:c2:8b:
         f9:07:63:54:48:5a:76:ba:4b:93:ce:8e:38:7d:70:97:3f:da:
         45:32:9b:61:cf:6f:4b:60:78:3f:d5:bb:9d:44:e3:54:79:3c:
         a7:b9:68:97:05:7f:ef:fb:e3:0f:00:a0:9b:e3:d6:2e:35:f8:
         d1:80:3d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:49:34 2026 by rpki-client