Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
File:                     iAd3htZlI61ZmNY_aXr0LwOcKqk.mft (raw, json)
Hash identifier:          GpzL8CpdC2po3S01Q08eEnikjRpEKWZvi9mFFacyw60=
Subject key identifier:   60:16:81:03:85:69:BF:83:85:16:B0:7D:ED:79:23:C2:CB:7C:7E:00
Authority key identifier: 88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9
Certificate issuer:       /CN=A914A4E2/serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9
Certificate serial:       1183
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
Manifest number:          1170
Signing time:             Wed 14 Oct 2026 17:17:33 +0000
Manifest this update:     Wed 14 Oct 2026 17:17:33 +0000
Manifest next update:     Wed 21 Oct 2026 17:17:33 +0000
Files and hashes:         1: iAd3htZlI61ZmNY_aXr0LwOcKqk.crl (hash: 9+/oxSgx9caNX8WHnE0kJ+kIZV4qtgUKcTcrex5G4yc=)
                          2: 744CCD5834F911E98AB73628C4F9AE02.roa (hash: 9W05C1LlPKcEFv9pU3PetAYWB/PzpYrnvZBHnrLu8UQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl
                          rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 17:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4483 (0x1183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A4E2, serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9
        Validity
            Not Before: Oct 14 17:17:33 2026 GMT
            Not After : Oct 21 17:17:33 2026 GMT
        Subject: CN=6acfb92d-e72a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b7:96:8a:06:3c:fb:fc:56:1c:ff:c7:21:32:
                    f3:7c:02:01:71:38:ea:3f:a8:bd:05:5c:03:58:59:
                    3f:99:8e:e3:0e:f9:b2:25:28:7f:56:6a:97:18:12:
                    77:ce:83:d1:02:89:90:a5:59:e2:c0:65:a5:99:33:
                    db:68:46:3f:62:bc:3f:df:90:d4:9c:89:58:8b:16:
                    0f:90:95:5c:58:78:b6:5e:a9:ca:9f:55:8a:29:1e:
                    09:cf:6f:88:b6:b5:60:f0:5d:dc:9c:67:1d:a4:8e:
                    20:ea:72:9e:6a:66:9a:59:f0:fb:19:13:89:e3:59:
                    37:52:ee:5a:36:92:32:8c:7c:77:25:51:4b:ba:fb:
                    b1:72:69:82:48:db:a9:3b:ce:79:f4:6c:59:9c:a8:
                    17:02:07:cd:16:43:e2:7b:7c:cb:1e:a7:dd:a7:22:
                    55:d5:2d:d9:71:5e:75:bc:47:da:cd:82:41:3f:44:
                    51:0b:93:ee:3f:bd:15:ec:db:d7:10:f4:4a:a0:a2:
                    25:a9:66:83:a3:43:22:66:3e:f3:8b:9d:0b:9a:9c:
                    03:d7:a3:e8:49:e8:a9:50:f5:88:64:05:11:ba:f9:
                    72:5f:a8:37:6f:df:b7:02:ce:9d:1e:65:e1:6a:bb:
                    b3:aa:a7:df:9a:4e:4c:82:a7:08:2e:e1:50:4e:b7:
                    d5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:16:81:03:85:69:BF:83:85:16:B0:7D:ED:79:23:C2:CB:7C:7E:00
            X509v3 Authority Key Identifier:
                keyid:88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:f5:db:a8:28:da:4b:d9:cf:6a:12:30:30:03:bf:b8:ee:7e:
         83:bc:80:a7:c5:e3:34:0d:2c:9d:a3:75:6a:c6:7a:60:0c:07:
         21:c2:5f:56:e1:88:e5:2a:1a:56:90:e4:5a:25:20:45:26:ac:
         df:f2:bb:57:7c:d9:41:2a:32:e9:c5:1b:e8:a9:ed:07:6e:22:
         5b:85:84:09:f5:70:e9:fa:92:b7:28:0d:12:a5:76:b4:0d:ea:
         2f:6b:29:6e:6f:da:90:3a:67:8e:2b:28:69:40:5a:68:a6:d6:
         c5:0a:73:0f:77:b5:d2:33:4d:52:c8:19:5c:c1:ed:09:6c:24:
         b5:89:1b:08:d9:c1:32:e2:58:db:cd:4f:66:1b:0d:71:f8:e5:
         4e:43:55:ae:94:a2:a4:b8:0a:be:b7:4a:ee:e1:16:5d:04:f2:
         4b:8c:2d:e3:4e:f4:88:c4:8f:ef:26:cc:24:04:b3:6c:b7:d3:
         03:9d:52:96:e9:06:08:2a:76:5b:90:20:91:78:33:f6:4b:f7:
         db:1c:30:a9:3e:22:27:57:29:f7:13:fe:b4:30:db:50:42:76:
         51:d4:27:27:5b:41:d2:31:f9:a2:71:96:51:4c:7b:2f:1b:48:
         46:df:03:0b:7f:a8:35:b3:25:d7:e0:2d:b7:36:98:d3:61:24:
         6a:d2:cf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:56:33 2026 by rpki-client