Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft
File:                     mvY3DDqaguLsqIJzqLjnngKCVPk.mft (raw, json)
Hash identifier:          MQ2Ienx84xyI9in8oDQP+ERmgvU2W4lo0K4e1wXq7DY=
Subject key identifier:   E7:B4:6C:DB:C6:A7:B5:CC:61:37:66:05:76:9B:FE:88:21:C3:1C:BD
Authority key identifier: 9A:F6:37:0C:3A:9A:82:E2:EC:A8:82:73:A8:B8:E7:9E:02:82:54:F9
Certificate issuer:       /CN=A9165C34/serialNumber=9AF6370C3A9A82E2ECA88273A8B8E79E028254F9
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft
Manifest number:          4E
Signing time:             Fri 09 Oct 2026 09:08:48 +0000
Manifest this update:     Fri 09 Oct 2026 09:08:48 +0000
Manifest next update:     Fri 16 Oct 2026 09:08:48 +0000
Files and hashes:         1: mvY3DDqaguLsqIJzqLjnngKCVPk.crl (hash: FY94tuGOMVMP0HKw4sV4VJvvM4D13qhnFgIHuLffG6A=)
                          2: D8D132C452E111F18BE0BBBEAE833773.roa (hash: SOC3GpUKSzAAkyJ5IYbCisAxPDi0msNuelaQ5PwEXrg=)
                          3: 0642A9644FB211F18BDA0000A1833773.roa (hash: ba3MiHCQ/9RzbEMhAGdSRjmEpdohirZy6IJ6tNd/uKM=)
                          4: HOBn4xDPKZiL8Isjj99ROKIwrsQ.asa (hash: zAFqND4LetLfBzzSmwzchzjXRNY+jMjvxeB5FZiT9ek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.crl
                          rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 09:08:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165C34, serialNumber=9AF6370C3A9A82E2ECA88273A8B8E79E028254F9
        Validity
            Not Before: Oct  9 09:08:48 2026 GMT
            Not After : Oct 16 09:08:48 2026 GMT
        Subject: CN=6ac8af20-0d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0e:fd:80:3f:84:1c:2a:cf:34:a8:de:06:6e:
                    48:7f:c1:61:de:45:53:cd:01:aa:df:08:c3:cf:da:
                    b8:3c:86:38:02:3c:2b:a3:54:de:8e:8e:e0:2d:43:
                    ec:cb:37:59:25:06:36:3f:46:a8:35:fd:c7:03:af:
                    ae:8c:10:52:3b:e2:04:00:24:e7:c9:1c:a5:41:4c:
                    ee:b1:9a:3f:65:2a:c2:c3:b1:c8:84:4e:b8:d0:42:
                    05:6a:c7:ad:ee:85:b8:ef:2f:18:4e:b0:b1:5b:6f:
                    4a:8a:7f:fc:25:19:44:0e:73:76:e0:f5:73:3b:f4:
                    e7:d3:02:66:f4:43:bb:7a:b8:62:64:a2:20:e5:56:
                    51:88:51:fb:94:73:e6:cb:d6:32:85:ef:e7:0a:e5:
                    ec:ce:57:c0:79:b7:60:f7:8d:38:49:22:df:9b:5e:
                    9c:70:3d:80:26:dc:cd:4d:52:33:03:0f:0d:23:50:
                    5a:12:ba:cc:c9:90:78:84:f5:a0:5c:0f:fc:2b:76:
                    0c:0a:67:6c:9d:0c:90:fa:7e:ad:4d:cd:e2:cf:05:
                    7f:a6:85:a7:1a:e8:a9:63:0c:ae:c1:1a:40:ba:da:
                    4a:1c:5a:88:d8:c7:32:f0:70:7a:ad:04:0e:64:c9:
                    ea:0f:3e:3e:95:0e:e2:35:49:e1:b2:54:10:78:2e:
                    7d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B4:6C:DB:C6:A7:B5:CC:61:37:66:05:76:9B:FE:88:21:C3:1C:BD
            X509v3 Authority Key Identifier:
                keyid:9A:F6:37:0C:3A:9A:82:E2:EC:A8:82:73:A8:B8:E7:9E:02:82:54:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:b4:1e:b9:db:61:3f:6c:ff:77:47:04:62:4c:15:3a:86:3b:
         2c:51:14:ea:07:5c:f6:78:65:95:10:f2:c5:f9:ec:e2:fc:e1:
         5f:7b:81:f4:e5:f0:ca:97:4f:5c:5e:0b:1e:27:5b:f6:1c:35:
         a8:6a:bc:c4:7b:77:5e:80:ad:2b:d5:bf:6b:1f:6c:05:fe:41:
         3d:d7:e3:b3:05:70:41:fc:a1:37:2b:f7:d4:e9:cf:df:b5:b4:
         81:b1:a3:38:7e:b4:f9:6a:71:96:d5:68:1e:b4:fa:17:fd:ca:
         8a:ce:9d:fb:86:69:f2:a1:5c:aa:49:9c:fc:95:03:36:43:63:
         c3:27:cf:be:1c:41:ae:4b:19:24:fa:7a:31:26:13:43:45:a6:
         69:2f:b9:38:0f:ff:4d:e8:1b:4a:a5:00:8f:28:98:44:82:f4:
         47:55:c9:f3:39:bc:6a:9e:77:79:7c:e5:7c:9a:5d:32:d3:98:
         9d:91:27:9e:da:33:8b:e9:09:2e:9c:78:69:1a:cc:77:e4:de:
         dc:da:a3:4f:8c:d1:f1:6b:b1:b0:50:bc:e9:a6:25:83:91:f7:
         7c:d7:34:12:80:01:b9:8c:3d:d8:ea:46:27:fb:b1:86:58:bb:
         46:b5:b6:5a:f9:8d:fe:e7:03:c9:b5:4c:0a:df:68:53:89:da:
         76:a6:e4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:43:47 2026 by rpki-client