Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
File:                     tKlqre7ce-3VfWL8mknqCz_29Qw.mft (raw, json)
Hash identifier:          TNPPfdnjvCNYBeau19fyoKfuFUvrmDCc2t9g7owyQzU=
Subject key identifier:   1D:3B:30:76:6E:FE:4B:5A:7B:A9:CF:A9:61:28:54:F5:C1:C8:83:A7
Authority key identifier: B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C
Certificate issuer:       /CN=A916A983/serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C
Certificate serial:       138F
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
Manifest number:          1383
Signing time:             Mon 12 Oct 2026 17:02:26 +0000
Manifest this update:     Mon 12 Oct 2026 17:02:26 +0000
Manifest next update:     Mon 19 Oct 2026 17:02:26 +0000
Files and hashes:         1: tKlqre7ce-3VfWL8mknqCz_29Qw.crl (hash: 7RPIrt34tMOpylWxAx5uXRx37QUZCZ7q9DSKAEmorwM=)
                          2: 1C839F861BA111EA8BDD6114C4F9AE02.roa (hash: OeZ1QAdH9ELtz6ot25I1yxnNo5ZrJkrg9RULBUY+y7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 17:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5007 (0x138f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983, serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C
        Validity
            Not Before: Oct 12 17:02:26 2026 GMT
            Not After : Oct 19 17:02:26 2026 GMT
        Subject: CN=6acd12a2-8509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5f:f7:62:5e:f7:c6:d6:8d:80:be:18:ee:ba:
                    93:9e:86:02:1e:e4:b4:da:52:5f:3a:2c:88:5c:44:
                    ba:27:48:0e:c0:33:c5:63:19:9a:1c:8b:17:ac:16:
                    b4:94:3c:91:e2:39:c0:c3:a8:3f:33:b4:fa:78:4b:
                    e5:30:0e:69:28:b2:9c:b5:d7:fe:dc:0e:47:ac:a0:
                    d7:74:3f:af:33:d6:8d:59:cf:2a:d6:45:88:40:16:
                    fd:71:8c:39:6b:e9:e0:a8:1b:e0:4c:3f:85:ee:75:
                    de:5e:6c:cf:24:60:5e:79:da:1e:b9:95:49:95:20:
                    05:41:65:94:18:b2:d6:bb:5c:42:63:56:d4:29:17:
                    c0:a3:db:07:6a:a4:98:8c:53:8f:85:33:33:75:20:
                    71:fe:d8:a7:1a:10:3b:42:bb:c6:17:d6:dc:8d:63:
                    bb:8f:d7:79:cf:2c:40:8c:0c:c5:f5:62:0d:dd:58:
                    34:a0:25:d7:5e:36:17:d1:95:41:34:28:10:38:44:
                    2d:7b:50:a7:71:f7:d9:ac:84:4b:8c:a3:dc:3a:28:
                    9f:96:9d:ae:84:67:d4:da:3f:b4:d8:e9:57:a3:a2:
                    fe:87:b8:b8:f0:ac:5e:cb:9e:ae:3e:6c:34:db:f4:
                    51:dd:74:12:5e:76:ff:77:b2:70:7b:c2:8c:ce:ca:
                    b8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3B:30:76:6E:FE:4B:5A:7B:A9:CF:A9:61:28:54:F5:C1:C8:83:A7
            X509v3 Authority Key Identifier:
                keyid:B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:32:8b:94:1b:c2:b2:38:14:f3:33:61:03:56:18:e2:a0:77:
         62:a3:3b:60:71:74:16:ef:47:85:af:93:c3:bb:7b:a7:f8:4f:
         ce:bc:22:ae:7b:0f:c7:96:43:48:14:b7:20:82:07:08:e2:cf:
         82:74:0f:04:57:2e:a9:b4:78:b2:03:0f:9b:0f:e8:92:9a:34:
         28:fc:52:be:1c:3f:23:fc:f5:1c:36:cd:71:c4:fd:80:56:ec:
         3c:52:c1:87:5c:d9:41:1e:9b:b9:da:99:18:0c:be:90:cd:9f:
         e7:fa:af:57:f3:58:5f:f7:68:4a:01:e0:b2:70:d4:47:a3:b6:
         e0:3d:b1:4a:5b:67:e7:a3:f0:39:65:7a:55:2c:0c:ca:c7:10:
         d2:ee:0d:87:39:3e:a2:bc:b4:0e:d7:2c:65:07:d3:0b:56:a3:
         8b:85:94:bd:ea:db:0c:32:9f:25:a8:f5:31:0c:8e:6c:56:d0:
         15:42:4b:d6:57:94:dd:d5:18:ed:2c:fd:53:ae:b2:01:43:d1:
         10:69:b3:db:c7:b8:0d:61:8b:1d:de:98:a9:4e:1c:99:4e:f0:
         7a:27:67:f5:be:a9:d3:94:a9:f1:c2:d9:13:c1:f3:39:95:63:
         4e:6c:41:e6:50:3d:e4:09:52:7a:cb:44:2f:d1:08:52:53:fe:
         80:10:5b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:25:14 2026 by rpki-client