Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
File:                     1jZSRQ6nVZE88xr8-popIaSK4aQ.mft (raw, json)
Hash identifier:          HSPado+q3GTrFdmYf/pM/N3LzQ+qoxSlPu1Z0fv6tLQ=
Subject key identifier:   7D:A6:9E:F6:7E:6F:60:9F:3F:11:C8:BF:91:7E:38:ED:9E:E6:C1:CF
Authority key identifier: D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4
Certificate issuer:       /CN=A917BB1B/serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4
Certificate serial:       04F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
Manifest number:          04EA
Signing time:             Mon 12 Oct 2026 23:51:55 +0000
Manifest this update:     Mon 12 Oct 2026 23:51:55 +0000
Manifest next update:     Mon 19 Oct 2026 23:51:55 +0000
Files and hashes:         1: 1jZSRQ6nVZE88xr8-popIaSK4aQ.crl (hash: uKdUz+evQ6RzKlOFGscXNxx808/va0YVtQbPpK1I594=)
                          2: E69DB7E67F7911EC86DE4B56C4F9AE02.roa (hash: 53xSQQ9Bxh94fQZ470RfHLjvIXQRf/E6MeWzNjwS2HI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl
                          rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 16:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1267 (0x4f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BB1B, serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4
        Validity
            Not Before: Oct 12 23:51:55 2026 GMT
            Not After : Oct 19 23:51:55 2026 GMT
        Subject: CN=6acd729b-762d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b5:87:f2:f8:63:c4:4b:46:f7:07:97:76:58:
                    e9:7b:d6:c0:ca:fb:84:b1:7b:bc:cc:a1:54:5f:2d:
                    d4:0b:82:e7:e1:ba:8f:7a:81:92:80:23:80:7e:a2:
                    22:30:0b:6a:25:2b:9c:b5:e8:65:e2:09:84:5e:e9:
                    c2:a9:e8:8a:3d:f5:d5:81:e7:7c:1f:a0:4d:c6:d7:
                    ef:47:32:58:d9:c6:ec:42:43:f2:0a:ac:9e:2a:9a:
                    46:59:6f:85:75:1b:59:05:b6:58:23:6f:bd:77:74:
                    78:1e:67:05:0d:48:8b:cc:37:60:fc:d2:02:c5:a5:
                    51:cd:14:91:cd:7f:2b:30:e2:7e:30:50:00:0c:c0:
                    fd:a9:8d:17:ba:13:76:b6:ab:9a:ed:18:6d:8f:6a:
                    cb:9f:7a:7d:2f:8f:82:db:93:43:d0:ec:b1:8d:52:
                    f4:db:cc:f0:53:e7:57:86:74:37:26:b4:ea:5e:8a:
                    e0:eb:0b:cf:ac:9f:2a:c1:d9:d8:7a:43:21:c3:a1:
                    06:27:46:fe:84:76:8e:94:cc:79:d8:06:85:45:b0:
                    fd:15:28:48:6f:c5:58:fe:c6:8b:f4:08:32:41:c5:
                    fc:6a:1c:3a:6e:84:df:22:f8:94:49:fd:a8:04:cd:
                    f8:35:31:4e:ea:42:7c:a0:51:ab:b6:2b:f5:9f:58:
                    ef:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A6:9E:F6:7E:6F:60:9F:3F:11:C8:BF:91:7E:38:ED:9E:E6:C1:CF
            X509v3 Authority Key Identifier:
                keyid:D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:59:89:f5:c2:a3:fd:5e:5a:b7:70:c6:c0:cf:0f:21:ef:89:
         ce:70:7a:e1:35:20:44:a6:a9:ed:ab:a0:0b:c5:6d:e4:10:52:
         d0:0f:bf:16:b4:d0:6b:a8:e2:86:f0:36:64:6f:44:7d:77:25:
         f0:25:d2:27:f8:44:3f:1c:66:0f:b3:e3:17:b6:1a:74:f2:f4:
         1d:94:75:9c:22:88:44:30:b9:38:e8:f6:83:7e:d9:0b:2d:99:
         8a:8c:76:3f:27:a6:e5:3a:09:e8:0d:2c:fa:7a:55:c4:19:36:
         e3:57:a2:2b:10:ff:dc:95:0e:b7:04:8c:9f:f1:7d:b2:44:a0:
         19:ff:45:cb:a7:73:03:34:aa:10:01:e0:89:9c:a5:77:9f:40:
         af:ce:75:d9:69:fc:a6:a9:28:c5:18:46:f3:f6:66:5a:d2:60:
         27:4e:9c:fd:d9:c4:9f:24:72:17:47:d7:66:ff:c4:af:f6:ee:
         b1:29:ed:8e:22:af:c4:c1:7b:14:5b:47:8a:83:90:c2:14:40:
         f5:0c:0e:86:72:8c:27:8d:36:03:ac:8f:3b:16:07:77:62:c5:
         4c:d8:ee:74:7a:4d:9b:92:2e:43:0d:3c:ac:49:2b:1e:29:d2:
         9c:16:dc:12:53:b0:99:2a:ea:68:03:2e:1b:07:4b:bb:50:0d:
         62:85:cf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:39:53 2026 by rpki-client