Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
File:                     em4wIQZCz0-7QXPzUnSOHqXCx8M.mft (raw, json)
Hash identifier:          c0JTTYXMcS5bLrOXnpOOfXluK7jAZs5eo6adHt25Iio=
Subject key identifier:   36:99:E8:18:B3:DA:A1:FC:58:9A:F7:F0:75:E1:CA:60:6F:FF:70:64
Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3
Certificate issuer:       /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3
Certificate serial:       194B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
Manifest number:          1922
Signing time:             Sat 10 Oct 2026 16:27:42 +0000
Manifest this update:     Sat 10 Oct 2026 16:27:41 +0000
Manifest next update:     Sat 17 Oct 2026 16:27:41 +0000
Files and hashes:         1: em4wIQZCz0-7QXPzUnSOHqXCx8M.crl (hash: +7H6b7a9jvYz/T5bw7guQ25uaDRts7JyNDtf+150A9M=)
                          2: F49AA4A889C211EEADFCF27CC4F9AE02.roa (hash: u9b8xi9VJzwkucgePmf7GxJbrJFJHrJEf5pCf7m+hrw=)
                          3: 708DE4A87AB011E8B7AB0E53C4F9AE02.roa (hash: 0s3JTAw/4XShDWFvdlukgZX7zCTBz3Ez8ZKgigq0we4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl
                          rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 16:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6475 (0x194b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D9FC, serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3
        Validity
            Not Before: Oct 10 16:27:41 2026 GMT
            Not After : Oct 17 16:27:41 2026 GMT
        Subject: CN=6aca677e-6328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:09:c0:56:c5:3e:0d:2b:d6:d7:ed:a2:23:8b:
                    09:c2:0c:da:ba:f5:b2:70:8c:22:31:83:53:27:0a:
                    49:40:64:10:80:4d:d4:97:ec:74:25:d8:0c:ac:ee:
                    0b:a4:df:84:c4:62:39:bc:fc:1f:ee:72:63:e9:ea:
                    4e:3c:5f:f5:51:81:b4:d3:02:f7:71:9c:2e:10:88:
                    22:cf:15:8e:40:2d:31:3c:04:f7:44:75:38:35:2c:
                    3e:2a:10:18:ed:d3:bf:b2:53:cf:0e:ac:cb:f1:b5:
                    f0:44:9c:00:b6:23:10:06:04:65:1b:f9:75:dd:f8:
                    8d:2c:ac:08:af:73:38:5e:80:1d:6a:23:7c:ef:14:
                    e4:9d:80:c2:fc:29:e2:75:8b:c7:31:c5:9c:e7:cd:
                    ff:3a:e7:66:90:2e:2a:c9:79:74:a6:b9:d7:85:4f:
                    07:91:77:60:9e:90:f1:2b:4e:38:c2:0f:dc:ca:d9:
                    20:19:b9:0d:95:f6:0d:7d:b0:dd:5a:bb:5d:d7:e3:
                    77:29:a9:df:7d:28:55:55:3a:f5:0e:c6:97:d4:d1:
                    5c:a1:6f:de:cd:82:17:15:32:af:2c:75:b4:21:d1:
                    7e:a8:fa:94:94:63:43:ec:2d:de:79:43:7f:65:27:
                    ff:cb:12:81:0b:a5:98:d2:de:6b:fa:63:0c:b5:7d:
                    64:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:99:E8:18:B3:DA:A1:FC:58:9A:F7:F0:75:E1:CA:60:6F:FF:70:64
            X509v3 Authority Key Identifier:
                keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:94:12:f9:42:eb:d6:ba:a4:83:ce:59:a6:f6:7f:48:f2:b0:
         ae:93:25:d5:be:41:1d:e7:98:5b:9e:db:94:af:3c:42:32:e1:
         33:f7:19:ae:a7:29:8a:9a:f9:d2:68:d1:f4:7b:d1:c2:30:ac:
         01:93:f4:20:5b:00:bb:fe:66:d5:cd:98:dc:29:a9:ff:9e:6a:
         1f:84:f6:8c:92:f3:3b:d6:c1:0c:97:8c:1b:d3:90:24:f6:8b:
         6d:3f:41:16:51:9f:56:a7:06:33:5c:e6:4b:77:c3:37:38:96:
         c0:d2:d3:21:6d:1d:49:0f:ce:1e:38:c5:d6:fd:41:d9:d0:fe:
         cb:ee:5f:f2:6e:d7:bc:88:78:61:0e:7b:dd:d2:2a:81:94:40:
         f4:63:a5:2c:84:85:e1:b5:86:9c:63:be:6f:bd:d5:26:0e:0b:
         28:16:13:00:6c:80:64:71:b0:eb:8f:69:34:f4:d6:f4:fe:4e:
         88:63:4d:a2:7c:53:90:ff:d4:85:b7:2b:cd:38:39:69:3d:b7:
         2c:d1:ff:3b:ff:49:08:7f:76:48:e8:e6:97:07:2b:17:40:13:
         ee:e6:98:f5:de:d8:18:8b:97:cb:52:59:c1:0a:79:76:44:f0:
         1c:b1:77:df:79:78:5a:76:87:d3:06:c8:57:f2:ed:9b:4b:f6:
         40:cc:c8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:38:02 2026 by rpki-client