Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
File:                     dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft (raw, json)
Hash identifier:          4l7NiRoQoBiKpiwoROj1gT8TyG1Bl9JcCkdKUnfBHGI=
Subject key identifier:   F5:27:B8:E8:D6:1B:4F:93:0F:5A:BF:53:DC:60:DD:0E:08:70:76:C8
Authority key identifier: 74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13
Certificate issuer:       /CN=A9185259/serialNumber=745036097429CC1AC76C4C99898D06F83E075C13
Certificate serial:       C8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
Manifest number:          C4
Signing time:             Fri 09 Oct 2026 07:31:19 +0000
Manifest this update:     Fri 09 Oct 2026 07:31:19 +0000
Manifest next update:     Fri 16 Oct 2026 07:31:19 +0000
Files and hashes:         1: dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl (hash: II4uDTt5TzYC9RqNYF5cHj0+MxskmP7oLviMnBuZb64=)
                          2: 991FC9309CFA11F08F0A1549C4F9AE02.roa (hash: u3oEvbx75itItu1LUPoKhhJ7vNGvSPwwEcVgmBYaNDM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl
                          rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 07:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185259, serialNumber=745036097429CC1AC76C4C99898D06F83E075C13
        Validity
            Not Before: Oct  9 07:31:19 2026 GMT
            Not After : Oct 16 07:31:19 2026 GMT
        Subject: CN=6ac89847-8922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4f:2c:7d:41:e5:08:e3:34:f2:4c:fd:dd:e3:
                    e9:82:ec:a6:06:34:d5:5e:90:75:7e:6e:f9:be:e3:
                    28:fc:13:25:b3:ce:64:05:05:31:e2:f3:59:48:13:
                    29:06:24:89:86:ef:77:00:9c:54:52:01:97:43:93:
                    09:4d:59:56:b9:27:04:df:e6:10:08:93:fc:fd:c9:
                    55:e5:5d:03:0a:fb:3b:65:68:bd:72:b2:af:42:8c:
                    ac:a4:e6:eb:39:0d:a4:d8:9f:66:99:00:60:fb:10:
                    86:03:b6:22:bd:89:08:06:76:cf:e7:d8:b5:61:a2:
                    d8:21:58:83:28:0c:13:6d:de:c0:c3:a7:a3:7b:bc:
                    21:07:e1:c1:fd:bf:5d:77:92:08:86:96:06:bb:0a:
                    e4:b2:f6:17:12:2b:16:a7:91:99:a9:c7:02:b8:d3:
                    68:99:f4:e1:e4:eb:65:21:fc:be:50:0e:97:73:4c:
                    a8:c2:f5:18:fe:c3:60:44:8c:f5:64:e5:47:11:af:
                    79:e7:ad:af:df:b1:e0:10:07:df:72:a0:bd:f4:5e:
                    cb:d1:bd:58:e6:33:a2:c3:fa:53:64:83:8d:56:ae:
                    79:27:c7:06:b2:c7:d3:06:38:24:01:23:87:d9:a4:
                    6e:26:ba:85:ee:82:5e:8a:6f:eb:ca:90:ef:8a:4a:
                    cc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:27:B8:E8:D6:1B:4F:93:0F:5A:BF:53:DC:60:DD:0E:08:70:76:C8
            X509v3 Authority Key Identifier:
                keyid:74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:22:f1:f3:d8:1a:a1:a3:37:30:09:5b:dd:79:1c:22:e4:a8:
         23:87:cd:da:0c:bf:cd:2b:2e:ac:a0:67:1f:10:3d:69:e0:af:
         f9:a6:05:0e:ae:cf:08:dd:16:83:88:83:22:1f:31:6a:2b:73:
         a6:8e:3a:6a:ff:d5:32:89:8e:a2:c0:d2:44:36:f4:66:e0:4a:
         e8:19:d3:da:a4:63:31:6d:c3:60:85:cb:9c:ea:8c:ad:9b:04:
         a2:fb:1a:98:9a:f6:14:14:e7:06:a7:e2:ab:d4:36:f6:ed:99:
         26:6d:6f:06:c7:40:66:99:e7:6c:f4:54:ed:da:fe:46:37:40:
         dc:40:e4:52:8a:16:4d:3a:8d:de:b2:d3:c5:2f:6d:18:be:58:
         d2:fe:fc:9f:f7:6f:72:9b:86:ab:41:ca:f8:54:e4:cd:a1:dc:
         e0:aa:28:c6:d5:78:46:8b:0c:09:f5:4e:fc:69:da:59:73:37:
         66:cc:62:02:94:9f:cd:58:11:48:94:d2:55:85:51:6e:27:81:
         06:d6:b2:2d:58:ec:bb:f2:69:c8:72:d7:4f:0e:22:f3:7c:3d:
         87:ac:41:68:5f:64:f3:f1:57:59:50:a0:d4:c7:36:1f:81:ea:
         8d:e6:d4:db:57:57:15:3a:39:87:e9:3f:2c:a6:0e:b5:f8:f4:
         f4:24:11:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:35:24 2026 by rpki-client