Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D6B7/E70AE898B1DD11F1980E836789EE528E/u_Gz58XB6yDJVjW4jkE07DamSWA.mft
File:                     u_Gz58XB6yDJVjW4jkE07DamSWA.mft (raw, json)
Hash identifier:          nLZe8uUYNJiZx2zBwlRonaT9j/5YZqweNePAugO53gw=
Subject key identifier:   7D:75:F1:DD:79:0D:45:2E:D8:42:EC:86:D9:B1:0C:41:EE:AE:57:C4
Authority key identifier: BB:F1:B3:E7:C5:C1:EB:20:C9:56:35:B8:8E:41:34:EC:36:A6:49:60
Certificate issuer:       /CN=A918D6B7/serialNumber=BBF1B3E7C5C1EB20C95635B88E4134EC36A64960
Certificate serial:       1F
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/u_Gz58XB6yDJVjW4jkE07DamSWA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D6B7/E70AE898B1DD11F1980E836789EE528E/u_Gz58XB6yDJVjW4jkE07DamSWA.mft
Manifest number:          16
Signing time:             Sat 10 Oct 2026 14:50:18 +0000
Manifest this update:     Sat 10 Oct 2026 14:50:18 +0000
Manifest next update:     Sat 17 Oct 2026 14:50:18 +0000
Files and hashes:         1: u_Gz58XB6yDJVjW4jkE07DamSWA.crl (hash: Z2nvCys9wRTqznUpDXJj/41qVyLpyBp5Nm0FKqzc1qY=)
                          2: 1DDD4B98B33911F188960BDC6E11F970.roa (hash: Y06m6O2fat+rHDC1TS4GH3nHBalCYBRPLr4LVC7TfN8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D6B7/E70AE898B1DD11F1980E836789EE528E/u_Gz58XB6yDJVjW4jkE07DamSWA.crl
                          rsync://rpki.apnic.net/member_repository/A918D6B7/E70AE898B1DD11F1980E836789EE528E/u_Gz58XB6yDJVjW4jkE07DamSWA.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/u_Gz58XB6yDJVjW4jkE07DamSWA.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D6B7, serialNumber=BBF1B3E7C5C1EB20C95635B88E4134EC36A64960
        Validity
            Not Before: Oct 10 14:50:18 2026 GMT
            Not After : Oct 17 14:50:18 2026 GMT
        Subject: CN=6aca50aa-4100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:14:f6:24:c0:74:67:65:9a:31:0a:67:26:
                    76:c5:fa:f3:ff:8e:ad:11:33:8d:24:c1:79:4b:29:
                    a0:15:09:fa:af:c8:04:2a:3e:26:9a:9e:65:d7:92:
                    8e:59:ca:90:b5:02:cb:4a:77:c8:23:a8:7c:62:36:
                    b1:d3:26:95:1c:20:9e:ac:10:7d:14:d4:5e:ff:db:
                    fa:af:a1:61:a1:31:46:c4:08:a8:68:82:94:69:0f:
                    6d:a4:33:74:26:79:7b:d8:05:d9:b4:86:8f:53:b2:
                    e7:3e:f5:9c:38:6c:b5:68:b9:c0:12:63:63:fd:be:
                    b1:e9:b9:29:f2:ce:2d:8a:ee:53:92:61:69:88:60:
                    bb:6e:7a:42:3c:5a:33:6a:cc:b4:90:f9:8b:59:64:
                    e9:79:cd:75:8c:64:d9:98:d0:db:98:75:fd:cc:6e:
                    95:2d:75:9c:65:ff:49:c5:fa:d2:70:f8:35:71:9d:
                    89:de:0c:f1:39:27:5c:4c:8d:e9:59:97:ad:7e:e7:
                    33:c5:6d:ba:83:ce:56:20:b2:8d:bb:53:fc:1a:4d:
                    48:49:6e:39:c8:6a:3d:82:94:da:31:3d:ec:cb:7c:
                    36:41:ca:c6:8e:60:dd:c6:96:c3:e2:d9:8a:c2:f1:
                    f9:08:7a:7b:82:1f:6a:6c:88:4d:9f:84:d2:b3:65:
                    26:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:75:F1:DD:79:0D:45:2E:D8:42:EC:86:D9:B1:0C:41:EE:AE:57:C4
            X509v3 Authority Key Identifier:
                keyid:BB:F1:B3:E7:C5:C1:EB:20:C9:56:35:B8:8E:41:34:EC:36:A6:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D6B7/E70AE898B1DD11F1980E836789EE528E/u_Gz58XB6yDJVjW4jkE07DamSWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/u_Gz58XB6yDJVjW4jkE07DamSWA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/E70AE898B1DD11F1980E836789EE528E/u_Gz58XB6yDJVjW4jkE07DamSWA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:2d:45:72:3a:06:34:71:7f:55:fc:cb:60:cd:c3:12:43:36:
         7e:7f:ac:42:7a:39:81:24:b6:27:bb:f2:dc:9d:88:12:24:a6:
         f2:cc:82:71:47:c7:22:47:02:23:1c:17:df:d1:0b:dc:1a:5f:
         d3:27:cd:ff:6f:1f:93:3c:b1:13:59:f0:ce:b7:70:e7:95:cd:
         6f:a9:eb:21:e9:49:6c:c0:ea:dc:54:21:08:83:59:b5:03:cd:
         87:e5:88:83:bd:21:74:bd:02:d1:2d:48:bb:83:57:fa:8a:75:
         ba:5b:30:87:d7:4c:82:ca:2a:44:da:39:cc:b5:dc:d2:8a:6f:
         28:9a:3f:2b:e7:d9:f0:a1:ec:a2:2f:a1:cc:2a:ed:8d:ab:12:
         02:0c:ba:4d:ae:27:6a:3a:3e:4d:c9:bb:22:aa:51:0d:5a:2a:
         a9:9e:18:bc:7e:14:c1:41:39:ca:eb:b3:ec:89:85:0c:48:dd:
         db:42:bf:a2:99:b3:ed:7d:01:cd:9c:b6:a6:1e:a1:f8:00:b6:
         70:b1:fc:96:5b:89:47:8d:f8:29:2b:a5:ba:f2:47:16:58:de:
         9f:b4:16:b5:3f:37:21:fe:67:77:fa:4a:e4:68:bf:76:9a:c0:
         cf:c2:dc:ea:cf:29:4a:bc:2e:60:8e:89:fe:4e:c6:40:85:a1:
         1d:83:6a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:49:40 2026 by rpki-client