Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
File:                     tSxU1GporezDfV9vJyKMbepz6Fw.mft (raw, json)
Hash identifier:          DW3UtRMQ7kp7X5cYvk+h/Qj9FckNcwX0ilBl0CzSJew=
Subject key identifier:   E2:DE:19:5E:31:99:E3:AB:98:F6:14:ED:A5:E9:84:E8:AB:6C:64:6B
Authority key identifier: B5:2C:54:D4:6A:68:AD:EC:C3:7D:5F:6F:27:22:8C:6D:EA:73:E8:5C
Certificate issuer:       /CN=A918E79C/serialNumber=B52C54D46A68ADECC37D5F6F27228C6DEA73E85C
Certificate serial:       0200
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
Manifest number:          01FB
Signing time:             Thu 15 Oct 2026 04:06:11 +0000
Manifest this update:     Thu 15 Oct 2026 04:06:10 +0000
Manifest next update:     Thu 22 Oct 2026 04:06:10 +0000
Files and hashes:         1: tSxU1GporezDfV9vJyKMbepz6Fw.crl (hash: ThRPZetqqFpEIjgw5ht/AofGhRi7+xAOHBD1YRLZNrU=)
                          2: 28C6AB84C0E411EEAFFB100BC4F9AE02.roa (hash: Lqj3OiAEZ1NUj5c3pIE9yhxwkfOhtjVIBdNf9vQb1eQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.crl
                          rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Oct 2026 04:06:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E79C, serialNumber=B52C54D46A68ADECC37D5F6F27228C6DEA73E85C
        Validity
            Not Before: Oct 15 04:06:10 2026 GMT
            Not After : Oct 22 04:06:10 2026 GMT
        Subject: CN=6ad05132-6fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:92:4d:e7:47:ba:c1:21:dc:f3:ff:44:34:d9:
                    93:e1:98:db:34:7b:c9:5e:0c:d7:53:f6:a0:11:a0:
                    e1:a8:00:3a:f3:bf:36:9f:41:06:16:92:2e:c9:78:
                    4b:4b:bc:9b:88:32:b0:1a:f4:08:73:bc:52:3a:68:
                    ad:45:2d:7d:73:63:79:39:36:34:11:06:1c:04:51:
                    a3:e7:27:4b:bf:36:e3:de:23:2b:0d:23:b2:68:49:
                    31:52:58:f3:ab:09:3b:99:1c:df:b2:c4:a1:26:cd:
                    4e:a7:67:33:57:18:be:50:0d:ca:ea:ae:2c:b4:fb:
                    d2:24:a6:9e:df:1f:c6:71:c6:9d:9e:72:41:56:5c:
                    45:76:da:f8:77:cb:d2:df:02:bd:b8:05:63:8d:c0:
                    87:d1:7f:dc:99:c6:2d:b9:e6:0f:c2:f8:78:35:c5:
                    d6:35:44:52:00:ec:92:3d:3e:11:d5:f5:06:52:a6:
                    15:68:d6:5a:9a:0b:58:ea:47:44:b7:fb:bc:b7:99:
                    ee:a8:b6:6d:32:34:8c:99:1f:7a:01:ca:04:3f:87:
                    bd:d1:1f:e5:5d:67:33:00:ff:3c:02:a7:ac:24:69:
                    bd:13:fc:16:e0:2d:f0:69:3d:87:3c:dd:d4:9c:84:
                    40:4c:0a:b4:a5:26:f4:98:c6:16:24:52:4f:ca:05:
                    37:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DE:19:5E:31:99:E3:AB:98:F6:14:ED:A5:E9:84:E8:AB:6C:64:6B
            X509v3 Authority Key Identifier:
                keyid:B5:2C:54:D4:6A:68:AD:EC:C3:7D:5F:6F:27:22:8C:6D:EA:73:E8:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:26:d8:14:c3:2a:06:df:66:70:ef:b3:6c:57:ef:2c:5d:db:
         f7:7f:61:be:17:56:4c:67:cf:81:73:7e:2d:8b:1f:ae:79:dc:
         aa:47:01:78:dc:37:57:31:71:63:96:04:15:3f:42:a1:70:ca:
         93:e8:3b:0e:42:c1:b2:72:3b:35:68:6e:bb:a2:d4:c4:b4:c0:
         71:41:b4:2f:3c:4c:29:9f:98:23:3c:98:65:31:a9:c9:37:73:
         cd:cf:cc:78:6b:da:c8:93:5c:95:ac:f8:4a:43:f4:1c:d9:12:
         6b:a3:25:e9:62:0d:40:d9:df:e6:ad:0a:16:35:c5:c4:4c:a2:
         40:80:c1:d0:c2:e7:b7:d4:ed:0e:ef:b2:d9:1a:b9:58:00:28:
         5f:cb:d3:32:9a:6f:71:1b:c9:74:5a:47:f3:fb:64:ec:94:ed:
         b8:de:25:9e:79:59:06:9f:4a:6e:c0:7a:63:cc:75:48:df:59:
         f5:19:ce:d0:1f:c5:cc:f7:98:6d:3e:e6:b3:39:6d:78:8e:ea:
         a8:54:2a:36:b7:49:92:ea:d1:ac:9a:fe:00:4d:83:59:59:21:
         f4:06:69:36:ad:f1:36:a4:32:e0:21:3a:cc:6e:6f:a8:8c:98:
         e2:8d:89:0c:80:76:85:ed:27:e2:bb:41:38:4f:20:e1:8a:e9:
         b7:1e:94:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:13:43 2026 by rpki-client