Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft
File:                     rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft (raw, json)
Hash identifier:          1DzfNi9j8jq7yh7cvv0Q74mNKSf5rcsWIyb7I1Ax7EU=
Subject key identifier:   03:F7:5D:3D:9B:FC:D3:7E:CF:94:0B:28:95:46:43:DF:4D:1E:6F:EE
Authority key identifier: AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F
Certificate issuer:       /CN=A918EBC3/serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F
Certificate serial:       0966
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft
Manifest number:          095C
Signing time:             Sun 04 Oct 2026 20:10:42 +0000
Manifest this update:     Sun 04 Oct 2026 20:10:41 +0000
Manifest next update:     Sun 11 Oct 2026 20:10:41 +0000
Files and hashes:         1: rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl (hash: 3TjbU+K8PqQo25r9vzd/XwwqHDcvqA/aciXsLLTDuI4=)
                          2: 7CDBE740C7FD11EAB795396AC4F9AE02.roa (hash: h62+VMn+Dt63VlfLK40869a9uvaLhnaJW7JV3wldaEk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl
                          rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 20:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2406 (0x966)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EBC3, serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F
        Validity
            Not Before: Oct  4 20:10:41 2026 GMT
            Not After : Oct 11 20:10:41 2026 GMT
        Subject: CN=6ac2b2c2-5e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:b8:b4:7c:21:c9:06:b2:55:48:41:e9:7c:
                    73:79:5d:6d:30:b8:15:22:ed:f3:c8:e4:94:10:54:
                    a2:b7:4e:e6:fa:fa:f1:b6:3f:d6:bc:3a:12:fe:cd:
                    28:db:2a:f6:a7:f4:8a:c9:2f:35:2a:ac:c8:6b:31:
                    d6:1a:e6:4e:cf:c6:ae:f2:5b:34:f0:af:7e:a4:99:
                    5a:60:d2:d2:5e:04:6f:42:5e:2c:ee:f2:49:45:76:
                    01:c1:08:fb:58:c3:ab:15:89:a2:08:c8:22:11:a1:
                    2a:61:79:3f:67:89:8d:92:8f:9e:6b:02:87:15:61:
                    66:7d:7e:1f:0d:77:cb:ef:af:b9:79:d4:c2:2e:ce:
                    b3:63:ee:1f:38:1d:b7:0a:d3:7b:11:88:f9:61:39:
                    a3:a7:a6:27:42:1e:19:5a:44:f6:4a:3b:db:fd:d0:
                    fd:60:f2:fd:7e:a2:92:1b:9c:63:9f:cb:c4:ab:49:
                    2f:79:5b:c9:2c:0a:e2:80:34:e2:db:01:76:cf:4d:
                    63:02:e2:7f:64:5f:54:5d:f4:18:b8:88:a8:ea:bf:
                    5d:72:f2:92:2f:5a:76:e2:5b:31:45:ba:06:f6:d9:
                    e2:c3:80:34:4b:18:c8:e7:5c:7c:8c:b0:60:69:25:
                    48:ba:64:ba:6f:5e:e7:4c:59:6f:28:d8:d0:f8:c2:
                    91:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F7:5D:3D:9B:FC:D3:7E:CF:94:0B:28:95:46:43:DF:4D:1E:6F:EE
            X509v3 Authority Key Identifier:
                keyid:AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:8b:ba:dd:0d:bf:da:15:45:9f:aa:a9:6e:8f:af:db:92:05:
         4c:c4:48:41:69:e8:d4:ff:7e:1e:6e:a6:2b:5c:3a:5d:16:82:
         4e:46:5b:6e:5a:08:5d:81:16:a5:20:fa:15:02:6b:11:40:52:
         a6:4a:19:c7:a7:d9:db:cd:e6:dc:b9:f1:7b:aa:e8:b3:1a:7a:
         89:fb:e6:a1:ea:ca:da:e8:56:6e:16:63:61:e2:e4:f1:bf:a2:
         bb:6c:1f:69:2d:61:19:dd:6f:86:99:bf:7b:eb:97:50:cf:9e:
         bc:4d:19:8c:c1:53:da:eb:d6:2a:b0:de:11:c9:15:46:c9:ab:
         00:a8:0e:e9:81:06:f3:53:29:3d:49:ef:cf:37:5e:16:ab:cf:
         f8:b9:c5:91:19:1e:00:9d:ec:c9:c3:9e:3b:12:e2:59:c5:98:
         95:c6:99:3e:06:15:3a:b9:c6:e2:91:74:92:55:b2:15:20:a3:
         78:2d:96:ae:0d:78:a5:56:93:f2:24:99:bc:02:ca:f5:d8:cb:
         35:ea:d0:e6:1c:d0:25:d8:76:22:ea:c0:0c:95:d0:cf:03:9a:
         fc:8b:4c:f3:aa:0a:ea:03:f5:8c:f3:6b:e8:ec:97:1d:fe:c4:
         40:a5:d1:ae:e4:e1:00:df:a8:db:53:4c:8c:f3:9a:25:0b:34:
         0a:4f:47:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:36:29 2026 by rpki-client