Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
File:                     KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft (raw, json)
Hash identifier:          B6ZmaYOUTguhYRhiHLTofzK26Vw0qdQ7zl4acXCG7Og=
Subject key identifier:   1C:33:5C:47:D9:2B:8C:2C:F1:72:DE:5E:6F:7C:54:A2:87:F2:E8:62
Authority key identifier: 28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D
Certificate issuer:       /CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
Certificate serial:       0C17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
Manifest number:          0C0C
Signing time:             Sat 10 Oct 2026 18:57:14 +0000
Manifest this update:     Sat 10 Oct 2026 18:57:13 +0000
Manifest next update:     Sat 17 Oct 2026 18:57:13 +0000
Files and hashes:         1: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl (hash: yOx/9nx6lkBrMYOiLEjRRqZ+nHXUDLVchyocHhn3hj8=)
                          2: 784507FC9F4211ECB5BC4D14C4F9AE02.roa (hash: HUSLKFky67fxy4K/r8HyQudWgBuSg6q+GxzLOv9Syp4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl
                          rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 18:57:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3095 (0xc17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195393, serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
        Validity
            Not Before: Oct 10 18:57:13 2026 GMT
            Not After : Oct 17 18:57:13 2026 GMT
        Subject: CN=6aca8a8a-b1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6e:61:85:e1:7b:bb:cb:48:d8:87:c6:75:0c:
                    68:23:96:ab:b2:28:59:b9:52:96:40:d0:63:2c:3f:
                    05:f5:16:ae:c5:7f:37:d4:b3:49:ef:a4:78:90:57:
                    9f:21:51:16:c2:b1:42:ea:ee:c9:d6:d3:a2:d1:a8:
                    fa:2e:d1:50:6e:ab:4a:9c:bb:ce:73:ba:72:fd:65:
                    24:f8:6a:2e:f9:3a:e4:18:84:2a:6e:b7:20:ff:ba:
                    4e:6d:65:b5:cc:21:38:31:57:74:f9:98:77:7c:ac:
                    9c:43:4b:66:53:2d:19:a9:6a:09:3d:49:69:17:cf:
                    72:d0:c0:d5:98:ef:93:5a:0a:b5:28:e6:9f:b6:48:
                    4b:13:d9:41:32:a7:a1:d4:82:49:94:8d:8f:ac:46:
                    56:6d:b0:f2:34:da:7d:8f:a5:c1:10:bf:c0:a7:ad:
                    d4:f9:da:d2:48:d5:88:a1:d4:92:d3:f4:45:86:7f:
                    15:c3:1e:ca:8e:7a:31:58:85:b8:07:3d:f0:fd:25:
                    f5:0b:1b:35:6b:29:5d:66:31:21:62:b9:1a:46:37:
                    c2:a4:47:ab:3b:27:cf:cb:e6:db:65:fe:3c:9a:92:
                    e9:67:b4:f9:2b:b3:5f:bf:b8:66:3c:fe:98:43:48:
                    93:73:ea:ab:ce:05:dc:b6:d2:59:38:d6:02:36:bb:
                    f7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:33:5C:47:D9:2B:8C:2C:F1:72:DE:5E:6F:7C:54:A2:87:F2:E8:62
            X509v3 Authority Key Identifier:
                keyid:28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:4b:f7:19:dc:7d:62:58:7b:0b:61:90:db:f4:dd:b0:72:7a:
         b9:b6:e8:54:24:b2:37:ed:01:4f:a8:cd:62:4e:63:f0:19:e5:
         b8:b7:93:a0:81:8e:a4:44:35:12:d4:b0:fa:35:f4:ca:80:b4:
         b7:cb:99:f6:d4:5f:46:84:f7:c0:cd:71:a0:e1:b4:db:7b:83:
         7b:fd:a6:3e:5a:76:b5:08:15:b5:5e:8f:9c:b3:91:68:64:56:
         f4:a5:5d:40:d1:c4:3c:9b:14:9a:fc:e6:a6:6a:d6:a9:fb:0a:
         0e:ff:53:71:1c:55:02:60:d4:c8:46:bb:47:83:71:25:ab:21:
         9a:2d:31:fe:99:b2:16:7e:7d:1a:1c:3b:27:44:71:a4:f8:7b:
         e5:0c:8c:b6:36:f0:eb:fc:08:31:d4:ea:11:d2:85:dc:b5:9d:
         eb:54:6a:c5:09:a9:0c:7c:33:44:04:db:1d:ae:a7:b9:37:36:
         03:ee:8d:1c:a1:3a:b4:75:2a:8e:40:c1:4a:41:5f:a6:96:6d:
         32:41:f1:05:63:77:dc:2b:3a:6f:4a:80:8a:42:e3:24:a1:b9:
         03:c8:50:93:85:43:95:d9:6a:3b:80:8c:fb:4e:f7:9f:d1:b8:
         51:45:53:b7:89:70:29:c5:21:65:39:33:ee:df:5f:6d:58:a6:
         e9:b5:d7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:54:06 2026 by rpki-client