Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
File:                     cu8y2vToP5AZKWMgh047RFAI7Dk.mft (raw, json)
Hash identifier:          aHL69C9ZJBraQ4cNuzeJuHAmNhmcu1WE0vX8GhA0xWw=
Subject key identifier:   D2:EC:F0:84:28:8A:FA:EB:68:78:26:08:77:54:CB:FC:A3:94:88:8B
Authority key identifier: 72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
Certificate issuer:       /CN=A919ED93/serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
Certificate serial:       0257
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
Manifest number:          0248
Signing time:             Thu 05 Nov 2026 03:16:17 +0000
Manifest this update:     Thu 05 Nov 2026 03:16:17 +0000
Manifest next update:     Thu 12 Nov 2026 03:16:17 +0000
Files and hashes:         1: cu8y2vToP5AZKWMgh047RFAI7Dk.crl (hash: 5XKuXlzrN95L7n7douHy+ZefdSFy9s6MxlU6tez+pFE=)
                          2: 9436AC3668C711EE8C53A031C4F9AE02.roa (hash: UKDPjI9WdhK3TxDp03my1LqNHeP49K9ROo6jRcr9k9A=)
                          3: 94A6144A68C711EE8C53A031C4F9AE02.roa (hash: c2JKhfp9s44ucWPUaCMBJfqkty8QtrYxSxQneezFfq8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl
                          rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 03:16:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 599 (0x257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919ED93, serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
        Validity
            Not Before: Nov  5 03:16:17 2026 GMT
            Not After : Nov 12 03:16:17 2026 GMT
        Subject: CN=6aebf501-93e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5a:c0:a9:2d:d1:c7:27:1b:ba:71:d7:aa:ea:
                    9c:a5:10:72:90:b4:ce:c7:23:9c:27:1c:09:1a:cc:
                    3e:ab:d5:e8:e2:78:67:c6:96:3b:8c:4b:35:fa:2c:
                    a6:eb:66:9e:29:15:ae:7d:83:2a:ad:c1:2a:8c:ec:
                    93:34:b9:00:0e:a3:71:13:75:6c:9c:e6:22:fb:d7:
                    2c:b9:3b:e5:01:4c:f4:a1:38:4d:d5:d8:86:bc:50:
                    da:71:fe:8a:64:93:85:9b:42:bf:85:23:98:85:e9:
                    8c:3f:a8:c9:73:b2:19:11:2f:59:df:34:1e:06:3d:
                    b9:0e:11:f1:f7:40:6e:a8:d5:b4:a8:e3:2d:e4:62:
                    7b:d7:25:35:99:c9:d8:16:3b:8a:9c:bc:0a:7b:cd:
                    15:59:9a:ea:f5:78:82:3f:c8:de:1f:d3:a0:39:68:
                    30:10:85:5c:1b:27:1d:c5:ff:17:70:e7:45:58:6c:
                    38:bf:ea:03:c0:ad:d6:19:44:01:55:a5:7f:7b:08:
                    5a:f2:16:20:97:1a:f6:88:b8:54:60:72:82:84:34:
                    49:e7:9b:2e:fd:6e:a1:f3:7f:2e:8b:b9:4d:9b:89:
                    ac:e7:25:2f:78:79:43:94:83:c7:28:8e:fe:4e:2d:
                    2f:bb:71:31:7e:fe:95:8f:e5:a9:43:f9:ff:c4:90:
                    40:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EC:F0:84:28:8A:FA:EB:68:78:26:08:77:54:CB:FC:A3:94:88:8B
            X509v3 Authority Key Identifier:
                keyid:72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:76:81:a2:a8:d4:c4:b3:64:da:79:42:6e:9b:f0:b9:b3:c5:
         12:de:3d:33:60:d6:82:20:cf:93:cd:62:85:75:80:ad:53:d8:
         23:eb:df:10:7c:06:90:87:45:05:eb:24:5d:18:ef:bb:a7:36:
         57:c1:a2:22:1d:8a:90:5b:d4:ae:2a:53:ae:31:ee:02:20:1d:
         56:ba:9c:f1:04:8e:08:c4:a5:70:97:eb:9e:83:dd:c1:05:70:
         a6:6b:23:79:4f:ab:b9:c4:3d:a5:a4:0a:5b:80:e7:9d:ff:ec:
         8a:4c:a4:d5:22:4f:b7:cc:a3:ef:f4:c7:eb:5c:ec:b6:af:ed:
         49:8e:b0:07:0c:3a:f7:8e:94:ee:16:d8:2b:fa:fe:a2:51:fc:
         85:5a:4b:5b:c9:ee:de:09:f1:ae:97:8b:6a:ba:99:17:2c:a6:
         4b:57:4c:84:17:81:b0:1d:0b:aa:b2:46:cb:79:4a:44:f7:5a:
         e9:6d:2c:c0:6e:66:4b:72:7a:ef:8b:2f:cf:02:f8:2d:2b:31:
         d6:6d:e1:7f:2f:a5:ad:46:6f:f0:ae:18:92:0f:62:80:bd:68:
         8b:dd:14:54:0b:d5:97:58:30:69:62:aa:80:cc:ea:ce:c2:74:
         7e:c6:32:b8:16:66:b1:a4:f0:9f:85:27:13:eb:83:76:25:81:
         c8:12:d4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:55:48 2026 by rpki-client