Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft
File:                     r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft (raw, json)
Hash identifier:          Hf/NrNwNHx1cS/vlYXZXXRXjsoK0+L7ow89J5CiYbcI=
Subject key identifier:   16:28:42:08:D5:70:2B:A7:9B:72:9F:4E:7C:F4:73:B4:81:D7:08:05
Authority key identifier: AF:85:78:8B:8C:52:D1:28:D5:34:0A:75:09:5B:8F:0F:11:77:9C:48
Certificate issuer:       /CN=A919F53A/serialNumber=AF85788B8C52D128D5340A75095B8F0F11779C48
Certificate serial:       0832
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft
Manifest number:          082A
Signing time:             Sun 20 Sep 2026 21:02:19 +0000
Manifest this update:     Sun 20 Sep 2026 21:02:18 +0000
Manifest next update:     Sun 27 Sep 2026 21:02:18 +0000
Files and hashes:         1: r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl (hash: Hd7bLQdv11rU94EVZp5lB2NCptKV85/1jD68zJDR9Ik=)
                          2: 72BCBB042FC211EBB8550B0AC4F9AE02.roa (hash: s+Jl83N9Gae1QXY9bBMMTJJz80QnAkoP6fzOKwbkryc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl
                          rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 21:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2098 (0x832)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F53A, serialNumber=AF85788B8C52D128D5340A75095B8F0F11779C48
        Validity
            Not Before: Sep 20 21:02:18 2026 GMT
            Not After : Sep 27 21:02:18 2026 GMT
        Subject: CN=6ab049da-8357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:23:84:ed:2d:a4:e7:b2:a4:3c:fe:8a:78:b3:
                    5f:c2:3d:d6:05:c2:21:67:85:68:81:14:ac:9e:c1:
                    f4:d0:cf:ff:da:44:96:96:d0:5e:0a:eb:b9:21:38:
                    d3:ca:f9:e4:eb:33:f0:ba:3c:0a:24:f1:0e:a7:c4:
                    7d:a0:26:6d:36:a4:1a:12:ff:5b:f2:fc:5e:2a:a6:
                    04:7f:16:f5:ea:a9:18:c3:cd:20:18:84:26:41:b0:
                    c6:a8:f1:66:1d:17:aa:66:98:49:a9:84:50:55:e2:
                    3c:dd:f4:29:94:cd:1b:b6:36:c7:9b:66:90:d8:bc:
                    1f:ba:cf:6e:5d:6b:41:d1:c0:83:c4:a7:36:51:bf:
                    16:9d:97:11:01:b8:b3:2d:cb:ef:42:c5:fe:a7:0d:
                    b6:5e:96:ba:2f:cf:59:2f:40:e1:91:99:23:8d:3b:
                    a8:9c:27:9d:b8:1d:06:4d:2b:2b:b8:f6:3e:71:eb:
                    65:cf:2f:3a:c0:b8:f0:5b:6e:44:81:5f:15:33:32:
                    a2:50:04:8e:11:ef:b8:6e:51:dd:ce:3a:1e:56:20:
                    dc:44:d3:a1:02:73:1b:01:40:d4:11:2e:85:2f:5d:
                    51:1b:cb:1a:c6:92:e9:d9:f8:0d:2e:ae:3b:c1:36:
                    44:ae:10:7f:07:d9:d5:86:5c:63:e8:e8:a6:57:f2:
                    ec:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:28:42:08:D5:70:2B:A7:9B:72:9F:4E:7C:F4:73:B4:81:D7:08:05
            X509v3 Authority Key Identifier:
                keyid:AF:85:78:8B:8C:52:D1:28:D5:34:0A:75:09:5B:8F:0F:11:77:9C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:60:17:32:70:95:d8:57:0f:4b:bb:90:b1:e0:0f:98:2b:53:
         ff:28:bc:2e:67:07:08:5b:42:36:69:5f:89:fe:d8:e3:8a:5e:
         e5:84:d3:dd:32:27:bd:81:38:1e:0d:97:b0:6a:a0:0f:a0:ad:
         d0:ba:c9:03:c6:63:13:79:bc:e0:21:bd:3a:92:e4:af:47:7b:
         e9:06:b6:b3:be:6c:c2:f0:d5:a3:92:19:9d:82:67:f2:4a:b0:
         94:2e:f7:f4:df:55:61:72:de:77:7a:c8:b7:fb:96:a9:a7:1d:
         c7:a9:56:42:23:f4:a8:d7:2f:ef:d1:dc:b7:de:35:a0:69:17:
         55:ff:71:e6:3a:2b:bb:44:1f:09:7c:1d:03:1d:6f:5d:76:41:
         60:22:3d:cd:4b:e1:2c:b0:8f:3b:d1:03:8f:20:dc:f9:de:c6:
         64:01:b0:b9:24:95:44:14:ef:ce:94:b2:32:61:70:6c:2e:18:
         b4:99:82:1a:8f:64:46:50:80:dc:4d:0e:8b:1d:9d:c3:7d:b0:
         9a:3b:1f:c7:56:f3:f3:91:c9:be:ea:77:d9:68:9f:d5:1d:60:
         f1:88:d3:08:18:80:17:2a:ac:cc:4f:0d:0e:59:ad:a6:97:3b:
         e4:c4:cb:04:11:ab:83:9e:c1:a9:e2:a6:0a:cf:48:8d:58:13:
         d7:aa:c1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:33:10 2026 by rpki-client