Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
File:                     tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft (raw, json)
Hash identifier:          wqhzRFSERD3dIs3fthLWyOHkgUO7BNpL+vpyoyzGnH0=
Subject key identifier:   7D:C8:B2:5B:5C:BB:82:AC:C6:21:0A:72:91:3D:27:EA:81:38:C5:1E
Authority key identifier: B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C
Certificate issuer:       /CN=A9160C95/serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C
Certificate serial:       06D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
Manifest number:          06C6
Signing time:             Fri 04 Sep 2026 22:08:17 +0000
Manifest this update:     Fri 04 Sep 2026 22:08:16 +0000
Manifest next update:     Fri 11 Sep 2026 22:08:16 +0000
Files and hashes:         1: tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl (hash: IjE1LZPquTnV9L0DpEHnRUVcsbGZVc7ZgARj41fMh2Q=)
                          2: 3C2408105CBF11ECACDFE47BC4F9AE02.roa (hash: TMOTzC8LyMJLZtdqx4wEZX0fEZReW/QgdhjNImxkGuk=)
                          3: B3DED5C6BAC911EB8533B615C4F9AE02.roa (hash: +nAEEuzzAHJ64g2Y+I53w9dhyFuYT2+b3syIj71QLeM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl
                          rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 22:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1749 (0x6d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160C95, serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C
        Validity
            Not Before: Sep  4 22:08:16 2026 GMT
            Not After : Sep 11 22:08:16 2026 GMT
        Subject: CN=6a9b4150-d679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2e:f4:4e:e1:85:bd:10:af:52:f4:9b:0c:4b:
                    0b:ef:0c:0b:97:fe:88:2d:e8:1c:b5:b4:98:95:c0:
                    fe:03:e7:99:0f:2b:02:21:b8:5c:7f:16:bf:c2:1d:
                    ac:0c:41:39:00:a6:10:99:3e:fa:a7:ae:98:0a:1a:
                    68:7a:b7:b5:04:58:9a:36:2d:be:89:2c:e9:17:c5:
                    25:fd:7c:28:0f:73:0c:a7:11:45:ce:cf:31:7e:d8:
                    0e:3a:b8:78:fe:24:3d:fa:5d:20:9a:0f:56:80:5e:
                    76:b7:42:37:b3:d4:04:ea:5a:a7:74:3b:d4:d8:0d:
                    f3:bb:31:1d:a0:4b:ef:7a:dc:93:c4:45:d4:32:12:
                    c8:7a:37:04:d6:dd:a6:d8:ee:c9:96:0d:55:40:79:
                    5f:ea:2b:26:76:be:12:60:d9:0a:6c:3f:10:f3:04:
                    b6:06:a6:79:59:30:f4:f3:5c:c2:50:58:3a:53:e1:
                    02:64:8a:bc:7f:22:94:48:7e:96:6f:3b:9a:40:f3:
                    5a:0f:e9:01:37:17:c2:23:9f:d7:60:1c:68:04:09:
                    21:17:8d:84:b6:ec:88:66:a3:92:6d:0e:9c:ec:af:
                    44:5c:d6:99:d4:40:cf:11:08:03:2e:47:ec:a0:1e:
                    c3:38:28:f7:53:a6:a6:48:95:81:a6:ba:72:9b:01:
                    6c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C8:B2:5B:5C:BB:82:AC:C6:21:0A:72:91:3D:27:EA:81:38:C5:1E
            X509v3 Authority Key Identifier:
                keyid:B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:43:c1:75:1d:37:99:b3:3c:07:36:60:05:b4:80:3d:6e:47:
         6f:24:f8:e5:ec:eb:d7:41:56:7d:c2:f3:c6:b7:52:25:88:75:
         b0:fc:7a:13:4f:65:bf:ca:13:db:47:02:24:59:61:0e:f5:a0:
         fc:e9:73:51:37:f2:f5:67:df:bf:29:6b:50:cb:29:f0:0a:e2:
         a5:07:6f:2b:47:95:6c:ac:b9:fb:48:98:df:c3:e7:93:27:89:
         1b:fd:5a:e6:73:50:53:db:a0:ad:df:f8:1d:c3:4d:23:09:db:
         b4:b1:a8:4f:35:da:88:ee:4a:f9:66:7f:a4:f1:2a:ee:6f:15:
         e7:da:42:07:71:0a:c5:ec:3f:05:23:e7:f8:6a:ab:2f:58:cb:
         e1:2b:ed:27:e9:4b:de:c7:19:a6:55:58:5d:02:41:48:45:7c:
         bc:b7:e4:23:8f:eb:97:3d:d8:fa:1c:8d:f6:3f:35:32:da:25:
         38:d7:ed:bb:7d:6e:f2:da:bc:24:df:6e:d9:13:f1:06:8f:a2:
         ea:fe:1a:9b:12:67:f7:5f:0d:89:6c:01:0a:33:04:d8:47:62:
         5f:82:ec:01:f8:c4:16:64:66:8c:f3:5e:b8:ef:54:16:ec:7c:
         23:75:31:70:f0:38:8c:d5:bb:5a:09:82:15:65:b4:2e:49:d9:
         6e:27:20:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:53:50 2026 by rpki-client