Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
File:                     MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft (raw, json)
Hash identifier:          rMYCBgmlxATfEP9tp/qveKIlFQphK/XfzuORN3/spK0=
Subject key identifier:   51:F7:25:4C:88:4C:8F:22:2C:DB:31:54:6C:44:65:5E:9D:12:72:D1
Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20
Certificate issuer:       /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
Certificate serial:       0250
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
Manifest number:          0235
Signing time:             Thu 17 Sep 2026 02:49:47 +0000
Manifest this update:     Thu 17 Sep 2026 02:49:47 +0000
Manifest next update:     Thu 24 Sep 2026 02:49:47 +0000
Files and hashes:         1: MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl (hash: o8SzCeO5Glxba5J+g2DaANAEPssxpjHTCp6feJnr74I=)
                          2: 1B2EC2A457E411EEB143C80EC4F9AE02.roa (hash: 8JV502SLk8QbZyaGCPLTxSnSD1WOF++tIWExjZSLMdQ=)
                          3: 1AB7C58C57E411EEB143C80EC4F9AE02.roa (hash: 1RzsjB3B/c1zgVm8/5Sg1Xe89XFvfc6vQnq4tvEitnY=)
                          4: 22613D48AC7311EE8A97A86FC4F9AE02.roa (hash: LHB5pGY8dTTpWRgeoK0nlLC3xPEqarqRqlE/1vamRUU=)
                          5: 5EF938889E9E11EE80C94682C4F9AE02.roa (hash: Pt4/aeZJmmxaKw58FeByKfcr60LvOJZSjrmtvVkGyg8=)
                          6: 1E541192D5A111EE9D73FA44C4F9AE02.roa (hash: 6VryhfiIF2VBEa3XnAENzfKNyDYTfUs9xynBu6kvnA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl
                          rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 02:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
        Validity
            Not Before: Sep 17 02:49:47 2026 GMT
            Not After : Sep 24 02:49:47 2026 GMT
        Subject: CN=6aab554b-a8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d7:64:9f:d4:6d:0f:1e:78:66:c4:77:4f:7d:
                    05:70:8e:a3:22:74:86:0c:8f:ea:db:2d:39:73:3a:
                    d2:6b:fe:49:30:89:28:45:cd:5d:57:8f:d7:af:84:
                    bd:02:8f:58:db:de:5f:7e:42:71:20:c2:b4:c3:58:
                    b3:1e:bf:65:c4:0f:d6:58:3d:3d:bd:72:0a:0e:d9:
                    79:fd:fe:5c:4a:db:7d:51:1e:8b:23:49:dd:d4:e5:
                    50:a0:69:f2:37:57:07:bb:5e:da:bf:b9:db:42:f7:
                    3a:79:b2:73:ce:9c:e1:5f:a6:8b:11:50:2a:8a:eb:
                    02:cf:ff:67:63:f9:b3:0d:6f:6b:ad:a1:cc:60:f8:
                    63:63:bf:c6:b4:5e:e8:a5:34:69:78:63:26:03:78:
                    34:46:bb:b5:3f:a3:e3:18:83:f9:c2:60:a6:b7:79:
                    e7:0c:f1:66:58:ba:a1:3c:f1:1b:61:43:01:45:9e:
                    97:82:4f:51:54:47:ff:bc:4b:14:fd:4f:77:56:7e:
                    60:5e:8f:12:ce:bf:4d:6a:9c:e3:b1:3d:05:c8:65:
                    12:2d:03:67:db:7b:ae:61:84:c6:23:1f:a8:98:4e:
                    57:0c:ec:2f:79:70:e4:b1:3b:82:6b:87:39:af:4b:
                    e4:c1:20:fd:f4:a2:df:f9:f3:97:29:ce:11:1a:6c:
                    ef:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F7:25:4C:88:4C:8F:22:2C:DB:31:54:6C:44:65:5E:9D:12:72:D1
            X509v3 Authority Key Identifier:
                keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:7a:ec:7c:c9:9c:2b:50:ec:4c:19:2c:d8:60:e0:52:d8:37:
         81:9c:08:17:69:7c:09:a4:d7:e6:ea:45:09:fb:98:17:81:5d:
         2b:50:9f:c7:3a:17:30:0e:3c:85:68:71:21:a1:19:8d:71:b5:
         cf:a9:8a:e7:8c:18:a4:b1:53:64:b8:50:91:54:58:9b:5c:c3:
         27:53:a2:f0:e6:48:5c:f3:e0:d8:f7:e9:85:ed:f8:99:2e:ad:
         c6:4a:b0:73:a8:57:b8:e2:80:bc:eb:99:f8:93:3a:ce:55:67:
         39:be:86:c6:73:e0:87:66:33:80:34:28:82:68:4d:e4:cb:f0:
         82:55:cd:34:8c:ea:c8:dd:09:20:8f:eb:37:1b:98:ef:2c:66:
         56:58:c6:2d:a9:01:70:3a:f8:2e:98:e1:47:14:09:dd:fa:27:
         8c:73:fa:7a:1b:71:d8:9f:85:43:f1:3e:86:78:b3:bc:01:d8:
         4e:dc:1a:99:23:f9:38:a2:cb:fb:23:07:e0:4a:94:bf:1e:c4:
         a4:33:71:d4:ab:b7:27:a4:fc:c2:b9:ee:9c:97:57:7c:f9:40:
         b6:bd:f7:4e:c5:d1:ea:84:07:fd:4b:31:51:e2:f0:ca:cd:0a:
         bf:7b:74:1e:69:5a:7b:14:03:32:da:83:d8:f2:d8:87:bd:9c:
         de:06:c7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:10:43 2026 by rpki-client