Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
File:                     0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft (raw, json)
Hash identifier:          W9tMdvwLFArGcygBhXlKKSYDs1rvWqWgCHKnWA2JU7U=
Subject key identifier:   DC:CD:36:CF:E8:8C:C1:62:1E:A1:29:83:19:AB:2F:A7:53:09:72:6E
Authority key identifier: D0:F6:38:C5:B9:8A:E8:AF:CD:6C:EE:05:03:82:41:97:40:9C:3E:93
Certificate issuer:       /CN=A9132667/serialNumber=D0F638C5B98AE8AFCD6CEE0503824197409C3E93
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
Manifest number:          AD
Signing time:             Sat 03 Oct 2026 07:48:17 +0000
Manifest this update:     Sat 03 Oct 2026 07:48:17 +0000
Manifest next update:     Sat 10 Oct 2026 07:48:17 +0000
Files and hashes:         1: 0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl (hash: 92wyTE++OMnxsDL//M0SdTSfwSGi2xRHoezwSHdK/AE=)
                          2: 4FFB27E2BDBE11F0999C417DC4F9AE02.roa (hash: SUT7Sext2CBmlq2r+uIBNlenhXwwgBzoi2hOww2+R8w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl
                          rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 07:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132667, serialNumber=D0F638C5B98AE8AFCD6CEE0503824197409C3E93
        Validity
            Not Before: Oct  3 07:48:17 2026 GMT
            Not After : Oct 10 07:48:17 2026 GMT
        Subject: CN=6ac0b341-4c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:be:00:68:25:df:a2:5b:2b:7d:cf:38:69:70:
                    24:8e:aa:1c:ed:87:12:79:64:fb:30:64:d3:99:6c:
                    35:f0:6f:11:22:27:22:89:49:26:df:24:47:4a:0e:
                    51:ca:bc:24:49:da:61:93:22:06:55:6e:ed:de:37:
                    82:fa:06:0a:9e:e0:b6:8f:de:19:75:03:63:d2:97:
                    7a:c9:da:82:cb:e0:39:7b:58:d1:ce:46:85:0e:b9:
                    4c:f1:b5:ea:c1:77:68:47:48:e5:79:d7:02:2c:d3:
                    b6:bf:94:fb:55:c5:6c:e8:71:3d:1f:a0:67:7b:f1:
                    0d:1f:7e:ec:3a:e9:d5:8f:2e:dc:33:ab:0c:d7:c9:
                    6c:59:e3:cb:03:3c:9a:d5:56:2d:0e:3c:63:29:c0:
                    f5:d7:3c:a5:ba:6d:41:c6:25:58:97:dc:3e:4a:62:
                    ac:a1:db:db:2b:15:71:a5:56:9b:4a:0a:5a:fc:ac:
                    13:e3:07:87:a9:d0:4b:4d:61:87:05:8b:ed:13:bd:
                    5b:e8:41:d8:ae:08:ba:36:36:48:fd:31:f1:03:02:
                    1a:81:30:93:a6:83:31:74:bd:95:2d:92:77:cb:ae:
                    16:dd:31:30:48:e8:70:74:fc:72:a1:a1:f2:af:76:
                    45:20:9e:49:c1:e8:37:86:3e:3c:d2:50:06:46:5b:
                    58:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CD:36:CF:E8:8C:C1:62:1E:A1:29:83:19:AB:2F:A7:53:09:72:6E
            X509v3 Authority Key Identifier:
                keyid:D0:F6:38:C5:B9:8A:E8:AF:CD:6C:EE:05:03:82:41:97:40:9C:3E:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:89:b0:43:60:89:2a:be:51:92:5a:57:f1:da:07:56:b9:1a:
         1f:3c:13:a0:84:4f:0f:2d:fa:8b:11:51:c4:18:93:a3:1e:72:
         ba:b0:60:6c:31:39:55:e0:d4:54:21:94:b9:a8:3c:7f:da:01:
         13:ec:3b:39:4e:1e:6c:7b:59:db:7c:21:79:59:ea:e7:46:0d:
         23:41:2f:9a:54:98:83:6d:4a:b7:22:ed:3b:ba:c5:b2:97:81:
         4a:1b:3c:08:62:bf:73:fe:c5:a5:aa:84:c8:e0:38:63:88:57:
         55:f3:b1:76:ea:7d:ea:5a:32:7b:35:18:75:ac:da:fc:f8:04:
         d9:bb:a4:02:d1:dd:fb:42:ee:c8:ce:21:09:6e:0e:f9:bc:48:
         83:7a:bb:0d:b1:ce:d6:27:ee:17:16:2e:e1:7d:da:eb:a8:e5:
         16:1d:20:ab:3b:f2:38:0a:ff:b6:81:0f:ac:86:da:ef:5b:e4:
         fe:4e:08:2d:69:23:fb:3f:e9:9e:e9:7e:9a:7c:45:eb:7b:57:
         6e:c8:71:fc:fb:6b:4e:fe:b9:71:da:1e:7d:7a:b8:ec:40:3a:
         1e:1f:85:9e:80:24:69:af:cc:a5:24:e3:d6:a6:5c:73:3e:c4:
         0a:dd:1f:20:0b:fd:af:a5:5d:74:a0:80:c6:b2:90:69:8d:02:
         3a:3c:25:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:37:41 2026 by rpki-client