Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft
File:                     -1uWlTzNsR6SaDs-tbekV0lLJfA.mft (raw, json)
Hash identifier:          OYVpNNkqkPJxYntLKFmhjMoM0eoNiQq1TUizfZiX7Mo=
Subject key identifier:   DA:45:DA:C1:81:D2:3B:FB:AD:20:DC:AE:1C:58:AB:34:63:D7:FA:17
Authority key identifier: FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0
Certificate issuer:       /CN=A9146A72/serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0
Certificate serial:       0239
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft
Manifest number:          0233
Signing time:             Sat 10 Oct 2026 15:28:25 +0000
Manifest this update:     Sat 10 Oct 2026 15:28:25 +0000
Manifest next update:     Sat 17 Oct 2026 15:28:25 +0000
Files and hashes:         1: -1uWlTzNsR6SaDs-tbekV0lLJfA.crl (hash: 5v6wq5uACFapmzsbNk6Hwvu2KvC4bG983zLPeAdPimA=)
                          2: 67B0ACBC8E5011EE95DFC141C4F9AE02.roa (hash: u0AUuQ+24IMRETOkT+RbnVWhzKRT6X2WDxYpPB1no5o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl
                          rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 15:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569 (0x239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146A72, serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0
        Validity
            Not Before: Oct 10 15:28:25 2026 GMT
            Not After : Oct 17 15:28:25 2026 GMT
        Subject: CN=6aca5999-78c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:43:2c:cb:09:40:f8:ac:b0:08:c6:d0:fd:7a:
                    5a:76:1a:86:f1:e8:c0:9b:04:6f:4f:26:36:65:e9:
                    ef:65:d0:1d:07:40:6d:54:0f:c1:69:be:bb:46:e4:
                    a0:56:a8:4d:8c:96:a6:d4:8b:a0:97:16:ea:07:f1:
                    ff:51:9c:6b:e7:16:72:cf:e7:9d:57:57:57:11:18:
                    ab:35:9e:57:15:9a:91:fc:a7:2e:35:a0:80:bf:ec:
                    3d:ba:6b:52:d1:6d:9b:09:18:ef:3c:10:14:24:33:
                    04:f5:b1:b0:67:8e:b3:4a:cc:06:5b:8a:3c:bf:70:
                    6b:e6:0e:8d:38:b5:d4:7d:a5:46:6d:cd:a7:36:6b:
                    41:c9:8b:4b:f7:d8:7b:e4:ac:f0:83:1e:1f:0d:de:
                    d2:01:78:e8:25:d4:72:db:11:6d:86:c0:5f:c0:60:
                    de:53:67:e7:ec:20:23:f4:71:4c:90:77:1b:ed:d8:
                    ef:84:e3:d5:9f:39:5a:68:92:cb:ed:88:23:53:b6:
                    c0:78:74:c1:be:a3:e8:0c:ae:0e:ec:8c:ca:0e:18:
                    a5:ad:4a:22:8d:e7:f0:ac:e9:9f:f8:f5:64:71:c0:
                    2e:9c:94:98:f0:50:88:90:36:60:ba:49:46:eb:b2:
                    5a:01:a6:87:31:e0:b9:05:91:17:39:8c:36:e3:b1:
                    16:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:45:DA:C1:81:D2:3B:FB:AD:20:DC:AE:1C:58:AB:34:63:D7:FA:17
            X509v3 Authority Key Identifier:
                keyid:FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:24:86:36:80:e2:04:65:d7:cf:e7:73:81:23:74:90:5e:89:
         43:13:7a:a5:5c:4c:db:d1:b7:b3:98:b6:d4:bd:1d:a1:b8:80:
         c2:a5:82:67:f2:d1:76:c4:7e:aa:a4:b3:b0:ae:e4:05:98:d1:
         0b:b4:ff:ab:79:aa:68:75:64:6f:d4:a9:41:24:32:33:c0:97:
         2e:aa:38:5e:a7:fd:5a:bb:7a:1c:11:aa:d4:a3:6b:fd:df:30:
         e2:56:ba:0c:88:a5:78:35:bf:8c:00:00:16:c9:4f:6e:f4:99:
         d3:44:1f:1f:96:4e:3c:75:c6:c7:1f:76:1b:ed:d3:92:77:50:
         a1:8f:29:2c:f1:5b:be:9b:37:08:6d:d0:22:f2:51:7d:1b:5c:
         04:d4:21:43:dd:41:f3:e0:7e:34:21:2f:83:68:ba:f6:30:a1:
         31:02:ab:43:bc:12:59:a1:60:44:1c:81:31:3c:c0:40:87:33:
         bb:27:2c:b9:72:06:0f:4a:d6:7c:76:8b:04:60:a0:f7:9f:9d:
         3f:a7:ed:2c:e2:5b:e6:2c:8e:a9:06:cf:6d:2c:a1:83:22:40:
         c9:fd:ac:1c:55:a5:a4:1e:6e:a2:fb:b5:33:b1:15:e5:55:b7:
         2a:a1:fe:43:0c:ea:26:83:92:96:30:d0:c1:8f:59:9d:b9:bb:
         8c:80:25:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:14:16 2026 by rpki-client