Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
File:                     mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft (raw, json)
Hash identifier:          yK0PEQc3dyqg8acPP0AO9AyRts1NqFcRX4SeMxuk5zo=
Subject key identifier:   8C:5D:5D:08:46:55:D3:D6:C2:43:B1:B5:EF:1C:FB:CC:92:DD:51:76
Authority key identifier: 9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4
Certificate issuer:       /CN=A9147CBE/serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4
Certificate serial:       0149
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
Manifest number:          0145
Signing time:             Wed 07 Oct 2026 05:55:48 +0000
Manifest this update:     Wed 07 Oct 2026 05:55:47 +0000
Manifest next update:     Wed 14 Oct 2026 05:55:47 +0000
Files and hashes:         1: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl (hash: FeMcv7zrdFE8Fn2LihjmZbse1D5PCIqzk6qjk8gNlcU=)
                          2: 6D66CE8017BA11F094861F7DC4F9AE02.roa (hash: fhMnOOcqslyy9NxnX7zgTe3J3WzePSNlL2bH73cXkGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl
                          rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 05:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147CBE, serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4
        Validity
            Not Before: Oct  7 05:55:47 2026 GMT
            Not After : Oct 14 05:55:47 2026 GMT
        Subject: CN=6ac5dee4-da4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dd:42:4d:d0:72:e9:6d:69:0f:76:b9:b9:3c:
                    85:49:e7:2c:4a:f3:f4:a2:ec:1f:ca:3c:23:da:69:
                    a9:9d:29:23:aa:e4:62:cc:8e:e9:17:92:44:d5:0c:
                    12:ac:a8:84:5a:48:da:5e:5f:06:3a:76:47:0d:15:
                    ec:ca:c2:b1:62:e7:dc:a5:e0:b7:0a:09:09:b2:63:
                    2d:0a:8a:a0:87:fd:3b:96:d2:e9:f8:8f:49:f9:5d:
                    f1:8f:a4:79:f8:63:35:24:11:c2:da:86:bf:e0:c6:
                    2a:38:56:c3:af:fc:56:99:54:a7:45:3b:66:c1:34:
                    b2:fb:d0:a8:61:15:26:c8:19:3c:33:d2:0b:3d:9e:
                    e5:39:82:56:cf:35:27:60:64:4c:4e:a7:9d:ef:9c:
                    32:30:b4:20:22:64:80:da:45:c7:7d:09:89:c4:54:
                    06:82:ff:1e:bd:98:08:61:03:7c:b4:21:a0:bf:83:
                    79:12:7a:10:89:c4:17:ce:65:9b:ac:fb:d5:65:58:
                    8f:c4:9e:4a:97:1c:03:cb:9e:f6:01:e9:06:bc:d0:
                    2e:54:7e:34:f0:25:0e:8c:76:a5:fc:b2:e6:52:dd:
                    46:24:7e:ed:17:c3:c7:35:aa:e7:a3:1e:4f:40:4a:
                    e6:ff:ff:20:73:3e:b4:5d:76:50:8c:99:00:30:d1:
                    bf:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5D:5D:08:46:55:D3:D6:C2:43:B1:B5:EF:1C:FB:CC:92:DD:51:76
            X509v3 Authority Key Identifier:
                keyid:9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:55:1f:67:91:87:d0:cb:5f:ac:6d:89:e9:c1:4c:48:84:b7:
         47:7c:9b:55:1f:d7:e2:08:4a:9c:e7:b6:38:82:4e:90:bd:90:
         d3:82:12:f3:21:4c:ea:4d:b2:20:c0:33:e0:3a:48:39:94:cf:
         5d:93:46:eb:32:27:51:1c:f0:c4:d5:1b:43:77:c7:8a:fc:f3:
         fd:fb:97:a8:ca:39:ae:e2:7b:a1:2f:63:7a:7c:23:f3:0c:30:
         59:56:24:5a:fd:2d:cb:2d:4f:42:71:f2:60:ef:fc:4b:00:a4:
         5d:75:2d:44:00:0f:32:0c:c0:36:fc:cd:a6:5f:98:90:fa:00:
         5d:cd:11:01:5d:fb:ca:c3:19:03:3b:95:f3:a1:49:99:54:4b:
         fc:90:ea:0e:4e:1f:77:f2:6b:84:a3:4b:a0:96:bf:5c:d0:fd:
         e1:be:17:e9:80:09:b7:f6:73:0b:db:01:28:ee:64:59:56:56:
         b5:83:31:87:45:c5:4a:f8:22:71:af:9f:a8:de:62:19:38:32:
         e4:4a:1d:29:ea:f3:a7:ec:5f:ad:43:d1:69:b6:27:b2:27:e0:
         ad:ba:07:50:7e:e8:2b:dc:dc:05:a5:e4:4a:60:04:71:ff:ab:
         8e:4b:53:59:c9:12:f7:4f:75:cb:11:b8:12:01:13:3e:1a:73:
         d2:66:60:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 11:01:47 2026 by rpki-client