Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
File:                     T191psKYj1i2AwEqjbRFofN9XXI.mft (raw, json)
Hash identifier:          oPDGX8P+yfhdd1C7e7+nxfqH+PCt+cpaAT/t+HP7l68=
Subject key identifier:   55:1F:2C:76:DF:5E:1B:49:4B:FD:3C:76:FE:55:93:70:31:20:A7:EB
Authority key identifier: 4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
Certificate issuer:       /CN=A914C3FB/serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Certificate serial:       017C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
Manifest number:          0145
Signing time:             Wed 09 Sep 2026 06:25:29 +0000
Manifest this update:     Wed 09 Sep 2026 06:25:29 +0000
Manifest next update:     Wed 16 Sep 2026 06:25:29 +0000
Files and hashes:         1: T191psKYj1i2AwEqjbRFofN9XXI.crl (hash: PA+QIRodbaZvoSXQOCuTr9qpQnrJj2HWnn87yo5mpmM=)
                          2: 502C3A08DFBA11F0A83E81424B6F56BC.roa (hash: 6xHuo0DnepEGRmB08a/9C8nmjyPvfstg4avyUEG2ltc=)
                          3: 7B38FA86A5D711F18B57491F3611F970.roa (hash: Qu1AHu1CC+TqDNyF3QGCgiURM+F5fmgCxLQCL8tZhCc=)
                          4: 296AC8B4A5D811F1A738BF2F3611F970.roa (hash: CQnCoRFdfoOMZ69yJprZvbmvvCNKoIKIobem+EKkuls=)
                          5: 52040BECDCBF11F0B2EC67DA4A6F56BC.roa (hash: Wc1DoOxBicG+sk0xmxn0G7rVUatGjhMhpQRJFhbrHSQ=)
                          6: 32332AD83C8B11F1B51BFC899C833773.roa (hash: SqSvzXIRIVpELXR4zfaIkWV4fICk8+OR6AsXIXWCiYc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
                          rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 06:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C3FB, serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
        Validity
            Not Before: Sep  9 06:25:29 2026 GMT
            Not After : Sep 16 06:25:29 2026 GMT
        Subject: CN=6aa0fbd9-ae53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:56:20:7a:7c:4e:5b:fa:a9:1c:3b:e7:c1:b2:
                    b7:9d:22:e5:d6:68:37:aa:f6:65:3d:e0:71:36:cb:
                    1b:b9:77:f5:b2:c8:ea:11:f9:86:18:53:f5:fe:2b:
                    ef:16:36:4f:2b:76:c5:03:7b:c1:b6:f1:fa:fb:a8:
                    67:a8:e1:d4:d4:eb:de:49:6b:28:2f:99:b6:26:f6:
                    42:0a:d7:92:23:32:6a:06:a1:82:d6:af:bf:07:2d:
                    dc:70:e0:a6:93:03:d1:a8:fc:d7:a1:6d:de:da:94:
                    b2:0c:fd:f8:37:b4:bc:6d:28:33:24:fc:0e:f4:42:
                    ac:6e:ae:27:d1:c1:c3:91:fb:ef:32:ed:21:a4:1f:
                    01:e0:9d:f5:b6:bc:78:0d:04:f4:4f:d2:08:2d:3e:
                    6f:05:d7:3e:55:8c:9e:2a:5e:e1:9f:62:02:8c:22:
                    3e:bb:1e:6c:33:a5:b8:00:fc:06:de:f0:24:94:a8:
                    a0:ae:69:6b:0b:5b:7f:d3:97:da:b4:c4:8e:ab:b0:
                    be:7f:88:7d:ce:d5:10:a8:ef:35:48:e2:6b:10:52:
                    64:69:f2:ab:75:8d:17:58:25:07:01:84:62:5c:50:
                    a1:c4:13:24:f4:8d:29:32:1e:56:5a:fa:a7:1f:a5:
                    ac:4b:1a:e8:fc:f7:0c:69:18:7f:8d:38:e7:08:ac:
                    93:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1F:2C:76:DF:5E:1B:49:4B:FD:3C:76:FE:55:93:70:31:20:A7:EB
            X509v3 Authority Key Identifier:
                keyid:4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:49:56:74:cb:2a:0f:1d:d5:21:76:68:d8:fd:41:b8:66:08:
         d4:5d:73:6a:eb:b6:58:fe:81:f8:c7:3e:52:45:0b:d2:3b:87:
         8d:cd:05:4e:73:f7:4e:e8:65:60:c3:6a:65:61:2a:c0:cd:a9:
         95:92:ce:a0:fa:cb:b4:0a:54:68:d9:9a:b7:32:80:47:8b:0f:
         3d:7e:93:60:b9:d8:f3:74:0b:c6:db:d4:57:94:5e:f1:bc:fc:
         08:56:3f:c5:60:a9:e6:7a:74:16:3b:1b:d6:54:d6:21:78:32:
         1f:d7:e6:f6:64:28:b6:2d:65:5a:96:a7:3c:6d:52:e9:0c:70:
         24:b0:33:99:65:a5:e1:19:a2:d0:b4:23:42:3b:8b:98:2f:37:
         13:61:05:06:47:c1:80:f1:a3:e3:a8:6c:44:89:ab:8e:87:86:
         31:0c:23:d1:3a:13:27:11:43:6f:29:1c:d2:19:78:6a:c9:d3:
         4c:35:0e:a5:b5:b5:ff:3b:96:32:f7:62:75:47:6e:57:f8:99:
         dd:06:33:e6:72:39:e9:24:e6:13:80:ef:18:18:84:5f:3b:ef:
         4b:96:16:9d:7a:e1:56:29:4a:43:10:ea:13:4b:10:16:d0:de:
         07:a6:4a:5a:33:35:06:26:10:2c:47:31:11:5d:cf:cd:1e:d9:
         71:70:71:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 04:31:45 2026 by rpki-client