Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft
File:                     28byJW3eXCxGqA6yQy8lcu3FN9Y.mft (raw, json)
Hash identifier:          1T3WjrhPrD7QH1kmHQUf7uRNyUnwLt6s61mNth3bIog=
Subject key identifier:   BA:AE:21:FE:EC:B2:A6:84:B5:86:04:65:EC:1F:C5:C3:AE:CC:1A:9A
Authority key identifier: DB:C6:F2:25:6D:DE:5C:2C:46:A8:0E:B2:43:2F:25:72:ED:C5:37:D6
Certificate issuer:       /CN=A914D0E3/serialNumber=DBC6F2256DDE5C2C46A80EB2432F2572EDC537D6
Certificate serial:       0172
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft
Manifest number:          0172
Signing time:             Wed 07 Oct 2026 05:17:52 +0000
Manifest this update:     Wed 07 Oct 2026 05:17:51 +0000
Manifest next update:     Wed 14 Oct 2026 05:17:51 +0000
Files and hashes:         1: 28byJW3eXCxGqA6yQy8lcu3FN9Y.crl (hash: 7rQRn6AP53xvKAIpbLzIeT8PbOaTvqnaslTmZAfGsXI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.crl
                          rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 05:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D0E3, serialNumber=DBC6F2256DDE5C2C46A80EB2432F2572EDC537D6
        Validity
            Not Before: Oct  7 05:17:51 2026 GMT
            Not After : Oct 14 05:17:51 2026 GMT
        Subject: CN=6ac5d600-33dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e7:9e:73:ca:a6:6d:8b:03:a0:9d:a9:ff:3d:
                    3d:32:95:34:8d:c7:1a:7f:dc:2e:51:73:f3:b1:54:
                    b1:f0:92:96:a0:63:a8:cc:28:7f:c3:b6:a3:39:a9:
                    3c:a3:54:d5:5f:0a:44:da:5e:a7:08:b5:4e:ed:0a:
                    22:c9:de:b6:dc:87:be:a7:67:15:c1:10:db:dc:a5:
                    a1:f8:43:d5:80:3a:a6:95:22:fa:68:51:92:26:92:
                    29:b7:ae:d4:48:2e:03:a8:f7:f8:d6:5b:bb:83:cf:
                    79:0f:8c:12:58:4a:de:d4:87:24:9c:03:eb:6d:7f:
                    66:c1:f3:b6:92:2c:a6:0e:d4:b2:ec:7f:21:c6:1f:
                    29:25:c1:ff:bd:c5:d6:64:3d:b0:e9:e4:f3:ae:a6:
                    a4:cc:24:c4:74:51:5b:80:0c:d2:a2:20:70:d3:5d:
                    61:00:b7:92:fb:59:78:8a:fd:44:45:2a:0d:ec:74:
                    19:44:f1:f1:0d:e4:8b:b2:20:09:b1:8f:70:f3:45:
                    d1:9e:1e:0a:49:e9:d6:1d:6e:55:2e:f0:a6:d1:5f:
                    53:ab:18:4d:7e:0b:73:4f:d7:62:8a:fb:81:9a:79:
                    d4:3f:a1:04:59:5d:b1:4a:08:f2:31:fb:f4:6f:fe:
                    9c:0d:bd:eb:ba:ff:04:c1:4d:7c:16:e3:8a:8c:da:
                    8a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AE:21:FE:EC:B2:A6:84:B5:86:04:65:EC:1F:C5:C3:AE:CC:1A:9A
            X509v3 Authority Key Identifier:
                keyid:DB:C6:F2:25:6D:DE:5C:2C:46:A8:0E:B2:43:2F:25:72:ED:C5:37:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:fa:2e:ae:6a:96:da:50:c8:a1:20:9b:7e:f0:81:d6:4c:5a:
         80:58:07:ee:56:4b:04:92:1a:94:ea:cc:4a:bf:0d:13:82:93:
         c9:ca:f7:70:39:31:e5:4c:ef:af:a5:32:d4:f1:94:6f:f3:dd:
         ab:91:ed:e7:cf:d5:ef:5e:01:d2:b6:5e:03:58:92:d2:1e:af:
         11:57:36:d3:b6:9a:53:e6:cc:6e:00:8d:bd:9a:ba:a7:42:eb:
         1c:b5:a0:fb:02:f6:8c:6b:e6:78:b3:34:53:38:5c:87:d6:de:
         7e:14:45:96:6c:d5:15:ee:23:7e:58:35:89:3a:91:06:be:35:
         c9:3b:75:0b:e0:93:ab:ca:08:99:f6:8f:79:7d:f9:cd:b7:3b:
         a6:e9:59:d2:e1:4f:39:e8:c5:4b:64:44:e0:31:0f:c8:49:7c:
         52:e7:aa:0e:45:8b:c1:3b:6d:8d:93:da:ba:5e:a8:55:5f:34:
         5e:5d:80:37:39:4b:a5:2f:81:56:d3:c9:cc:71:c1:77:63:42:
         fa:21:9f:9b:dc:60:81:7c:65:18:81:f8:5b:af:c6:c1:04:9b:
         4b:e7:44:97:1b:7a:73:f4:70:18:85:1a:ef:a4:47:0d:71:93:
         b7:7a:20:19:5f:a6:77:4f:2b:9c:fa:b6:4c:e1:9a:0e:56:9c:
         cf:81:7d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:21:02 2026 by rpki-client