Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.mft
File:                     k8AGrOprUHWaPH3DPvhLR6cRfWg.mft (raw, json)
Hash identifier:          gqCWDRGDg8CI0qhiydcoFL/rOvpNCH5su+O0L+osC1Y=
Subject key identifier:   83:7F:EE:EA:D0:46:8F:F0:28:08:12:45:F0:B9:FE:96:3C:DF:BD:77
Authority key identifier: 93:C0:06:AC:EA:6B:50:75:9A:3C:7D:C3:3E:F8:4B:47:A7:11:7D:68
Certificate issuer:       /CN=A9152C54/serialNumber=93C006ACEA6B50759A3C7DC33EF84B47A7117D68
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8AGrOprUHWaPH3DPvhLR6cRfWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.mft
Manifest number:          16
Signing time:             Sat 03 Oct 2026 09:48:31 +0000
Manifest this update:     Sat 03 Oct 2026 09:48:31 +0000
Manifest next update:     Sat 10 Oct 2026 09:48:31 +0000
Files and hashes:         1: k8AGrOprUHWaPH3DPvhLR6cRfWg.crl (hash: AHoGHd5FKipIpBQqtvl8lo7aMM29AzoI1MoxfNqRL3c=)
                          2: EXC8be9JdyHppT7JxqzJe0TXCXw.asa (hash: 93itLPNDswBkIJ+WVnIMTMwxeZsWUrco8IhBc7A8oig=)
                          3: AD1172A4A46511F1B6EFAD894111F970.roa (hash: 6pPAKpMW2YSgyhK4I4VmYUKOhtycLfIa7D8U9x/G/q4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.crl
                          rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8AGrOprUHWaPH3DPvhLR6cRfWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152C54, serialNumber=93C006ACEA6B50759A3C7DC33EF84B47A7117D68
        Validity
            Not Before: Oct  3 09:48:31 2026 GMT
            Not After : Oct 10 09:48:31 2026 GMT
        Subject: CN=6ac0cf6f-7ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:df:66:01:0a:86:87:d7:0e:a9:a3:a3:69:
                    13:8d:7e:9c:45:4a:82:ab:f3:de:d5:45:64:2d:c6:
                    45:ac:be:a8:d0:ec:88:56:7a:68:46:c0:c4:f1:7e:
                    77:fe:0d:f1:4c:2f:49:cd:e4:da:c3:84:c8:64:fc:
                    35:04:e4:a9:05:60:b7:3b:e4:65:63:79:3b:4e:c8:
                    f1:38:51:eb:6b:6c:89:96:da:94:de:9e:38:7a:27:
                    c2:6c:28:6d:68:35:bd:3a:6d:6f:e6:bb:6a:93:0f:
                    6a:17:b0:a7:e2:47:9f:9a:b9:08:3b:7d:96:8e:34:
                    96:35:8e:3c:5a:90:9f:b5:fe:33:b1:db:15:6a:48:
                    91:61:cb:7e:f2:dc:9c:1f:f6:79:5c:22:17:87:d1:
                    36:8c:11:a2:1f:e3:63:6b:42:57:a1:9b:c4:ba:01:
                    e9:f6:8a:b1:f7:94:c5:07:a6:12:ab:a1:ec:9e:ba:
                    21:76:25:8b:ce:c6:6b:eb:12:cf:9d:db:a8:b6:e7:
                    8d:d4:68:70:64:f6:12:c2:3c:b7:71:be:15:0d:3c:
                    c6:65:7a:9c:e8:40:3b:04:cb:c8:2d:3b:8f:82:71:
                    83:34:cb:97:30:c9:21:71:56:b3:5c:d0:44:e6:9a:
                    a0:e7:f4:b8:11:73:3e:ec:70:ec:15:58:c0:e2:f4:
                    66:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7F:EE:EA:D0:46:8F:F0:28:08:12:45:F0:B9:FE:96:3C:DF:BD:77
            X509v3 Authority Key Identifier:
                keyid:93:C0:06:AC:EA:6B:50:75:9A:3C:7D:C3:3E:F8:4B:47:A7:11:7D:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8AGrOprUHWaPH3DPvhLR6cRfWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:6e:a3:95:d6:ee:df:9b:0b:01:30:7a:bb:1c:7a:cb:77:8b:
         f0:4e:bf:60:d2:26:19:a1:9c:b7:ab:d6:e0:26:05:bd:bf:d2:
         93:bf:5b:62:08:62:a0:5f:99:53:6e:c5:7f:d9:d2:34:da:3e:
         e3:f0:00:72:f2:60:3e:19:f7:fb:49:b1:b8:51:49:dc:9f:a7:
         00:c3:8d:0b:1a:7f:d1:4e:59:a2:cc:d8:52:51:01:a5:51:e1:
         5a:70:fd:e5:b0:32:32:44:b5:b3:45:d3:49:a3:db:8d:dd:8b:
         2d:59:03:f2:7c:ca:02:50:50:46:cd:fc:83:20:6e:67:4d:04:
         90:ce:36:36:3a:b8:72:4f:30:53:df:22:f0:c8:50:40:26:e8:
         ca:90:52:ae:45:b2:5a:64:8a:e6:a2:55:5f:aa:0b:b2:c5:a9:
         49:c4:7e:65:23:25:64:22:55:cf:c2:f3:0e:d5:55:c3:62:7a:
         c1:35:58:e1:70:4e:d5:4e:34:6e:88:e3:f0:7e:1a:69:e0:7b:
         23:60:70:06:c9:eb:20:a0:7d:e7:1f:93:8e:d3:5a:63:bb:da:
         29:11:11:cf:87:a6:9b:4f:85:34:67:29:5f:45:bb:49:d6:32:
         5b:a0:7c:45:81:0c:be:6a:01:a4:59:a8:dc:82:73:6c:4f:ec:
         a8:07:fd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:17:12 2026 by rpki-client