Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
File:                     tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft (raw, json)
Hash identifier:          hGOg2Zv8HZNOR6CUCERY08+CunQks/mocNI1KHMaJdw=
Subject key identifier:   AE:B6:84:42:A3:CB:E6:F5:4A:AF:33:E0:13:BD:D8:C1:BE:C6:29:6B
Authority key identifier: B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76
Certificate issuer:       /CN=A9154FFD/serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76
Certificate serial:       B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
Manifest number:          B3
Signing time:             Wed 07 Oct 2026 07:32:45 +0000
Manifest this update:     Wed 07 Oct 2026 07:32:44 +0000
Manifest next update:     Wed 14 Oct 2026 07:32:44 +0000
Files and hashes:         1: tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl (hash: gGrAa1PfQUxCdaJ1ANH4fpiaTCxTsh+tYpBn5TlSJj0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl
                          rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 07:32:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154FFD, serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76
        Validity
            Not Before: Oct  7 07:32:44 2026 GMT
            Not After : Oct 14 07:32:44 2026 GMT
        Subject: CN=6ac5f59d-f581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:02:c7:49:dd:8c:2d:18:4d:97:e6:91:64:35:
                    32:a6:22:40:25:3d:ff:64:92:ac:8f:59:61:3f:58:
                    6e:aa:c6:8d:de:38:56:69:83:f0:12:9b:e7:7e:60:
                    73:fb:b3:f3:30:1d:e0:b4:36:8b:9a:aa:2b:fe:fb:
                    71:9a:61:74:57:63:2a:10:7c:80:a8:c9:67:48:81:
                    25:61:76:0a:e9:87:13:12:61:7a:15:4b:11:58:82:
                    d1:6e:c7:8a:3e:63:fc:da:f6:7b:af:85:c1:0c:b1:
                    b6:96:31:9f:2f:16:d8:7a:2b:42:5c:ca:a2:71:a4:
                    4f:64:85:f5:97:73:7b:7c:fe:76:52:58:28:45:ad:
                    37:06:19:94:67:a9:87:d5:98:40:5a:3a:f3:55:67:
                    e1:13:7d:52:42:f0:47:c5:03:48:0f:ee:0f:5b:36:
                    1c:86:44:a3:8c:fc:2f:ca:79:5e:92:d8:27:b4:e6:
                    79:16:bc:7a:5a:3c:8f:a9:08:45:fe:e3:05:34:57:
                    43:d4:40:b5:9e:57:f3:20:15:08:fc:ff:e8:55:45:
                    cc:8b:92:10:2c:fd:53:2a:30:35:ca:a9:ad:7b:62:
                    22:14:a6:43:90:a2:cb:d4:cd:b2:3a:92:eb:a5:5b:
                    70:ab:2c:89:4e:28:b2:49:b6:7d:b3:a5:54:c3:5b:
                    33:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B6:84:42:A3:CB:E6:F5:4A:AF:33:E0:13:BD:D8:C1:BE:C6:29:6B
            X509v3 Authority Key Identifier:
                keyid:B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:df:0d:4a:07:55:05:1a:96:8d:77:9a:20:6a:8a:20:34:19:
         a9:c4:93:d6:37:41:02:e9:13:6c:5d:63:48:d3:9a:33:0e:5a:
         e7:f1:fb:e4:36:e4:db:49:8f:2e:33:d1:8b:18:e5:0f:d8:c5:
         40:4e:07:c0:b7:51:97:83:72:2a:d1:42:97:16:fb:05:d1:72:
         6b:19:30:9d:06:e0:36:94:d4:e9:59:63:5c:47:a4:27:b8:92:
         2d:d7:2b:7e:11:c3:f9:ad:08:c6:c5:e9:3e:fb:89:63:a7:df:
         56:e9:ec:5e:70:ff:a4:e3:52:52:23:3b:06:00:24:a3:e3:26:
         a2:1a:14:0b:a2:91:36:7f:ca:dd:8f:f6:8e:78:b2:46:b5:70:
         06:af:01:66:c7:aa:08:2e:f4:73:98:81:5c:e2:88:65:7d:ec:
         ed:ef:f3:33:6d:fa:ca:c7:78:5f:8e:42:a7:cd:bf:de:1c:f0:
         3f:57:d4:bf:c0:09:e4:f9:d9:32:82:d0:2e:cb:cc:7c:75:46:
         6a:71:bc:0c:30:17:88:9a:80:c6:ad:56:37:1e:86:f8:fe:1e:
         70:0e:64:11:5e:97:d2:df:cc:4d:f4:24:35:f1:67:b1:3f:1b:
         12:db:f4:0f:da:b1:b9:8a:d2:ed:89:07:47:62:3f:ea:fc:e0:
         0b:c0:df:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:46:31 2026 by rpki-client