Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
File:                     PPkWCCJoGcPp2oTRGVtTJvkkn70.mft (raw, json)
Hash identifier:          w3dUzzDJ3Aq3gqlsjxQYol0NTej4aQ3fx04+n74SR0U=
Subject key identifier:   77:C9:BA:1C:9A:4F:DD:48:C8:F4:0F:AF:E9:59:75:B3:E9:9E:EE:63
Authority key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
Certificate issuer:       /CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Certificate serial:       03C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
Manifest number:          03A5
Signing time:             Mon 05 Oct 2026 00:44:22 +0000
Manifest this update:     Mon 05 Oct 2026 00:44:21 +0000
Manifest next update:     Mon 12 Oct 2026 00:44:21 +0000
Files and hashes:         1: PPkWCCJoGcPp2oTRGVtTJvkkn70.crl (hash: k665x5yc8IxlrmPWBPb29mOKioyG3LFwsAwOOjNuOWc=)
                          2: 807EEE68281011ED9C81C50DC4F9AE02.roa (hash: Hqy1LRVKHy8Ftub7eFKosjYqL2kysNH4BmXhj25dFeY=)
                          3: E8343A14280A11ED80EB7F2FC4F9AE02.roa (hash: mf0wGIWAXtcqp5A/STrLzJZxEHdPx6LC7pC19PfOQBM=)
                          4: 76494F6E146111ED83A8FB50C4F9AE02.roa (hash: aleDxGkltCMG83BiNVnwleaosOHKlcQfiTqzx3RLirc=)
                          5: 873C98E0DE5911ED826BDB39C4F9AE02.roa (hash: 2nCCBmzmG2InvvOtDCmpe4jEwoKwgbej2xels7IW/q4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl
                          rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 00:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 969 (0x3c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155AE4, serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
        Validity
            Not Before: Oct  5 00:44:21 2026 GMT
            Not After : Oct 12 00:44:21 2026 GMT
        Subject: CN=6ac2f2e6-da01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f5:f1:5b:f5:00:34:6d:62:26:12:9f:61:66:
                    90:ae:fd:11:20:b7:c0:88:f7:18:3d:1d:cf:6f:c1:
                    f8:95:c5:24:c7:84:fc:37:f0:67:59:e8:b9:7d:f0:
                    ef:dd:36:77:83:23:c2:07:27:f5:36:e8:cf:b4:d2:
                    c2:01:4a:4e:08:4b:92:b9:bd:5b:a8:2f:ff:72:63:
                    d1:97:ae:79:db:2a:04:e7:ae:a7:f6:33:86:70:c2:
                    89:32:98:51:d7:cb:4c:5f:08:fa:34:36:b2:df:91:
                    3a:ce:20:63:6a:b1:b6:24:3a:b3:77:00:37:77:d4:
                    39:31:6c:29:07:1e:76:75:ef:fc:13:dd:05:f1:22:
                    a3:60:39:2a:2f:32:57:47:79:ef:28:b8:0e:2d:d9:
                    ec:b1:99:41:e7:ef:fd:4e:53:02:d9:6b:c5:55:26:
                    47:96:cc:c1:3b:af:2a:5c:c1:50:d4:52:ed:db:71:
                    8c:e5:4c:f7:3a:f7:a3:ac:c1:90:bc:a7:d4:0f:b0:
                    ca:a2:e9:7b:77:39:94:84:69:30:41:85:b4:c7:d0:
                    bc:e1:06:bb:2d:a2:ea:23:bb:1f:f3:65:90:94:8c:
                    0f:4c:43:82:ee:cb:5c:db:ef:52:a6:18:1e:9c:89:
                    75:31:51:a9:f6:46:f8:e5:64:d5:9b:69:28:e6:c1:
                    17:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C9:BA:1C:9A:4F:DD:48:C8:F4:0F:AF:E9:59:75:B3:E9:9E:EE:63
            X509v3 Authority Key Identifier:
                keyid:3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:48:8b:87:ec:97:b5:68:d4:90:72:fd:36:39:56:bb:ce:7f:
         8b:67:27:83:e1:04:d1:bf:b9:fb:cd:18:7d:19:ad:56:eb:34:
         68:f4:29:51:81:b2:ad:31:cb:f3:cb:2a:4e:89:fb:56:02:df:
         e5:29:35:aa:29:f8:13:7a:5c:c9:99:74:95:d6:67:1e:23:d9:
         fb:12:78:46:94:01:04:27:30:bd:c5:ae:28:ec:07:bd:dd:ae:
         a7:26:5f:6f:15:5e:64:cc:e3:b4:3f:a3:02:0f:3f:9c:10:3e:
         c1:47:e1:63:7d:3e:6a:b8:37:92:b3:d3:2b:59:b4:50:d0:23:
         4e:6c:99:95:65:c7:60:82:1d:2f:1d:3a:db:f6:eb:43:b7:ea:
         5e:85:08:06:4e:17:83:7b:11:ce:bc:33:bc:40:2e:74:ce:ec:
         07:59:d6:8a:9f:f8:dd:50:d6:5a:c2:d9:76:1b:e2:e9:4e:c8:
         f1:f6:72:19:d7:4d:bc:96:47:52:a0:a0:70:7a:fb:df:68:b1:
         d2:ca:24:44:70:bd:f2:28:0f:4c:30:6b:f5:56:57:b2:71:99:
         f1:68:29:c9:12:01:91:4f:75:11:5c:19:2f:8d:57:7b:38:04:
         cc:12:1e:3d:32:d4:fd:1a:4f:9d:81:ef:5d:59:00:2c:bb:6f:
         65:66:58:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 14:36:06 2026 by rpki-client