Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
File:                     lDrZvGF3q4wvjoExwUpUZexClU8.mft (raw, json)
Hash identifier:          ZxXz3hnA6JE4lK8fdNlsgjIdFuHy5A+8WdHF2L9TCiA=
Subject key identifier:   28:F4:0C:8F:92:F7:44:71:58:B4:74:83:F7:09:EE:3B:69:28:6F:65
Authority key identifier: 94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F
Certificate issuer:       /CN=A9158568/serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F
Certificate serial:       0238
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
Manifest number:          0225
Signing time:             Fri 04 Sep 2026 18:24:50 +0000
Manifest this update:     Fri 04 Sep 2026 18:24:50 +0000
Manifest next update:     Fri 11 Sep 2026 18:24:50 +0000
Files and hashes:         1: lDrZvGF3q4wvjoExwUpUZexClU8.crl (hash: wCOM6P2TIfooRAlh+nsR2jWQGEuavvB8eb6NLyCd/Aw=)
                          2: 203DB338782111EEAFDDBD86C4F9AE02.roa (hash: tSRP0mSyeCxo4ldlJd0x8udwsUTZBLiY2tDABXr5M1I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl
                          rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 568 (0x238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158568, serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F
        Validity
            Not Before: Sep  4 18:24:50 2026 GMT
            Not After : Sep 11 18:24:50 2026 GMT
        Subject: CN=6a9b0cf2-fb56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b1:06:0f:cc:5c:da:55:82:23:c0:d6:ba:e9:
                    c2:b7:0a:c2:5a:82:63:e7:3b:ea:84:ea:77:3d:55:
                    2d:ca:37:9c:02:c5:57:d1:60:ab:bd:73:72:b9:33:
                    17:76:08:28:bf:07:a4:c1:7e:0c:9f:07:e3:6e:03:
                    8c:30:9d:7d:d9:df:2e:74:17:fd:5b:de:1b:51:dd:
                    88:15:26:f5:55:9d:c5:5e:16:eb:e3:f1:9b:a0:21:
                    75:36:38:53:66:d1:cc:15:12:97:39:cd:03:52:8d:
                    fd:4b:6e:47:c9:de:a6:35:a6:c7:1d:5e:0d:b7:50:
                    35:2f:1a:52:dd:1e:e4:1f:7c:12:2b:b7:39:ef:cc:
                    0c:8c:47:e4:d1:96:09:88:6b:a2:94:98:5a:84:11:
                    56:2c:22:30:5e:e0:82:84:93:84:57:09:68:49:58:
                    e8:14:08:14:99:2b:13:e0:bd:ae:61:be:3c:cf:54:
                    bb:02:0d:e6:1d:7d:da:e2:dc:fa:a1:66:f2:a9:15:
                    24:17:6f:da:cc:76:0f:b4:cb:c3:1a:ef:20:5a:bb:
                    9c:fb:2e:58:3c:c5:3e:11:f0:60:56:a5:dd:06:87:
                    c1:2f:f7:03:44:de:09:a9:ad:dc:d5:99:1c:e2:0b:
                    fb:50:29:27:36:4d:9f:a0:2d:0e:bc:52:c0:ce:2f:
                    6c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F4:0C:8F:92:F7:44:71:58:B4:74:83:F7:09:EE:3B:69:28:6F:65
            X509v3 Authority Key Identifier:
                keyid:94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:5e:a7:4f:f2:0a:5a:0b:3f:c8:87:c8:5e:a0:c4:05:f9:08:
         81:9f:da:a1:64:d8:9c:92:9c:51:65:43:3a:ca:c2:2c:5d:95:
         79:01:29:ce:e1:67:02:67:29:06:70:4b:2a:65:f2:1b:fd:ba:
         0f:46:a4:0d:cd:f2:55:59:08:05:2a:cb:fb:07:4f:8a:7d:5b:
         cf:58:3a:87:8e:50:bb:cd:1a:8f:83:f6:ba:2e:6c:93:51:c6:
         7b:4f:4b:48:e2:93:b2:8c:90:34:8f:ba:c1:62:e1:91:a1:df:
         57:24:95:de:c0:01:06:6b:33:d0:0b:ce:55:0e:56:f1:fd:55:
         e0:d1:02:11:91:09:be:b1:1d:8b:d0:4b:10:e0:1b:7e:55:d5:
         d5:47:bc:15:78:73:24:a0:fb:4f:e8:87:77:63:00:cb:36:bd:
         90:ac:65:5d:b0:23:05:c8:37:7b:82:51:1f:6e:a7:a7:e6:03:
         6a:3a:fd:bf:cc:33:83:23:c0:a3:81:25:b8:22:f8:94:ad:7a:
         ea:59:bd:bf:ff:c1:ac:14:6c:6b:11:4a:78:d5:74:06:27:b3:
         69:38:ad:40:7e:47:bf:ae:f2:4c:73:16:15:70:b1:82:0d:1e:
         ce:35:bf:98:8e:74:31:dd:52:5a:2a:01:1c:1b:b2:04:f2:d4:
         5a:d9:f2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:19:29 2026 by rpki-client