Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
File:                     w9iTsikbOh4b9fTwQdEFLizLslo.mft (raw, json)
Hash identifier:          6T9tWwWE2CBtJYpqZJVQ5aPRPu1wglqUEGuqV6oeGBs=
Subject key identifier:   2E:41:3D:D6:21:1F:DC:47:BB:5A:FC:D0:F2:BA:69:F3:E7:79:0D:8C
Authority key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A
Certificate issuer:       /CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
Certificate serial:       024A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
Manifest number:          022C
Signing time:             Wed 23 Sep 2026 03:01:12 +0000
Manifest this update:     Wed 23 Sep 2026 03:01:11 +0000
Manifest next update:     Wed 30 Sep 2026 03:01:11 +0000
Files and hashes:         1: w9iTsikbOh4b9fTwQdEFLizLslo.crl (hash: SNM5FdGoDKw5yqp91gR+Z8RSL6DO8CtS1/qoabhfJVY=)
                          2: ACFC76964A0E11EF91642A7AC4F9AE02.roa (hash: t0ohuFfdaakmzrww/Q0JMVR9B+akqFaPf0gzMitcQI0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl
                          rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915ADC4, serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
        Validity
            Not Before: Sep 23 03:01:11 2026 GMT
            Not After : Sep 30 03:01:11 2026 GMT
        Subject: CN=6ab340f8-22e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7d:48:32:a6:76:4c:9b:02:d1:16:e0:86:cd:
                    20:75:ad:95:c1:f0:f1:52:61:a6:04:86:87:c7:14:
                    35:a3:67:42:6a:d5:ac:8e:32:6a:73:27:4f:65:02:
                    d0:72:41:44:f7:2c:d4:75:5f:3a:8b:e3:11:41:1e:
                    0c:bc:70:32:d0:4f:32:ce:7a:72:66:f6:17:5f:90:
                    79:c1:b1:46:58:b2:f7:77:6f:11:3b:af:b1:13:b7:
                    21:e0:dd:0a:78:e1:13:0e:57:f2:90:9e:b0:20:e3:
                    35:29:d6:cc:7e:32:ad:78:f3:c2:fb:e2:c0:d3:18:
                    92:28:9d:16:e9:9d:ee:e3:64:94:09:66:60:21:aa:
                    56:7b:18:a0:0d:bf:57:92:66:21:79:a1:98:13:fa:
                    50:1a:c5:d0:81:69:8b:d2:77:1d:a8:50:43:79:e7:
                    a5:4c:42:3a:99:cb:fd:23:97:5c:38:38:1c:8d:4d:
                    fa:f0:11:a9:ac:7c:b9:fc:96:9c:e5:7d:77:4e:9a:
                    3e:c1:37:da:17:28:4c:44:c4:02:30:cc:2c:8d:bd:
                    3b:a1:20:9d:d7:f9:6f:ac:78:55:91:19:7b:26:aa:
                    99:3e:ff:d3:bc:47:64:a5:ea:c9:4d:a2:f6:a9:ae:
                    d2:cb:42:1c:2d:5e:4d:c4:fe:ef:31:26:c3:71:6b:
                    1a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:41:3D:D6:21:1F:DC:47:BB:5A:FC:D0:F2:BA:69:F3:E7:79:0D:8C
            X509v3 Authority Key Identifier:
                keyid:C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:63:0d:ad:c6:7c:21:a9:75:58:1e:d2:0d:2e:dc:6d:47:1c:
         f4:d3:81:df:c5:79:2f:be:76:40:27:6f:08:c8:fe:45:a2:ea:
         e4:e2:e6:47:ac:26:f1:42:3a:7b:00:52:7f:5e:78:c0:7e:48:
         97:4c:e5:6c:0d:f9:82:e0:10:dc:04:84:1b:57:7f:73:b3:28:
         3e:ef:58:0c:08:58:18:62:ce:53:08:08:f4:ca:10:84:5b:97:
         d9:96:01:ab:d1:37:42:4a:80:69:97:05:44:6b:4a:4b:77:9d:
         dd:f0:72:c9:ef:42:49:6d:a5:99:17:54:8a:4d:93:3a:da:ac:
         ed:9a:df:fb:3b:86:3e:e0:b7:dc:61:02:3d:73:46:4a:d3:16:
         cd:c6:6a:fb:16:4e:75:8f:4b:ec:a4:94:d3:d6:55:8f:19:6a:
         3b:c3:9e:22:73:66:5c:74:b3:28:24:56:52:5e:4a:e0:ac:75:
         05:21:b4:57:36:e3:fa:97:7d:9c:47:c8:34:41:ea:f3:cd:9c:
         46:ee:80:51:89:5b:8c:8d:5c:d1:ce:e9:d2:85:e2:0f:7f:e5:
         20:f1:06:a6:a6:f1:79:e6:a2:ea:96:f3:e6:d5:4b:c8:fb:91:
         06:c4:8c:27:73:66:7c:6b:87:ab:7b:0d:a4:fb:13:72:79:98:
         6c:8a:9b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:11:57 2026 by rpki-client