Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.mft
File:                     haeIySXAhvfi-8AHHZ6SmOwCPlk.mft (raw, json)
Hash identifier:          rtLiGrMH5/vEu//oKNPdV4kRncpemgtPVzEhTiV3JCk=
Subject key identifier:   5B:51:5A:53:1B:F0:4B:AE:D8:D5:47:5F:4B:95:70:9D:62:9D:2E:C5
Authority key identifier: 85:A7:88:C9:25:C0:86:F7:E2:FB:C0:07:1D:9E:92:98:EC:02:3E:59
Certificate issuer:       /CN=A9163FDD/serialNumber=85A788C925C086F7E2FBC0071D9E9298EC023E59
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haeIySXAhvfi-8AHHZ6SmOwCPlk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.mft
Manifest number:          50
Signing time:             Wed 07 Oct 2026 08:52:42 +0000
Manifest this update:     Wed 07 Oct 2026 08:52:41 +0000
Manifest next update:     Wed 14 Oct 2026 08:52:41 +0000
Files and hashes:         1: haeIySXAhvfi-8AHHZ6SmOwCPlk.crl (hash: SpIMolqycwp+z/iF8brI42pbxkXya2Rd9DbQMk1ZMrU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.crl
                          rsync://rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haeIySXAhvfi-8AHHZ6SmOwCPlk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 08:52:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163FDD, serialNumber=85A788C925C086F7E2FBC0071D9E9298EC023E59
        Validity
            Not Before: Oct  7 08:52:41 2026 GMT
            Not After : Oct 14 08:52:41 2026 GMT
        Subject: CN=6ac6085a-ff5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:02:f2:71:9d:5d:7b:02:5d:a1:0b:7e:5e:f8:
                    5e:1a:28:68:20:12:7c:7d:26:0f:ac:10:65:db:2d:
                    63:88:fd:7d:82:81:14:63:63:ac:1a:09:b7:77:99:
                    84:1f:1b:15:a5:96:a8:85:bb:7d:45:d2:72:e8:6e:
                    10:c7:21:ed:da:c5:a1:f4:1f:99:7c:a5:69:30:41:
                    79:0e:d6:1c:f0:14:1b:19:e3:1b:7c:9d:62:20:48:
                    7d:b7:06:8a:0d:99:10:07:29:7d:2b:24:b4:59:7c:
                    79:63:0e:75:22:97:e3:51:41:74:dd:c7:df:33:ef:
                    50:bb:01:84:f5:d6:f4:cd:9a:6f:b5:8c:06:8f:c1:
                    24:8e:70:72:d3:8b:9b:4c:85:cf:d0:64:13:b7:97:
                    07:0d:bb:f7:29:8e:f0:bb:fa:11:4a:5c:48:da:ee:
                    1c:f7:88:f1:3a:75:9c:60:19:a6:f3:50:83:ad:e9:
                    c7:3f:a0:c9:84:49:87:4a:d9:df:d9:92:95:64:b1:
                    a3:25:2c:d7:c0:a4:a9:3d:bb:56:cf:c2:5d:f7:88:
                    ec:1d:da:16:d1:63:39:ad:33:e6:de:64:c2:ec:42:
                    cb:0d:36:ac:2e:92:68:55:e7:cf:47:d5:8c:40:87:
                    82:07:f2:31:2c:01:dd:68:d0:c0:ee:c2:d5:42:a3:
                    39:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:51:5A:53:1B:F0:4B:AE:D8:D5:47:5F:4B:95:70:9D:62:9D:2E:C5
            X509v3 Authority Key Identifier:
                keyid:85:A7:88:C9:25:C0:86:F7:E2:FB:C0:07:1D:9E:92:98:EC:02:3E:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haeIySXAhvfi-8AHHZ6SmOwCPlk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e9:ce:31:86:cf:d6:85:69:01:fe:fe:66:04:d6:94:7a:c4:
         d7:da:e7:3b:a2:aa:d8:ae:05:be:43:c8:f7:03:e1:55:eb:38:
         49:94:91:3c:9a:96:a0:cc:3d:d1:45:de:bd:6c:10:23:31:17:
         e2:b4:55:30:e7:f3:17:f9:9e:8b:af:55:0f:b9:0e:16:0d:d9:
         5c:e1:c7:a6:c0:2d:6f:72:d3:45:7a:05:a7:09:6e:56:60:8c:
         c0:f5:b2:94:a8:c1:3c:24:fc:7f:d8:22:57:d5:a7:2a:48:9d:
         a3:28:a2:8c:55:8f:bc:89:5c:6c:b4:f9:f8:a5:14:95:55:67:
         9a:e1:0e:73:c0:2a:45:fe:c3:23:88:e3:08:70:6d:35:4f:ea:
         54:6c:16:49:e2:c4:82:68:cc:60:6b:7f:b1:cb:85:47:e1:08:
         95:d1:cb:0c:c6:13:38:82:3f:74:a9:c7:69:72:5e:d7:e0:8b:
         b9:18:cc:21:d4:08:4d:e5:70:f2:84:b3:9b:6e:af:b0:cb:8a:
         55:39:71:97:6f:5a:78:1d:04:6d:d2:de:1e:ae:0f:5b:e6:3f:
         76:84:46:e9:42:54:98:89:cb:cc:c7:85:37:c5:d3:f5:5e:81:
         42:02:18:f8:6d:12:67:7f:d4:4e:cd:ad:3b:d3:58:a4:bf:68:
         e8:c5:76:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:56:55 2026 by rpki-client