Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
File:                     mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft (raw, json)
Hash identifier:          Q/M0vAQt3jPMAL8y4sE/5sJanKDika4MOveeKprqkgA=
Subject key identifier:   35:8C:4C:87:8A:1A:82:A2:9A:DC:04:69:EB:64:CE:C7:4F:7E:1A:6C
Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A
Certificate issuer:       /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
Certificate serial:       360F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
Manifest number:          35C5
Signing time:             Thu 24 Sep 2026 14:40:02 +0000
Manifest this update:     Thu 24 Sep 2026 14:40:01 +0000
Manifest next update:     Thu 01 Oct 2026 14:40:01 +0000
Files and hashes:         1: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl (hash: HSIp1DQIq3Fqu+2rnmKFvKBeyANj3JgPvEQui8JBzYs=)
                          2: 925D8646772A11EBAE8A8181C4F9AE02.roa (hash: GHAiy1U9rxwuTHVrOO4W5yr6dZrHk1J4DMJnsgMqY/I=)
                          3: 9322B46CAEB111EA8EFC2878C4F9AE02.roa (hash: yTJcTl5edJ4kNv98CPAK/m1H2g/dq/a73IywMpJw5X0=)
                          4: 31745126CD1811EC917CB819C4F9AE02.roa (hash: G8AuTu7DkmkKWVjhwU/vCSBI+wvMCkDDSTrsyLfGoH0=)
                          5: B35C646A52E211EAAF44AE23C4F9AE02.roa (hash: Pbz8SUu4Fa6QitdUmbJG9+WkFTgMMNMW+GHyYn+iC2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl
                          rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 14:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13839 (0x360f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167B50, serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
        Validity
            Not Before: Sep 24 14:40:01 2026 GMT
            Not After : Oct  1 14:40:01 2026 GMT
        Subject: CN=6ab53642-acc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0c:ad:2a:e7:ee:fd:15:53:4a:e3:c4:e5:9d:
                    0d:e7:fd:1e:7f:c7:19:2e:5f:d4:97:f4:67:4a:ad:
                    4d:ef:3b:94:36:3f:3f:0e:05:7d:11:42:62:73:1b:
                    f7:3a:cd:2b:50:d9:fb:2e:57:c2:86:a5:73:08:60:
                    32:42:d3:d4:61:bb:24:34:8b:93:fd:0e:70:46:36:
                    81:cb:84:c0:c5:2d:76:5d:e2:09:52:97:e4:2e:7c:
                    21:f8:0f:84:bf:ad:8f:bd:fb:89:13:94:fc:73:94:
                    d3:3d:1f:87:a4:0f:87:c6:f2:9e:25:8f:a3:43:53:
                    df:45:82:de:43:59:9b:54:f0:28:66:bd:02:af:e2:
                    c1:58:be:ca:1a:f8:cc:52:64:b1:e3:ef:6b:a9:da:
                    7b:7d:37:0e:1c:70:4e:97:2b:61:0d:a7:1b:f0:51:
                    88:69:6f:98:25:ff:91:35:8a:78:9c:96:e9:d1:d4:
                    78:48:5f:30:db:90:ed:a3:36:f1:13:e3:d0:00:d5:
                    6b:b3:71:49:2d:4f:87:f5:d4:27:50:d8:55:98:5c:
                    8f:75:c8:02:9b:0e:a3:4c:f0:83:e2:ce:26:09:da:
                    f1:f9:36:1f:eb:95:a4:19:6c:73:da:71:9e:67:7b:
                    05:42:8c:94:17:96:c7:66:3a:aa:01:52:a1:d4:c7:
                    37:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8C:4C:87:8A:1A:82:A2:9A:DC:04:69:EB:64:CE:C7:4F:7E:1A:6C
            X509v3 Authority Key Identifier:
                keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:38:16:d0:d6:3a:8c:ec:a7:8e:a8:29:5e:6e:8c:f3:c5:d1:
         da:42:85:88:f1:00:53:c4:bc:bb:a5:5e:4d:ba:d5:05:56:ea:
         d4:74:bf:a4:24:50:4f:88:e3:c0:01:07:dd:b0:5c:a5:10:c4:
         bb:fa:74:d8:1c:7f:10:07:2f:71:79:ce:4f:50:47:ef:63:07:
         29:dc:65:28:80:d9:8c:56:fe:48:fa:09:63:00:a7:a0:49:00:
         cb:55:b5:26:ca:b2:65:b7:8f:d2:9a:12:27:26:d4:f2:81:80:
         71:2a:d9:ad:d7:11:2e:49:3e:37:2e:b6:8c:30:5e:eb:f7:f9:
         7f:04:4a:7e:83:43:b1:4a:bd:d8:bf:cf:3e:93:36:b6:e2:a7:
         2e:3d:2a:b4:0d:df:4a:7a:51:a9:d2:e5:af:f6:6a:b1:20:8a:
         54:e4:de:27:82:ba:eb:61:98:1d:99:2a:bf:eb:34:50:94:6f:
         68:8b:87:0a:af:48:d9:bd:f1:96:95:35:bc:d7:21:fe:f7:08:
         f1:a6:8a:f3:db:5f:01:b9:49:fa:f7:34:57:f5:5b:45:80:7a:
         be:4a:da:3e:25:7a:99:23:ee:ab:95:f5:6f:fe:86:0d:a6:d3:
         85:ec:f2:87:8a:34:c2:6b:80:3b:ef:48:84:a0:98:6a:e3:26:
         ce:39:2e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:53:27 2026 by rpki-client