Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft
File:                     RByw2GqSzt--gIPe1peibWI-5lU.mft (raw, json)
Hash identifier:          CD1NTysRg/elViSy8o+qLf9PSm9a5JfjMLdWTXtDwa0=
Subject key identifier:   FE:82:B7:67:29:1E:C0:BB:30:7A:85:A8:1C:9E:B8:A5:5E:0A:F9:AA
Authority key identifier: 44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55
Certificate issuer:       /CN=A9171235/serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655
Certificate serial:       043C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft
Manifest number:          042C
Signing time:             Sat 03 Oct 2026 00:33:31 +0000
Manifest this update:     Sat 03 Oct 2026 00:33:31 +0000
Manifest next update:     Sat 10 Oct 2026 00:33:31 +0000
Files and hashes:         1: RByw2GqSzt--gIPe1peibWI-5lU.crl (hash: z+h6R9V9YmkyGWBEwNsGHYVLC1Y//7RbIwpYf3K9Y1c=)
                          2: 9C072F22C9E411EC956B0A3CC4F9AE02.roa (hash: t1SOICrusOgawX9+u5Y2aTK/YPhhEOG5ZgMKx4tTpgo=)
                          3: 9CD74392C9E411EC956B0A3CC4F9AE02.roa (hash: Q7hGGSqwTn1Hry6vIOjNT8JbvFoGysAzJ6H0s1cSSPs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl
                          rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 00:33:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1084 (0x43c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171235, serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655
        Validity
            Not Before: Oct  3 00:33:31 2026 GMT
            Not After : Oct 10 00:33:31 2026 GMT
        Subject: CN=6ac04d5b-c28c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:59:ba:d9:ad:90:a1:d0:77:8c:8d:17:10:87:
                    d6:e5:26:e3:f0:d5:83:cb:60:fd:16:b2:c4:68:a8:
                    01:54:83:9f:23:2d:70:ff:61:bb:9e:9b:12:4e:cc:
                    0f:27:cb:41:b1:5c:11:8a:a6:c2:d0:dc:6e:e6:4d:
                    4d:ce:f4:b7:47:8d:74:37:b0:6e:d7:53:65:a1:bd:
                    a3:e9:a0:bc:2b:59:4d:83:dc:df:b0:04:65:e3:11:
                    dd:e2:f4:9c:af:a2:a5:78:fa:5a:18:4b:78:7d:87:
                    a9:43:61:fb:b0:0a:a9:a5:be:42:ef:18:fc:2d:37:
                    c1:33:aa:a2:1f:88:e5:20:57:78:9c:ba:d0:b3:fe:
                    d8:79:38:91:d9:bc:94:48:e4:ca:6a:b9:48:53:ac:
                    01:b7:86:42:86:5a:0f:e8:55:e4:c8:61:16:ef:4a:
                    6a:c2:79:8d:69:2c:12:9a:fb:18:12:63:24:60:0e:
                    19:96:50:01:6b:e9:ea:48:e1:bd:22:2a:b0:bb:69:
                    0c:7d:ad:5d:77:f5:06:a1:b1:86:0a:78:b4:f3:14:
                    d1:3f:a1:bc:03:01:af:dc:19:8b:07:94:2c:c0:aa:
                    7c:bd:8e:e2:9b:4a:f3:92:27:3a:1e:1f:6f:56:e0:
                    ec:24:df:69:d6:34:a9:44:50:e2:36:24:7c:ef:01:
                    cd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:82:B7:67:29:1E:C0:BB:30:7A:85:A8:1C:9E:B8:A5:5E:0A:F9:AA
            X509v3 Authority Key Identifier:
                keyid:44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:cb:70:be:63:54:c3:a4:c9:a5:77:c9:38:56:78:98:27:95:
         ae:67:d4:63:0b:2a:8d:79:b2:bc:79:43:e0:7c:87:fb:76:3e:
         87:6b:45:1c:11:65:b2:19:e0:2f:05:ad:50:71:9b:5d:7b:bf:
         b4:32:c6:53:04:f3:ee:d6:e7:27:e2:4c:5a:a8:99:79:bf:3a:
         62:52:cb:2b:c5:c3:ee:7c:fb:33:4c:d8:a6:aa:e6:12:18:0b:
         d0:fd:e9:78:cc:32:81:6d:c5:29:c2:8b:99:02:37:b9:0b:6a:
         b3:74:a2:34:18:90:4e:16:62:a8:6a:1e:23:73:6b:96:f3:e0:
         bc:e7:4d:e8:51:9f:24:6f:12:0f:4d:3d:8c:a6:b4:04:74:b1:
         9e:ae:1d:ed:12:a1:2a:c3:50:47:4b:18:8e:bd:ef:ef:92:8e:
         52:d2:08:00:bf:16:d6:3f:d6:06:56:dc:70:6d:8c:7f:9e:51:
         c6:8a:bd:9b:3d:1d:1c:2c:e0:87:88:f8:4c:0d:f8:8d:b0:19:
         90:ab:ae:74:bd:47:ce:51:1e:c5:8e:5b:23:3c:e1:21:4d:72:
         47:12:e6:b0:68:29:b2:f6:dd:07:40:86:57:e4:7e:4f:43:0d:
         3a:bf:2c:4f:68:fe:a0:5e:08:c0:a3:34:1d:24:1d:08:73:b0:
         ea:a8:3b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:55:53 2026 by rpki-client