Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft
File:                     79iPiiibFMeUQxKLu7eRtS2lEa0.mft (raw, json)
Hash identifier:          GFzmz70r7AjN0k8nPXfpUlhPkAH/il+Ivbu7ZNjBuj8=
Subject key identifier:   CC:68:8E:2C:5C:F7:8C:E4:7F:48:EE:3D:41:3B:5C:C7:31:94:52:AF
Authority key identifier: EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD
Certificate issuer:       /CN=A9171D3F/serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD
Certificate serial:       02BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft
Manifest number:          02AE
Signing time:             Mon 05 Oct 2026 01:48:54 +0000
Manifest this update:     Mon 05 Oct 2026 01:48:54 +0000
Manifest next update:     Mon 12 Oct 2026 01:48:54 +0000
Files and hashes:         1: 79iPiiibFMeUQxKLu7eRtS2lEa0.crl (hash: kitCK6ENgOSWtniq4FHJI0szD5Fl/kfSKwPyEpQp+hk=)
                          2: D0A263DCB09A11F0937ACB4DC4F9AE02.roa (hash: sGhpkR6yhXyOK18x4RQlxvcaTO+7oSqNbdwtlNU5FBw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl
                          rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 01:48:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 698 (0x2ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171D3F, serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD
        Validity
            Not Before: Oct  5 01:48:54 2026 GMT
            Not After : Oct 12 01:48:54 2026 GMT
        Subject: CN=6ac30206-9572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1c:8f:23:7e:66:86:90:d9:cc:5f:b1:36:d6:
                    7a:c3:d9:a3:01:61:0c:b6:0c:11:d4:b3:a3:27:38:
                    c9:7a:6a:2f:31:da:59:2e:16:69:f2:86:3d:69:54:
                    6c:0e:bc:9e:6c:d1:53:f3:07:a0:4a:b9:cc:4e:c8:
                    e2:7c:fa:22:2d:1c:b9:72:b0:3d:60:b9:6f:ac:e5:
                    66:b2:a7:0e:ae:53:08:51:98:14:51:77:74:a3:99:
                    5f:e0:08:a6:f5:5e:3a:06:0f:5e:62:e7:70:e8:2f:
                    18:19:d1:af:93:cc:99:3d:17:e4:22:68:53:61:52:
                    65:6f:73:d9:0a:95:d7:92:7f:b7:09:47:2c:bd:8d:
                    c5:b6:06:76:6a:24:03:e3:f9:e8:d3:16:a5:2c:d3:
                    45:36:f8:16:23:77:7f:6f:80:80:75:f6:bd:b5:c8:
                    74:c6:16:4f:6d:d6:04:bb:8a:96:fb:9a:9c:03:71:
                    4f:6f:91:3e:96:7c:b4:97:79:73:7c:0b:23:55:21:
                    b5:b7:13:e3:a5:e0:d0:80:70:5a:0a:68:92:b4:4a:
                    08:44:a3:9d:16:5e:84:c2:47:93:3f:38:99:04:56:
                    fc:46:f7:2c:4e:02:f3:19:3a:51:86:6f:cd:dd:81:
                    7d:06:7f:ef:58:43:7f:d6:72:a8:30:dd:e1:3b:bb:
                    70:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:68:8E:2C:5C:F7:8C:E4:7F:48:EE:3D:41:3B:5C:C7:31:94:52:AF
            X509v3 Authority Key Identifier:
                keyid:EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:f4:1b:35:5f:9a:61:2d:82:61:e5:ea:3a:66:f6:6c:40:78:
         a4:55:53:bd:5b:a3:81:f9:69:ea:05:d6:03:e4:f8:b3:3f:33:
         a3:13:52:40:19:f9:cc:cb:44:d3:1a:2d:0a:c9:e3:db:4a:59:
         82:7e:2b:60:5d:4b:6e:63:72:70:b5:a2:d1:8d:79:41:1e:32:
         34:7a:c4:00:c6:2d:79:ea:76:d3:6c:d3:d2:93:ab:cf:3f:1e:
         14:9b:ce:89:79:a6:40:85:b4:6f:15:2a:b2:89:72:de:b4:7d:
         ff:33:65:19:34:f1:ef:8f:4b:00:d9:a5:3a:39:b7:fb:45:51:
         a9:06:c9:6e:56:9b:62:74:09:88:99:49:9e:bc:19:f1:75:8a:
         ee:b2:f0:4e:8a:1a:db:fa:5b:c6:47:f0:d0:68:c1:d7:34:e8:
         7a:63:93:4a:eb:f9:6e:65:48:bf:0f:cc:b9:f9:95:08:53:8a:
         85:66:9e:93:de:e4:bc:2f:1c:52:35:4b:63:3a:2e:12:30:5c:
         80:14:73:eb:20:be:d0:82:da:40:1b:d8:f5:6b:ed:fb:d4:9a:
         a2:09:12:91:d6:18:5f:09:7f:b5:7d:62:cd:7b:f8:d8:f4:79:
         22:21:0c:e3:96:6b:e6:88:f7:17:43:a2:38:2b:1d:30:cd:01:
         cb:fe:27:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 00:59:53 2026 by rpki-client