Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917400B/751F2FEEA50511F1912567AC3311F970/pV9UuqfQtkfrP4XvIJInVGiUaKI.mft
File:                     pV9UuqfQtkfrP4XvIJInVGiUaKI.mft (raw, json)
Hash identifier:          2SeQ2GtDqsoG0XizMtHCxJH0lLw4tyWZRZ0u7t5Gi48=
Subject key identifier:   C2:2D:2B:EE:DE:36:4C:5B:A5:D8:95:7E:2F:3B:D4:FA:C6:1D:84:29
Authority key identifier: A5:5F:54:BA:A7:D0:B6:47:EB:3F:85:EF:20:92:27:54:68:94:68:A2
Certificate issuer:       /CN=A917400B/serialNumber=A55F54BAA7D0B647EB3F85EF20922754689468A2
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV9UuqfQtkfrP4XvIJInVGiUaKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917400B/751F2FEEA50511F1912567AC3311F970/pV9UuqfQtkfrP4XvIJInVGiUaKI.mft
Manifest number:          14
Signing time:             Mon 05 Oct 2026 09:33:01 +0000
Manifest this update:     Mon 05 Oct 2026 09:33:00 +0000
Manifest next update:     Mon 12 Oct 2026 09:33:00 +0000
Files and hashes:         1: pV9UuqfQtkfrP4XvIJInVGiUaKI.crl (hash: SLhfbU6a7tvuZGNb+Ro0phZ/RHaWlwFXfsXOgR4jldg=)
                          2: 5F933FFCA50611F19CD6341B3411F970.roa (hash: gndbqML7al7PN9otqQyfPX/KFL5MStbXV555/uvySpc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917400B/751F2FEEA50511F1912567AC3311F970/pV9UuqfQtkfrP4XvIJInVGiUaKI.crl
                          rsync://rpki.apnic.net/member_repository/A917400B/751F2FEEA50511F1912567AC3311F970/pV9UuqfQtkfrP4XvIJInVGiUaKI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV9UuqfQtkfrP4XvIJInVGiUaKI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 09:32:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917400B, serialNumber=A55F54BAA7D0B647EB3F85EF20922754689468A2
        Validity
            Not Before: Oct  5 09:33:00 2026 GMT
            Not After : Oct 12 09:33:00 2026 GMT
        Subject: CN=6ac36ecc-f0b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:90:a4:89:2e:f1:83:18:33:8f:51:6c:b3:f8:
                    3c:18:b8:ae:ce:47:b2:35:61:e4:d5:d3:fc:a7:3f:
                    3b:45:fd:34:d2:30:5d:e1:c9:2a:d1:af:10:dc:d6:
                    8a:97:37:7e:51:c0:63:db:77:47:e0:94:04:79:ec:
                    aa:26:78:a9:2c:e5:5e:fc:c3:b1:30:e3:e9:43:2c:
                    ac:60:3d:f6:7d:f8:ba:a0:a7:1d:f3:7f:5c:ca:f3:
                    07:4f:0c:2f:ad:a0:bb:d1:e2:d4:b9:a0:3b:da:fb:
                    28:c2:d0:e6:46:1d:1d:dd:7d:f5:70:80:af:80:b3:
                    94:51:10:6e:a3:ea:e7:0b:c5:d0:eb:0d:fe:19:df:
                    9c:70:4b:af:3b:08:cc:fc:bc:d1:a6:5f:28:4b:2a:
                    55:7c:b4:be:07:98:74:d6:c2:0c:02:77:80:b3:43:
                    ab:54:e6:72:40:af:49:05:cd:b5:fb:ac:45:44:b3:
                    81:35:1a:dd:01:a5:10:77:05:7f:6f:9a:a6:b3:a3:
                    0b:54:77:a1:c5:03:f7:fe:ba:0d:af:67:1b:46:f5:
                    2e:1e:16:36:04:63:78:56:9f:d1:d6:d1:79:7a:6c:
                    dc:5d:b6:79:06:35:58:dd:d3:fe:bc:1a:28:38:6b:
                    33:b1:44:c5:24:52:37:b1:58:06:6f:19:e7:cd:27:
                    bc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2D:2B:EE:DE:36:4C:5B:A5:D8:95:7E:2F:3B:D4:FA:C6:1D:84:29
            X509v3 Authority Key Identifier:
                keyid:A5:5F:54:BA:A7:D0:B6:47:EB:3F:85:EF:20:92:27:54:68:94:68:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917400B/751F2FEEA50511F1912567AC3311F970/pV9UuqfQtkfrP4XvIJInVGiUaKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV9UuqfQtkfrP4XvIJInVGiUaKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917400B/751F2FEEA50511F1912567AC3311F970/pV9UuqfQtkfrP4XvIJInVGiUaKI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:69:89:49:78:03:57:40:ce:d8:57:71:f6:5a:16:6c:3f:3b:
         6c:82:e5:d7:82:cc:68:25:09:87:b2:61:fe:85:9a:40:ee:c6:
         2f:2d:74:3f:cc:8c:ad:2b:ab:0e:16:f2:42:bf:a6:4c:92:8f:
         68:28:fd:85:b3:e3:bd:39:64:e7:a5:d8:2f:52:ad:b1:dd:05:
         89:03:cd:53:6b:e8:06:9a:62:4e:3d:13:6d:cd:cc:b1:3c:55:
         2c:cb:71:aa:6e:e1:46:9a:2e:4c:87:c6:e1:83:d6:61:12:f5:
         33:71:0a:84:08:2e:c8:fa:15:b2:e6:19:58:51:4d:ef:11:75:
         67:7b:5f:c8:00:f2:ea:e8:7e:5f:e1:9a:d2:31:5c:0e:67:84:
         f1:81:04:66:09:7b:7e:43:57:c1:e6:d8:f2:22:bf:f2:dc:13:
         e0:c1:d9:70:9a:f7:9d:b6:20:05:02:ff:f6:f4:2e:be:d6:1a:
         7b:76:49:ca:71:e5:23:82:a9:48:53:91:d5:84:a2:32:93:84:
         5c:41:93:ea:2f:62:21:58:5f:78:cc:11:31:5e:cb:ca:3d:c6:
         94:c7:c2:b0:d1:9c:21:4c:d6:91:23:9f:4c:a7:79:c4:dd:d9:
         83:d1:86:d7:0f:aa:19:bc:a8:fe:63:bc:bb:6b:44:6f:1c:69:
         73:56:67:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:53:21 2026 by rpki-client