Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
File:                     4bkQuccxDJ9lWU_G6JifyVOzblE.mft (raw, json)
Hash identifier:          ZkUPLVZS+aoDcPIs7+aQ/5cNPMstYuj7NJUkz8tRFcg=
Subject key identifier:   3E:82:6F:92:0B:17:36:E0:65:4D:91:BA:F7:C6:6D:42:20:FB:10:20
Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51
Certificate issuer:       /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
Certificate serial:       0561
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
Manifest number:          0550
Signing time:             Fri 04 Sep 2026 20:09:53 +0000
Manifest this update:     Fri 04 Sep 2026 20:09:52 +0000
Manifest next update:     Fri 11 Sep 2026 20:09:52 +0000
Files and hashes:         1: 4bkQuccxDJ9lWU_G6JifyVOzblE.crl (hash: T8o0OoICsCqWyEa0R/0tlqLThtcexLgftmqTPFgSjB0=)
                          2: 4B1D585250EA11EC8FF55B24C4F9AE02.roa (hash: 4xgHsmFBzpOEDFWrTsnY/UVdPSnGuyQ3aHzpdWQKEDE=)
                          3: B38D932050EF11EC8583962BC4F9AE02.roa (hash: pjU8yoKCWn12BkoGzYOOIFYk2quDrJg/9dgAwTEFemk=)
                          4: 81EDAEEC6DE911F1BE416AB35CA30FBC.roa (hash: YA17LyHTfthDzdk1fJZ4Q1wQt3Gaa9uu+WHv2HF57n4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl
                          rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1377 (0x561)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
        Validity
            Not Before: Sep  4 20:09:52 2026 GMT
            Not After : Sep 11 20:09:52 2026 GMT
        Subject: CN=6a9b2590-b532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:62:0f:99:f3:ca:43:03:f2:85:7f:7e:84:39:
                    ca:38:8b:34:ce:6b:b6:bd:81:f6:c1:65:82:42:b7:
                    d6:38:4a:10:2d:31:0c:44:f7:85:32:80:9d:f2:3c:
                    11:ec:5f:0f:93:cf:e8:3d:1b:8a:c1:a1:16:19:39:
                    89:21:0b:9b:b6:f5:7b:69:24:4a:86:51:9e:50:30:
                    52:c9:ee:8f:7f:ba:0f:89:a2:10:2c:6b:bc:f5:7d:
                    1c:46:94:02:ea:4a:be:64:49:ef:21:20:4b:a0:14:
                    9d:b3:f1:57:a2:4b:d3:1e:fa:8b:7b:da:c5:11:b0:
                    52:07:34:66:ed:62:21:f2:70:7d:08:7b:cd:6f:82:
                    12:3b:66:02:60:86:95:53:2d:58:ce:30:18:b9:60:
                    23:06:07:e2:3a:27:25:94:5e:a4:7b:27:b9:1f:8a:
                    3d:75:83:25:88:d0:b4:ea:fd:90:08:98:ce:cf:cd:
                    aa:e1:d4:b9:dd:4c:62:75:0a:75:e9:f9:4e:7b:85:
                    ef:93:37:70:a5:4b:83:13:38:bf:fb:73:0c:ab:75:
                    fa:ef:4c:f5:e6:b9:6c:90:0c:e2:f7:18:20:2e:1e:
                    4a:1d:d8:83:cf:f4:07:65:76:6e:95:ae:ed:42:a2:
                    de:91:8a:0b:6a:4c:e6:6d:9e:d6:fd:68:c7:a8:73:
                    c1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:82:6F:92:0B:17:36:E0:65:4D:91:BA:F7:C6:6D:42:20:FB:10:20
            X509v3 Authority Key Identifier:
                keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:62:00:69:3c:98:a3:03:1f:bb:bb:40:52:27:8d:e7:21:b3:
         24:b4:68:5a:87:65:c4:88:58:2b:a9:b3:da:f4:c6:d3:1d:51:
         3e:aa:d4:48:80:32:8c:13:e0:a6:cc:68:26:c1:18:4f:9e:20:
         cd:8d:fb:6d:94:21:72:20:d3:31:72:18:36:a1:df:1e:7e:ec:
         13:84:db:d2:92:59:dc:c3:38:cf:78:6d:c9:cf:6a:c5:3d:fb:
         6c:5a:bb:3b:ab:f8:e4:81:c0:79:d1:cf:13:95:a9:d2:f2:09:
         a7:a4:81:d2:ca:58:6e:c3:53:f5:19:71:5f:62:e4:65:80:aa:
         43:b4:e8:cd:18:01:ac:33:59:0a:f2:a5:0e:f3:17:55:21:8d:
         03:6c:68:e0:1c:bb:0f:2e:d1:87:fe:73:bd:d8:2c:9f:f8:0e:
         18:db:4b:20:b3:35:48:19:a2:89:5d:ff:12:93:ad:48:82:91:
         e7:c5:ae:8c:76:fc:a9:2c:c1:a3:92:d7:16:20:d9:49:7d:4b:
         35:e9:1e:9e:f4:77:41:f8:e6:80:fc:6f:62:bc:3a:dd:c0:1a:
         ef:e8:9b:cb:e9:1d:a8:40:d8:3a:1a:8a:e4:a8:f0:36:4d:a7:
         37:6d:d3:2a:62:bf:da:bb:f9:c1:97:9d:d4:2d:87:b3:a5:4a:
         ef:5c:7c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:29:05 2026 by rpki-client