Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9182C55/A87C02A067C911F19D78BEF56847A888/m4vSH42SvhZeLPvBgXwhsqXLTj0.mft
File:                     m4vSH42SvhZeLPvBgXwhsqXLTj0.mft (raw, json)
Hash identifier:          nwS6QWhcueng14uvRCN2szlZr7AMd7j/MDjYUv2Zdew=
Subject key identifier:   30:F9:19:5F:95:7E:20:9B:56:E7:6C:29:DF:14:FB:6C:31:C2:68:E0
Authority key identifier: 9B:8B:D2:1F:8D:92:BE:16:5E:2C:FB:C1:81:7C:21:B2:A5:CB:4E:3D
Certificate issuer:       /CN=A9182C55/serialNumber=9B8BD21F8D92BE165E2CFBC1817C21B2A5CB4E3D
Certificate serial:       2D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m4vSH42SvhZeLPvBgXwhsqXLTj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182C55/A87C02A067C911F19D78BEF56847A888/m4vSH42SvhZeLPvBgXwhsqXLTj0.mft
Manifest number:          2C
Signing time:             Thu 03 Sep 2026 08:59:39 +0000
Manifest this update:     Thu 03 Sep 2026 08:59:39 +0000
Manifest next update:     Thu 10 Sep 2026 08:59:39 +0000
Files and hashes:         1: m4vSH42SvhZeLPvBgXwhsqXLTj0.crl (hash: F+kW5WE6gquBtdo1b5r2SQVK8p1GX/bbZyOQndYlZ1Q=)
                          2: F896075A67F011F19C24B38C7747A888.roa (hash: hydwazcN1/022MJLhqV/lGME1YA76TdGnK0cCGRZjm0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182C55/A87C02A067C911F19D78BEF56847A888/m4vSH42SvhZeLPvBgXwhsqXLTj0.crl
                          rsync://rpki.apnic.net/member_repository/A9182C55/A87C02A067C911F19D78BEF56847A888/m4vSH42SvhZeLPvBgXwhsqXLTj0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m4vSH42SvhZeLPvBgXwhsqXLTj0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 08:59:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182C55, serialNumber=9B8BD21F8D92BE165E2CFBC1817C21B2A5CB4E3D
        Validity
            Not Before: Sep  3 08:59:39 2026 GMT
            Not After : Sep 10 08:59:39 2026 GMT
        Subject: CN=6a9936fb-f6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:46:0e:fc:58:07:49:5d:63:81:66:33:12:
                    77:0e:42:d5:b2:19:6b:0f:d5:c8:c4:55:ed:39:71:
                    85:a4:40:84:1a:4a:ec:65:ff:f2:36:f8:60:2d:37:
                    c2:a7:33:97:c2:0d:81:10:88:ab:9b:ce:27:48:19:
                    9e:b7:58:cf:b5:35:b5:2d:77:87:ee:a0:ee:79:36:
                    55:7f:14:f5:16:6c:bd:ca:01:8f:e0:60:2e:9f:61:
                    ce:66:4c:19:3c:cd:48:db:57:3d:a2:95:70:68:4b:
                    8e:d0:59:61:55:b8:de:28:0b:d9:81:c6:06:27:c7:
                    4c:4d:14:84:68:59:4b:b0:8b:1e:4f:9d:ef:60:ed:
                    76:af:77:02:55:5f:ce:ff:4d:75:5b:d2:43:af:5e:
                    4d:c4:15:d2:c6:fd:c1:57:c4:10:1f:5f:0d:69:f3:
                    3f:c3:ef:2d:d7:f6:19:0d:8d:dc:ad:10:b8:78:4a:
                    9f:64:f8:da:a8:33:82:ef:be:a8:17:eb:89:68:34:
                    68:64:ab:24:71:c7:5e:41:62:f3:45:ca:a1:2f:53:
                    3f:32:b3:94:0f:70:7e:d3:e2:1e:ae:68:ba:d9:74:
                    1c:c1:4d:7a:4e:bd:60:b4:e7:30:c5:10:f9:2b:81:
                    42:2d:52:02:03:59:83:49:80:17:05:67:63:8d:52:
                    ab:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F9:19:5F:95:7E:20:9B:56:E7:6C:29:DF:14:FB:6C:31:C2:68:E0
            X509v3 Authority Key Identifier:
                keyid:9B:8B:D2:1F:8D:92:BE:16:5E:2C:FB:C1:81:7C:21:B2:A5:CB:4E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182C55/A87C02A067C911F19D78BEF56847A888/m4vSH42SvhZeLPvBgXwhsqXLTj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m4vSH42SvhZeLPvBgXwhsqXLTj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182C55/A87C02A067C911F19D78BEF56847A888/m4vSH42SvhZeLPvBgXwhsqXLTj0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:94:95:1c:21:8c:91:94:c1:26:51:80:7d:d0:65:aa:23:98:
         7e:35:27:0c:25:1f:a6:61:7c:42:27:54:c5:56:9d:cb:c5:4b:
         24:99:02:9e:98:43:87:ed:3b:15:76:d8:42:42:05:ea:46:f2:
         23:3b:20:32:c9:63:21:f5:a1:79:30:72:3c:c3:a6:84:c0:56:
         59:8d:d3:48:a3:8c:c3:97:17:0f:2d:94:13:50:1f:aa:1f:33:
         1a:a1:30:65:c1:ca:43:3e:77:9c:59:2e:63:52:0c:4d:99:94:
         d2:b0:49:62:52:34:cc:8a:5f:a2:c5:c1:ba:52:c7:60:3b:e5:
         bb:34:58:95:d2:64:75:94:bf:be:74:b1:8e:67:3f:bb:00:1c:
         13:52:e9:94:8a:04:76:e6:83:ea:af:b4:5e:76:20:1b:92:b6:
         82:a2:92:7b:9c:24:00:3a:21:a5:ab:63:a7:16:8c:98:cf:8a:
         11:b8:af:df:d1:f0:82:50:81:e4:92:13:e1:a8:d0:d2:ec:80:
         a8:22:dd:31:5f:bf:21:ea:1d:e8:a0:e3:54:18:4d:0c:1e:7c:
         1c:31:6c:32:c5:ec:1d:81:61:75:b7:ea:08:4c:47:c5:c7:07:
         10:f3:42:d9:ed:7f:7f:28:52:28:a0:fd:9e:d7:68:94:9f:d1:
         ba:73:6d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:43:25 2026 by rpki-client