Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft
File:                     t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft (raw, json)
Hash identifier:          D1HXQWJ6DPrWi0zYWLiHdwSGWk4VMkIyQqJvNMNu0EY=
Subject key identifier:   54:14:02:5D:FF:D2:C0:10:32:CB:53:DB:22:E4:7A:0F:2F:1B:0B:65
Authority key identifier: B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44
Certificate issuer:       /CN=A918897A/serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44
Certificate serial:       020A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft
Manifest number:          01FF
Signing time:             Tue 29 Sep 2026 03:39:12 +0000
Manifest this update:     Tue 29 Sep 2026 03:39:12 +0000
Manifest next update:     Tue 06 Oct 2026 03:39:12 +0000
Files and hashes:         1: t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl (hash: gKQpm0SVsI4qZ7oY4gYg1PF4cbG9G09EPonvJRDSERs=)
                          2: 7FF359B6B6C811F18D13B1305311F970.roa (hash: VmCwvrFcu0PNdlfteui3PG1qQ/JsD8Z9MvwreyRzi9I=)
                          3: 129F73D4A0B311F1BD8641945E11F970.roa (hash: xtVZEwpB9qp5L5kEyugagMNaUS1YYcporleEnmwtj/k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl
                          rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 03:39:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522 (0x20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918897A, serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44
        Validity
            Not Before: Sep 29 03:39:12 2026 GMT
            Not After : Oct  6 03:39:12 2026 GMT
        Subject: CN=6abb32e0-054b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:29:db:0b:a1:e0:73:cb:cf:69:65:be:e0:
                    9e:5f:1b:83:c7:d0:d0:09:66:45:81:91:88:0c:be:
                    98:71:af:bb:37:c0:e0:7e:c8:8a:08:94:69:d0:7e:
                    08:4f:35:ef:78:68:5e:89:f8:e8:ee:16:e8:3e:45:
                    0c:32:45:6c:24:d4:f2:90:f6:1b:98:3f:54:de:68:
                    ea:77:63:4b:fe:20:d3:96:29:ad:30:25:43:04:84:
                    60:02:b1:dd:cd:25:bc:37:5c:26:22:9a:a9:48:aa:
                    61:8c:70:c6:90:e9:79:79:6a:d3:8c:29:4a:fe:9a:
                    da:08:03:99:ba:e5:22:6b:e9:43:57:a8:fd:bb:5e:
                    71:d2:30:25:cb:7e:57:e0:84:f5:42:30:47:e8:1d:
                    a0:3c:9a:e3:a3:d4:d5:77:b4:62:90:1a:78:ec:6e:
                    10:b5:c5:df:a9:60:e1:94:a4:f9:a1:2d:ad:e6:b3:
                    f8:fa:0f:9e:f7:b1:d3:44:15:f0:99:6b:09:f0:20:
                    f0:f1:ea:75:92:f9:d3:fc:2e:e0:c0:29:23:e6:b9:
                    86:36:68:8e:d1:c1:91:16:dc:8f:d0:89:45:e9:ef:
                    e1:73:0d:b1:1e:d4:bd:4f:d6:86:ac:f6:0c:77:e3:
                    2e:7d:4b:21:b7:b3:89:94:57:b4:00:d4:a0:21:f7:
                    c3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:14:02:5D:FF:D2:C0:10:32:CB:53:DB:22:E4:7A:0F:2F:1B:0B:65
            X509v3 Authority Key Identifier:
                keyid:B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:3a:3c:9a:07:e7:9e:c9:5f:ee:46:e0:f0:89:bb:9e:88:79:
         5d:ab:32:8f:14:65:f6:27:c8:61:bb:1e:1c:0d:2f:dd:2b:9e:
         ee:fc:b7:69:ae:bc:0e:dc:91:a0:e7:8f:d7:3a:18:51:c0:a3:
         b1:bb:ff:81:bc:13:80:51:18:01:23:7b:de:fa:6d:ae:51:85:
         65:b7:d9:ce:69:1b:90:1a:6b:c2:71:58:5d:7d:17:58:57:b5:
         f0:e4:c8:1f:43:ac:ca:09:7b:fd:cf:38:0f:60:71:79:69:15:
         ae:cd:5e:bb:cc:53:97:2c:85:ba:25:e1:8a:34:2e:e8:e1:40:
         90:5b:e0:93:d8:a0:2b:c5:b5:f3:94:83:33:4a:f3:57:3a:ed:
         c7:39:c8:c6:df:27:1e:4c:09:5a:23:dd:74:4b:24:6b:f5:6c:
         cb:ae:7e:59:a8:e7:63:37:54:53:c3:23:ac:33:50:a9:54:61:
         bd:98:82:ab:2c:2e:18:fa:67:b1:6e:df:96:c3:b5:64:d7:96:
         b7:95:12:87:37:c9:14:7e:cf:12:f2:00:6a:a9:69:0c:cc:9a:
         e6:24:7c:4c:3a:a7:be:76:c0:53:18:ee:cd:5d:31:bb:ab:1c:
         61:87:0b:90:12:6c:3e:7a:2b:fc:0b:7a:44:d5:5b:0f:1a:bf:
         92:60:5d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:29:30 2026 by rpki-client