Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.mft
File:                     tYgfusqd6_Rspghj0pd8U_3WwZA.mft (raw, json)
Hash identifier:          WTrMMvMvS7HJo6pikliPtD735nrP/MDx6GkExKsu7hY=
Subject key identifier:   78:4A:9F:7E:97:59:DD:53:AD:33:A0:9E:8D:F2:57:44:29:C9:29:6B
Authority key identifier: B5:88:1F:BA:CA:9D:EB:F4:6C:A6:08:63:D2:97:7C:53:FD:D6:C1:90
Certificate issuer:       /CN=A9188D2D/serialNumber=B5881FBACA9DEBF46CA60863D2977C53FDD6C190
Certificate serial:       02C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYgfusqd6_Rspghj0pd8U_3WwZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.mft
Manifest number:          02B9
Signing time:             Sat 03 Oct 2026 01:57:56 +0000
Manifest this update:     Sat 03 Oct 2026 01:57:55 +0000
Manifest next update:     Sat 10 Oct 2026 01:57:55 +0000
Files and hashes:         1: tYgfusqd6_Rspghj0pd8U_3WwZA.crl (hash: 6ubudIHpkIMeWdsKH+KSMMOi03z1O04jH13xNq+EHnk=)
                          2: D9D943568FFC11ED9776CB38C4F9AE02.roa (hash: aADozuDCIEKbnLRcroHhbSPv1V+V+40QMaTifMiQcJs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.crl
                          rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYgfusqd6_Rspghj0pd8U_3WwZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 01:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 705 (0x2c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188D2D, serialNumber=B5881FBACA9DEBF46CA60863D2977C53FDD6C190
        Validity
            Not Before: Oct  3 01:57:55 2026 GMT
            Not After : Oct 10 01:57:55 2026 GMT
        Subject: CN=6ac06124-e2c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e7:c4:75:5e:ef:6c:03:b9:9f:8d:3d:24:7a:
                    6c:77:da:8b:87:bc:0b:68:64:51:0f:2a:cc:cb:77:
                    f0:0c:21:7e:58:4c:cc:02:b2:75:7a:0e:14:82:69:
                    eb:de:ae:41:15:4e:47:bc:76:7d:d4:7c:7e:12:51:
                    68:e1:9c:7b:ca:0d:c8:3f:94:b3:9d:2c:39:59:1f:
                    c1:4f:f3:5a:cb:f2:da:c0:13:3e:73:08:4e:34:16:
                    7e:1d:17:be:39:0f:e0:d2:4e:80:16:82:d4:9f:d6:
                    5c:84:37:af:b2:b3:42:97:05:72:0e:4f:74:f1:b1:
                    82:d9:70:fa:fb:58:64:44:3d:6f:75:91:cd:71:1b:
                    d5:df:e8:61:4f:f5:ce:db:ce:2e:b1:7a:a9:15:96:
                    9d:53:41:d0:58:37:e8:61:e3:26:8a:45:dc:dd:42:
                    ee:f5:09:ab:a9:92:c0:46:59:d5:bb:12:e7:95:1a:
                    b4:b8:2c:43:e4:68:9b:ee:d1:f3:02:a6:0c:f4:e3:
                    9f:b1:f2:ed:23:cb:29:09:f2:a0:da:a0:05:cf:1e:
                    e8:90:7d:d4:0a:89:68:64:a5:6a:8f:7f:a0:b9:6d:
                    54:53:e1:11:f3:4f:2c:ce:2e:14:4c:4e:52:e6:98:
                    f7:ff:b9:6c:f8:fd:05:a5:3c:22:7a:fe:74:cd:fb:
                    7d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4A:9F:7E:97:59:DD:53:AD:33:A0:9E:8D:F2:57:44:29:C9:29:6B
            X509v3 Authority Key Identifier:
                keyid:B5:88:1F:BA:CA:9D:EB:F4:6C:A6:08:63:D2:97:7C:53:FD:D6:C1:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYgfusqd6_Rspghj0pd8U_3WwZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:90:e1:4f:1e:0a:84:f4:98:6c:ef:7a:74:bc:fd:8d:ba:33:
         17:03:a7:d2:d8:4f:37:2a:b9:18:19:f4:eb:9c:0b:88:a6:ec:
         26:2c:f3:80:9f:77:9b:f3:b6:4d:dd:eb:f6:51:71:3f:5b:3b:
         b3:8c:b2:44:38:dd:f9:5d:09:c5:7a:9f:db:8a:3d:35:f3:01:
         c4:be:77:df:33:ae:8e:3c:3a:0d:13:2e:75:a5:d5:5f:22:43:
         2f:af:90:90:27:b8:d0:f7:7c:93:ac:8f:68:0f:33:db:98:f4:
         b2:49:da:d1:d8:f5:d2:9c:15:65:e6:6e:1e:0f:61:0d:f7:24:
         d3:73:47:a1:7a:89:fa:50:ee:ff:c8:68:78:fc:e5:08:a7:ee:
         77:98:06:3a:c3:26:ac:dd:3a:09:0b:40:7d:a3:f4:0e:aa:10:
         49:25:69:df:e2:a2:9c:07:6e:e9:01:00:4e:dc:69:f7:11:13:
         ad:c6:c4:6a:e9:fc:cc:03:5f:0e:8a:fb:b5:17:ba:d4:b4:e8:
         fb:43:58:e9:72:dc:6e:65:2b:e9:d0:09:75:07:55:4a:fd:5a:
         cc:5b:97:64:fb:d3:a2:92:9e:1d:2c:87:2a:19:d5:c0:2b:da:
         de:e1:e4:9e:35:66:43:19:77:a6:a1:7d:fe:29:74:fe:4f:24:
         bf:be:65:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:19:23 2026 by rpki-client