Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft
File:                     PbshszWLCF8IIbTcBqkanEXELLw.mft (raw, json)
Hash identifier:          QWuiUpWVzdKfN3W/l0jgEEJ/itIaXimyrSbg1lv9R1s=
Subject key identifier:   CE:FE:92:48:05:DE:FD:08:02:9F:98:06:9E:26:C0:6A:E9:C1:7F:85
Authority key identifier: 3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC
Certificate issuer:       /CN=A9199B5E/serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC
Certificate serial:       028C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft
Manifest number:          0285
Signing time:             Wed 07 Oct 2026 02:16:23 +0000
Manifest this update:     Wed 07 Oct 2026 02:16:22 +0000
Manifest next update:     Wed 14 Oct 2026 02:16:22 +0000
Files and hashes:         1: PbshszWLCF8IIbTcBqkanEXELLw.crl (hash: fcOiGUmbyipOnoWDMAWobLq33l9moHe9FTTMPX1PVRc=)
                          2: 0FFD0884E94C11EDB883CD14C4F9AE02.roa (hash: Hjo3E4P+MhgjzOqpzAeOm5/8QhMSnfjBIMZ5RlN8TLQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl
                          rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 02:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 652 (0x28c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199B5E, serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC
        Validity
            Not Before: Oct  7 02:16:22 2026 GMT
            Not After : Oct 14 02:16:22 2026 GMT
        Subject: CN=6ac5ab77-9d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8c:e3:53:2c:6c:9c:11:24:fa:99:d8:d6:1f:
                    ae:48:16:bd:f0:43:35:a5:14:8e:48:fd:86:55:33:
                    51:6c:66:00:af:61:63:7b:70:a1:ae:81:d0:82:65:
                    fd:5b:f0:3a:12:60:15:8a:a5:fc:96:99:99:72:7e:
                    7c:c1:97:13:9d:a0:9b:5d:40:3f:13:51:b7:07:59:
                    fe:7f:f3:a6:28:91:11:0b:b6:ea:f9:1b:1f:ce:ca:
                    ce:77:d2:21:44:df:dd:f8:b7:99:b9:52:6a:63:a1:
                    9b:f5:d4:50:ff:87:37:e3:7e:05:31:3a:22:9b:43:
                    b3:f4:29:a8:ea:98:7d:7f:b3:dc:da:ae:94:8a:01:
                    71:02:b5:fd:9a:35:ea:f6:6a:f1:eb:f7:27:c7:cb:
                    da:77:fc:9c:1a:e2:82:2a:7e:98:f9:4a:d9:52:95:
                    de:8b:47:cd:0d:32:ac:dc:e0:1b:f8:aa:69:4e:70:
                    2e:d3:78:cc:f9:05:5f:c2:f5:fa:9c:ed:7f:42:f4:
                    7c:a3:0c:d6:4a:66:8e:44:06:28:0a:a7:fb:39:6e:
                    fc:a2:37:11:78:b5:a5:36:44:03:d7:66:b9:90:8e:
                    cf:97:44:8a:b9:69:6c:f4:54:6a:1d:87:78:65:d5:
                    af:ef:f1:1a:12:11:1a:f6:2d:58:6b:55:be:25:6c:
                    79:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FE:92:48:05:DE:FD:08:02:9F:98:06:9E:26:C0:6A:E9:C1:7F:85
            X509v3 Authority Key Identifier:
                keyid:3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:a1:2a:e7:57:4e:92:a6:07:86:76:7c:5c:88:0f:00:24:4d:
         10:eb:ec:3a:bb:d1:47:03:db:80:ef:25:3c:bc:32:0a:ce:ad:
         e6:c2:2f:51:89:ba:fd:73:f1:83:9f:47:65:04:e0:25:05:f0:
         70:08:f5:19:e3:db:8a:e0:6c:38:94:f6:10:8f:b6:3a:60:3c:
         5e:ab:b6:26:f8:16:50:f9:bc:5d:23:d6:b1:48:23:8b:8f:e7:
         46:b2:a8:dc:64:db:ec:ca:a9:fb:ea:56:d4:85:41:2a:4f:d3:
         5d:70:35:b7:aa:cc:f1:e1:b2:6a:38:7f:2c:a6:63:28:98:7f:
         5d:2b:1c:76:95:37:51:04:58:e7:fc:0b:69:78:34:12:b6:8c:
         24:61:81:85:20:4e:d6:ef:69:65:ab:17:e4:03:af:16:7f:43:
         d8:e5:7a:4e:d9:36:a1:f8:78:da:90:8d:aa:2e:ec:ca:1e:8c:
         bd:8d:ab:2a:07:90:1e:8c:29:a6:39:7d:a3:44:62:bf:fe:fc:
         49:f3:e3:c6:76:fa:dc:50:63:fd:26:25:8e:c9:aa:10:69:a7:
         fa:f8:6b:39:a6:71:ba:3f:16:85:a1:70:78:64:0f:18:88:ca:
         c0:fb:40:99:54:6e:62:52:33:37:ff:f7:36:46:92:c2:d0:37:
         29:c9:d6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:37:33 2026 by rpki-client