Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
File:                     n-iB2L0yrRWre-e07E91IhJUbHY.mft (raw, json)
Hash identifier:          vulhLfxcunBFeBlBErqmU9vF2C3ukWB6l+oCf17j8gc=
Subject key identifier:   83:2D:2E:68:6A:0E:40:AF:1E:C8:E1:BC:0B:4F:35:39:87:AF:0F:AA
Authority key identifier: 9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76
Certificate issuer:       /CN=A9118FFA/serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
Certificate serial:       01C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
Manifest number:          01AF
Signing time:             Sun 27 Sep 2026 04:28:21 +0000
Manifest this update:     Sun 27 Sep 2026 04:28:20 +0000
Manifest next update:     Sun 04 Oct 2026 04:28:20 +0000
Files and hashes:         1: n-iB2L0yrRWre-e07E91IhJUbHY.crl (hash: 055zKaaad4YioIljKRWq7EWf42vKCdm0RxI6AbtIUV8=)
                          2: 2C6BA5E82EB511EFBCC65925C4F9AE02.roa (hash: rA7V1naVvYRqsHEWb7MBLZbTli7oyFi0ZmHVez4sKpg=)
                          3: E80A0D282B9D11EFB61F1148C4F9AE02.roa (hash: H04/8UCM0HIwt/kQIuV1r0Bul5P9qNZh2AavqYuBxdQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl
                          rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 04:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449 (0x1c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118FFA, serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
        Validity
            Not Before: Sep 27 04:28:20 2026 GMT
            Not After : Oct  4 04:28:20 2026 GMT
        Subject: CN=6ab89b64-6d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:50:ff:a0:93:b8:9c:30:b6:6b:2c:c8:4f:19:
                    77:7e:b2:21:14:36:f5:82:da:e6:c9:6f:3f:ba:1b:
                    27:eb:4c:8f:3f:10:ce:f9:55:aa:38:00:15:56:1e:
                    d0:14:34:32:41:58:63:b1:ee:b8:07:9c:ab:58:7c:
                    07:82:12:9e:13:93:a0:54:3e:e1:32:22:a6:fa:cd:
                    93:07:d0:c0:0e:ae:ee:3e:ba:54:0a:46:1a:49:a1:
                    1f:1a:34:b7:a8:cb:e7:b3:14:a0:96:bd:22:d3:09:
                    72:a5:cb:6a:bc:a6:8e:54:8d:99:6d:cc:d1:51:2a:
                    bf:5b:f5:ac:1c:f6:b2:43:67:c8:2b:9e:03:08:db:
                    dd:2f:17:a9:f0:75:81:b1:a6:81:4f:fd:b9:55:dc:
                    42:cc:44:b3:cb:f6:b8:14:01:51:52:d2:a8:ff:00:
                    e8:d0:b6:08:a1:ee:5e:e1:fe:9a:fe:2b:89:d4:59:
                    b9:cb:58:7b:da:2c:b2:e5:d2:91:3d:ca:b7:d9:8f:
                    b6:07:a9:7c:06:ec:f1:bf:c0:39:ee:ce:0e:d1:6c:
                    20:74:51:47:be:5d:83:b1:ef:04:59:f8:46:f3:29:
                    30:da:c9:d4:30:c2:1e:d1:21:3f:87:be:1d:cc:b5:
                    ee:2a:2a:da:45:96:e8:ec:60:e8:0e:cb:90:be:26:
                    f7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2D:2E:68:6A:0E:40:AF:1E:C8:E1:BC:0B:4F:35:39:87:AF:0F:AA
            X509v3 Authority Key Identifier:
                keyid:9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:5d:8b:9d:e5:a3:ec:c1:94:76:ea:52:bc:1e:a2:1f:0d:92:
         8d:8a:2c:11:2d:96:66:3a:9c:91:14:e9:b0:47:5b:eb:33:58:
         44:7d:c0:8d:21:bc:c9:65:88:a5:83:23:50:b9:5e:be:0f:4a:
         5c:10:24:12:00:f7:c5:45:ff:9c:66:b7:0a:dd:43:45:45:eb:
         9c:3a:50:87:a9:48:7c:84:d3:7a:0b:55:b1:ee:7e:a6:26:ca:
         c9:d4:27:20:a5:e2:24:3b:a8:42:b2:f8:7c:4b:4d:b6:0f:42:
         93:42:1e:5a:3d:46:76:b3:43:44:c2:f7:69:8d:c8:c8:70:54:
         52:1c:dc:81:1c:c9:ab:dd:0c:69:84:97:50:d5:e9:4b:5a:fa:
         6e:30:18:7f:1f:de:0c:74:c7:df:52:f8:03:53:7e:5b:a4:42:
         e5:0f:e1:35:c6:2c:41:4b:3f:96:1d:40:b9:2a:6b:28:bd:fa:
         4b:23:5d:2d:2a:f8:19:50:95:7d:81:ad:d2:37:d3:df:a2:b0:
         3f:d3:0d:ae:b9:fb:7b:c1:22:55:d3:bf:7f:cb:c1:e2:5e:7d:
         b0:02:1e:1f:a4:07:c9:ec:8b:62:20:7c:33:11:4a:99:3c:9e:
         41:2b:3f:f7:f2:84:31:86:38:ac:67:58:82:a8:b7:19:c6:d5:
         6c:ed:c2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:35:34 2026 by rpki-client