Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
File:                     MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft (raw, json)
Hash identifier:          lNKRrvVFtkPkl8ggkn/NkYaGYyNoUqfJ7ygi2y8QziQ=
Subject key identifier:   5D:FB:D3:DD:21:AB:3B:A6:EC:59:3A:C1:C9:F6:E6:27:18:A7:1C:74
Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20
Certificate issuer:       /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
Certificate serial:       0253
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
Manifest number:          0238
Signing time:             Wed 23 Sep 2026 02:28:10 +0000
Manifest this update:     Wed 23 Sep 2026 02:28:10 +0000
Manifest next update:     Wed 30 Sep 2026 02:28:10 +0000
Files and hashes:         1: MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl (hash: 1E6rnv83arAlSVTL4batXYX0FGUQvqEKZ8PAJuHMvS0=)
                          2: 5EF938889E9E11EE80C94682C4F9AE02.roa (hash: Pt4/aeZJmmxaKw58FeByKfcr60LvOJZSjrmtvVkGyg8=)
                          3: 22613D48AC7311EE8A97A86FC4F9AE02.roa (hash: LHB5pGY8dTTpWRgeoK0nlLC3xPEqarqRqlE/1vamRUU=)
                          4: 1B2EC2A457E411EEB143C80EC4F9AE02.roa (hash: 8JV502SLk8QbZyaGCPLTxSnSD1WOF++tIWExjZSLMdQ=)
                          5: 1AB7C58C57E411EEB143C80EC4F9AE02.roa (hash: 1RzsjB3B/c1zgVm8/5Sg1Xe89XFvfc6vQnq4tvEitnY=)
                          6: 1E541192D5A111EE9D73FA44C4F9AE02.roa (hash: 6VryhfiIF2VBEa3XnAENzfKNyDYTfUs9xynBu6kvnA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl
                          rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 595 (0x253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
        Validity
            Not Before: Sep 23 02:28:10 2026 GMT
            Not After : Sep 30 02:28:10 2026 GMT
        Subject: CN=6ab3393a-167e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bb:5f:3d:c7:c3:72:be:f6:3c:15:59:8e:20:
                    33:c6:83:fc:2e:12:ad:92:71:8b:31:5b:ec:f2:77:
                    04:cd:b4:8d:5c:47:f3:d6:e3:5d:6e:e8:9b:61:23:
                    d7:b6:ff:74:8d:a8:2e:ce:66:69:90:73:cf:19:f1:
                    0a:52:43:ca:d2:be:17:4f:2f:86:af:b2:e2:d4:7d:
                    05:14:ad:02:a9:1c:c7:01:97:ac:4d:1c:c5:c2:ae:
                    d6:48:a7:70:cb:37:e9:ee:41:41:4e:37:06:b5:e9:
                    23:68:ce:bd:81:4a:e6:b6:00:88:c8:21:d7:be:ba:
                    2e:c5:32:f2:a5:a8:99:25:c8:dc:b9:2b:ec:92:e8:
                    2b:67:0e:ba:7b:d9:90:f9:be:45:9b:8b:6d:04:f7:
                    8d:28:0d:39:3f:ac:31:8d:36:93:89:47:69:12:44:
                    22:08:dc:35:9f:08:6c:4b:d8:ff:73:34:d2:17:e7:
                    f1:4f:d6:4a:ef:12:9d:97:44:6b:44:3e:0a:fe:2c:
                    e6:e7:cd:82:3a:c8:ea:50:d5:4e:58:3b:e9:dd:50:
                    bc:e2:51:69:ea:13:0a:4c:21:29:e1:76:9b:47:2c:
                    c4:6f:70:8a:1e:36:a4:e2:d7:e6:c3:2d:c2:d0:a9:
                    62:fd:df:d2:f5:bb:6a:3e:3c:37:05:c0:f8:f4:38:
                    b2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FB:D3:DD:21:AB:3B:A6:EC:59:3A:C1:C9:F6:E6:27:18:A7:1C:74
            X509v3 Authority Key Identifier:
                keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:85:33:23:9b:40:1a:a1:a7:84:89:26:be:d2:ea:0b:50:9c:
         59:e7:9d:0a:76:9b:87:d2:a2:2b:c7:ab:9d:3d:97:85:3a:30:
         9d:19:c5:b9:f5:80:03:f2:2e:53:86:c2:f3:cf:ea:81:34:a5:
         eb:b8:3d:8b:13:ef:69:f5:d1:7d:64:9b:ca:e2:13:11:47:c8:
         ec:96:9a:bc:7d:b7:be:7a:55:6b:5e:76:67:4c:79:67:53:26:
         d7:43:aa:d1:78:1f:5d:72:24:17:ba:75:81:d5:d5:72:99:68:
         6e:68:fc:54:05:12:11:20:08:1a:93:da:31:67:ed:a6:a7:f9:
         ef:46:61:95:4d:c2:45:d5:a5:f0:7c:47:e4:1e:c1:b4:a8:7d:
         2d:69:28:94:ac:09:63:0b:a6:ab:2a:35:dc:3e:68:f6:9a:02:
         7f:38:9d:ab:02:2d:15:3c:62:72:5c:18:23:88:0f:b8:7b:66:
         6f:02:d0:c6:0d:23:b8:57:cf:76:07:f9:de:33:6e:a7:7f:17:
         1f:0e:c6:af:6f:f9:8e:39:ad:3a:bb:31:03:94:bb:58:11:7b:
         db:50:1a:a0:8c:30:e6:3f:b6:34:ab:4b:4c:df:ab:e1:22:17:
         fc:09:9b:9c:4c:06:0a:6a:82:5d:c3:a1:d3:67:a5:fe:10:76:
         17:1d:11:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:45:39 2026 by rpki-client