Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft
File:                     p0YFy51QccoXKdkIeDRAfxTqhXA.mft (raw, json)
Hash identifier:          tNPBd7cuusetIAfylevP87J+90Urw0gJJ4mslYkP+Mg=
Subject key identifier:   63:31:50:79:D8:ED:DE:63:E9:85:6F:3B:A9:3B:B7:5C:8C:FE:A2:76
Authority key identifier: A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70
Certificate issuer:       /CN=A911FABE/serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570
Certificate serial:       0D28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft
Manifest number:          0D1C
Signing time:             Thu 24 Sep 2026 18:17:00 +0000
Manifest this update:     Thu 24 Sep 2026 18:16:59 +0000
Manifest next update:     Thu 01 Oct 2026 18:16:59 +0000
Files and hashes:         1: p0YFy51QccoXKdkIeDRAfxTqhXA.crl (hash: VHUhYyQfcuocaPjQIsvJmlwAmiN17Gmic1BjKD+Z7sE=)
                          2: 3E51F73E0C5111EAAF46A23FC4F9AE02.roa (hash: HzPfwRkKcUS5Tbx9sBJSCRFZ7id/BCeNd8TTUh7QirU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl
                          rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:16:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3368 (0xd28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FABE, serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570
        Validity
            Not Before: Sep 24 18:16:59 2026 GMT
            Not After : Oct  1 18:16:59 2026 GMT
        Subject: CN=6ab5691c-b9cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8f:78:30:65:b8:fd:cd:5a:95:75:a3:03:8c:
                    76:dc:ed:c4:8d:48:f3:c9:bf:3d:d3:b7:06:e1:aa:
                    02:d6:e1:0f:09:14:9a:56:c7:b2:15:82:98:ed:f4:
                    0c:7a:f9:aa:f7:1d:dd:d4:ed:30:dd:a8:7d:43:15:
                    4c:18:15:8b:52:d1:aa:27:c6:09:93:94:d7:12:dc:
                    9f:49:2e:e8:bd:83:0a:66:a0:1f:ff:fb:a3:f5:1b:
                    78:23:b8:cb:e8:b4:04:8b:d6:92:f1:6d:8c:13:1f:
                    ec:2c:17:4a:8f:03:88:b6:20:c7:57:fd:a6:68:2d:
                    e7:40:a8:b1:34:bc:82:cd:dc:8d:1b:03:62:72:11:
                    d4:88:d4:49:37:aa:5e:fb:cf:59:56:40:61:a9:57:
                    6c:d7:b8:d1:67:7a:f6:b5:16:f7:09:89:9d:a3:05:
                    6b:cf:c1:1d:56:90:2f:4e:26:7c:58:d8:9e:21:8b:
                    b5:1a:5d:27:fd:b8:0b:29:6b:fd:9a:4a:b6:11:bb:
                    db:94:e8:33:b0:05:81:74:8b:7d:5e:9a:1d:0c:94:
                    1c:ea:ed:c4:59:b4:72:17:0f:0a:4e:fc:63:5b:6a:
                    83:1c:24:8b:82:2c:bf:04:1d:63:4e:d8:6f:fa:5d:
                    94:7b:fe:61:b4:1c:61:91:f4:b7:34:cd:5c:47:6f:
                    65:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:31:50:79:D8:ED:DE:63:E9:85:6F:3B:A9:3B:B7:5C:8C:FE:A2:76
            X509v3 Authority Key Identifier:
                keyid:A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:9c:24:b5:ee:44:94:63:67:9a:ff:81:2c:13:03:8e:4d:ee:
         21:dd:ce:b1:03:d6:c3:22:a7:db:67:e9:3b:c1:3e:95:33:2d:
         ba:20:af:0e:a4:88:e2:85:46:34:a1:0c:62:44:9e:28:2a:86:
         d2:e0:a3:f3:6d:9f:26:af:2f:f8:11:e6:cb:fa:cb:2b:f6:f7:
         50:21:36:4f:ef:a8:4b:3f:42:33:de:30:ca:26:4d:3c:43:84:
         91:a5:8c:90:06:f1:bd:84:18:47:eb:ab:f4:90:a5:76:29:a9:
         13:45:f7:cb:9a:20:ce:92:8b:8a:6c:27:e7:39:51:93:47:2a:
         34:cd:2b:d5:ad:94:1e:90:fb:5b:bf:a4:21:26:d9:66:c4:7f:
         df:ec:03:7a:15:93:ca:e8:89:40:2d:11:06:7a:69:cb:38:ee:
         4f:f2:7b:2b:83:b5:e9:69:99:0b:dd:79:24:72:8c:b6:cb:7b:
         ce:ac:1d:9d:80:2f:17:6c:b9:05:70:79:d2:0d:80:9a:9d:9c:
         80:52:2c:f2:3f:37:e3:34:01:55:cd:f8:ea:b2:f8:07:0a:7c:
         f7:6b:5d:ad:0e:5c:d3:40:a3:4a:ee:16:8a:d4:0b:2b:df:5c:
         16:43:e7:0b:b4:e3:0b:39:a0:83:d6:3d:e1:0d:eb:14:0c:f8:
         98:94:0a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:06:30 2026 by rpki-client