Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft
File:                     CStU0vnpbT_OHwwNuzGxuCyNLOA.mft (raw, json)
Hash identifier:          DjBxNQue3JKEoixv3OYBV5XEBYgpdsEk/boAjj7d9g0=
Subject key identifier:   AC:7D:40:40:34:AC:32:3D:08:0F:FF:D5:C9:69:85:CD:DA:1D:62:9D
Authority key identifier: 09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0
Certificate issuer:       /CN=A9122EA2/serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0
Certificate serial:       02DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft
Manifest number:          02CC
Signing time:             Sun 27 Sep 2026 01:38:38 +0000
Manifest this update:     Sun 27 Sep 2026 01:38:37 +0000
Manifest next update:     Sun 04 Oct 2026 01:38:37 +0000
Files and hashes:         1: CStU0vnpbT_OHwwNuzGxuCyNLOA.crl (hash: nJY6UnBrjaMcSV87Q8smPhT7i0+TSw0LCuIhe+F5up8=)
                          2: C20F71E0992A11EEBDE4AF84C4F9AE02.roa (hash: ZBpZFHSjfj1bISXLZ4G9TvJh+gywnnw40Zr1cDFnGAA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl
                          rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 18:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731 (0x2db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122EA2, serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0
        Validity
            Not Before: Sep 27 01:38:37 2026 GMT
            Not After : Oct  4 01:38:37 2026 GMT
        Subject: CN=6ab8739e-4620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:87:94:04:fe:36:2b:f5:d1:27:a4:af:cf:77:
                    43:bb:d5:8c:01:bf:77:04:fe:72:64:48:cc:da:54:
                    ef:52:d2:4c:77:cf:1b:51:f7:3b:2d:3d:97:38:b2:
                    ec:f1:43:74:04:0c:3d:e6:81:f4:32:42:03:bc:0e:
                    8e:4e:be:b4:92:15:67:7c:33:13:74:dd:38:e1:42:
                    d1:ab:d3:de:e1:68:51:a4:bb:31:aa:03:05:ff:e0:
                    98:db:6c:43:65:af:61:5a:63:38:27:46:1a:3a:97:
                    0b:47:44:91:82:b5:61:53:28:e9:71:27:f1:67:d3:
                    5f:45:46:3b:d7:6e:15:83:9e:35:fe:3a:46:88:c0:
                    d0:2a:0c:d6:59:cd:ae:f8:73:0c:ac:71:27:fa:8a:
                    f7:b8:f5:f2:5a:fe:16:7c:bc:6a:0e:f3:a8:b1:49:
                    59:cf:1e:54:13:99:24:01:29:9f:dc:40:ea:2e:0d:
                    07:37:da:42:03:00:75:81:8c:2e:23:9a:28:5a:68:
                    c1:06:1c:53:02:51:79:1c:49:d8:83:d0:af:e2:1c:
                    1b:09:1b:18:15:dd:41:44:08:f1:61:1b:a8:cc:25:
                    b8:c3:25:c0:13:0f:1a:e2:73:a8:30:2a:73:b8:ea:
                    eb:ad:c5:06:af:38:10:30:d0:f7:72:94:03:e0:61:
                    a4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7D:40:40:34:AC:32:3D:08:0F:FF:D5:C9:69:85:CD:DA:1D:62:9D
            X509v3 Authority Key Identifier:
                keyid:09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:f9:ec:33:cb:01:6d:15:77:8d:1b:2d:57:d6:92:84:7b:d6:
         83:48:59:fd:8b:4d:c4:6d:05:6b:a1:00:3b:86:68:c5:62:a5:
         39:d1:33:fb:99:fa:11:6d:c1:4c:39:08:32:c7:a0:bd:c8:13:
         45:d4:a8:0a:c4:cc:90:bf:8f:11:24:fe:c2:03:53:ba:80:ae:
         c4:1f:bc:bb:20:ce:b1:b4:56:5e:55:84:b0:c1:57:57:7f:8e:
         27:cd:0c:a3:bb:e5:08:6f:5d:a1:66:2c:06:9c:93:0e:ad:91:
         0c:a5:7c:85:5e:56:46:da:77:67:85:99:be:ac:eb:09:86:c7:
         27:17:37:48:19:fd:df:92:0d:2b:e9:d6:16:9e:3d:1c:31:f6:
         c7:45:5b:03:75:94:5a:ff:32:c5:17:44:bb:88:a9:b5:db:46:
         45:23:4f:b8:68:99:d4:bd:73:86:32:dc:88:0e:df:7b:45:70:
         62:60:28:93:35:91:4d:8c:d2:50:da:9b:8d:89:33:15:5f:96:
         31:0a:65:16:67:61:35:fd:bc:d2:96:66:b2:c4:5f:f5:e0:51:
         25:2d:01:12:ae:50:e0:58:8f:22:02:fc:d6:82:37:22:b7:dc:
         fa:17:14:ca:46:92:be:a3:9f:7c:08:c5:54:ef:4e:83:03:89:
         fe:ae:5f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:49:07 2026 by rpki-client