Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft
File:                     trtjZLzkhc7AbTOZSRWHpIJZHLw.mft (raw, json)
Hash identifier:          cg9lT17maHlgJFdKpy+5yGBjDkZffTLdz4fPCaHqvMg=
Subject key identifier:   6C:39:F6:AF:05:81:DA:16:EB:48:71:40:A5:3D:2E:4D:29:DB:F8:E7
Authority key identifier: B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC
Certificate issuer:       /CN=A9123B8B/serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC
Certificate serial:       0A5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft
Manifest number:          0A49
Signing time:             Tue 22 Sep 2026 19:31:59 +0000
Manifest this update:     Tue 22 Sep 2026 19:31:59 +0000
Manifest next update:     Tue 29 Sep 2026 19:31:59 +0000
Files and hashes:         1: trtjZLzkhc7AbTOZSRWHpIJZHLw.crl (hash: WDjkcTx0CElsXfyXCfAyaNqJwVGBz2mvjWjeCkeJBjs=)
                          2: 64E818222EA711F1ABA05366B9833773.roa (hash: uaKJtLoXq/ZZ1+UmqCEv0S8y+GtylUFLwrIrTLfP6zM=)
                          3: 63EF8E3C2EA711F1ABA05366B9833773.roa (hash: TaPyl/iXeZ9rNTtgrZn2/CMrZ6ZTV/1ABox1PHZOxkE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl
                          rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2650 (0xa5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123B8B, serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC
        Validity
            Not Before: Sep 22 19:31:59 2026 GMT
            Not After : Sep 29 19:31:59 2026 GMT
        Subject: CN=6ab2d7af-6c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:31:84:fc:a2:03:71:3b:44:cc:af:df:db:c2:
                    39:5b:fe:f6:b9:4c:21:d5:ae:03:62:51:2a:bd:eb:
                    60:a2:5c:db:fb:ec:a8:65:33:67:44:4f:55:e3:2d:
                    a4:79:05:86:4f:69:31:61:b2:b3:70:b9:89:9b:55:
                    f0:cd:dd:83:71:c8:fc:21:23:04:94:4b:20:13:35:
                    01:65:50:55:fd:23:fe:25:dc:73:fd:43:b2:57:bb:
                    de:24:c6:52:29:2c:0b:4b:64:27:4d:ff:dd:c1:0b:
                    22:cb:4d:f7:46:86:65:83:60:80:ba:c0:da:43:a4:
                    ac:86:db:55:9d:03:84:9a:82:4b:8f:e4:07:25:79:
                    4d:5b:93:84:fa:82:5e:f8:9b:9f:fe:48:18:40:99:
                    28:b9:03:13:65:2b:08:54:31:8f:38:95:e2:2b:b8:
                    03:e4:d5:33:77:c0:e4:51:89:29:01:ec:87:ca:4d:
                    b2:3e:aa:16:ea:69:d6:86:f2:79:69:a0:5a:2f:f6:
                    a7:fe:6a:08:40:55:eb:cb:26:8b:85:56:48:e0:88:
                    f0:24:7f:38:46:08:80:a2:d0:d2:a8:59:46:04:5f:
                    c3:b6:7c:14:3f:c9:29:e3:f1:a5:1d:45:50:68:63:
                    9f:c6:19:cc:0a:26:06:ad:63:5b:c4:81:21:c5:5d:
                    42:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:39:F6:AF:05:81:DA:16:EB:48:71:40:A5:3D:2E:4D:29:DB:F8:E7
            X509v3 Authority Key Identifier:
                keyid:B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:11:f3:66:6c:02:e2:59:de:71:ee:38:43:ff:57:ee:ae:64:
         91:d2:e8:4a:94:ac:50:2c:c4:cf:10:c0:e9:55:09:30:15:fa:
         ff:e0:d8:7e:a4:d4:9c:19:eb:5d:1d:ec:d6:6e:e5:55:a2:51:
         eb:7b:88:68:d5:49:fa:ad:3b:24:e6:9b:b8:bc:c7:06:13:f0:
         ea:16:99:b5:f2:79:09:91:c8:93:30:18:e0:8b:e7:68:08:10:
         43:e7:4e:d8:a3:b0:73:ee:95:a6:ad:89:87:37:28:13:f9:36:
         2e:dd:a4:3f:94:d7:70:b1:1a:ee:00:19:83:95:fb:e7:45:09:
         61:56:37:0e:94:90:a5:ec:48:da:74:3d:9a:16:46:62:ee:d8:
         7b:35:ba:08:d7:b3:e2:6b:bb:4d:f1:c1:70:6f:0d:d6:a7:1e:
         e0:ba:e1:38:16:77:e7:c2:e3:18:5d:b1:5a:a5:fc:fd:3f:77:
         68:fa:b3:4b:3d:06:64:9e:6e:94:f8:9e:ae:12:cd:48:b0:84:
         fb:43:ac:9b:72:48:b9:d0:09:d6:56:82:b4:43:0c:87:50:83:
         54:f8:85:ea:dc:37:8f:5a:c4:7e:72:f0:a2:67:c4:3d:90:bd:
         c1:b6:49:60:81:f3:b2:28:ad:18:e1:af:66:37:27:60:6a:be:
         a2:c3:9f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:21:57 2026 by rpki-client