Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
File:                     Syx3vC30PHKE0B5FsS2zvfAJFtE.mft (raw, json)
Hash identifier:          nT+1stbK3AyLfD2V4eYSIpd+1pgEabuPzSKJ/9qqCWQ=
Subject key identifier:   55:1E:D8:1F:64:BF:2B:03:D7:9C:0A:7A:9F:DF:D4:CD:6F:31:2E:2A
Authority key identifier: 4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1
Certificate issuer:       /CN=A912A3BE/serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1
Certificate serial:       0188
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
Manifest number:          0183
Signing time:             Tue 22 Sep 2026 22:46:17 +0000
Manifest this update:     Tue 22 Sep 2026 22:46:17 +0000
Manifest next update:     Tue 29 Sep 2026 22:46:17 +0000
Files and hashes:         1: Syx3vC30PHKE0B5FsS2zvfAJFtE.crl (hash: /JhQvClArR5QZz1PooHHLIYNNOrgkpQCWn4szgdLa/Q=)
                          2: 10DAF9348C2D11EFB9CC3812C4F9AE02.roa (hash: aeq83y3UDmIZ+hHdv0UR/7vvLe8gLWVcHYM4gtGf+AA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl
                          rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A3BE, serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1
        Validity
            Not Before: Sep 22 22:46:17 2026 GMT
            Not After : Sep 29 22:46:17 2026 GMT
        Subject: CN=6ab30539-b87c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b3:e3:35:0c:3d:54:2e:cc:07:3f:1c:80:66:
                    73:00:f9:ea:59:19:6d:5c:33:5a:32:ca:52:73:45:
                    19:a0:45:30:d8:75:65:55:7c:34:6f:b4:d2:14:81:
                    77:a7:6d:e0:1c:f9:12:a2:0d:d4:56:bc:98:aa:66:
                    2c:5e:36:ef:44:aa:ff:dc:11:a7:0b:da:c0:01:d7:
                    8a:d0:95:f1:4b:e0:9a:e1:fb:6f:96:f1:27:1a:2e:
                    d6:ab:41:1e:b1:3f:f2:ed:8e:d4:b3:0e:bf:5d:86:
                    c8:30:cf:46:59:66:e1:4e:5b:82:ba:2c:44:91:7f:
                    2a:21:3c:06:6b:cf:f0:73:d7:19:97:51:c1:1e:33:
                    18:f4:0e:14:a4:82:0a:84:87:55:25:af:81:ed:3c:
                    86:4e:f3:f9:c9:6a:c7:ae:fa:b8:e7:30:5d:f9:de:
                    81:4d:b3:5e:0e:a4:59:69:9b:cd:61:e9:3c:d4:a7:
                    3c:9d:c1:37:da:b8:93:e9:71:50:8b:2c:5a:20:3f:
                    07:ca:4b:6f:34:b5:70:fb:22:79:4c:02:43:2a:db:
                    6c:91:7a:6f:42:a8:69:a3:a1:a9:83:7b:e1:45:e5:
                    82:b3:b6:41:06:30:a3:d2:f9:15:a8:69:0c:b8:87:
                    13:c1:93:8c:7b:39:9a:e2:64:8b:a4:2c:fe:0e:45:
                    13:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1E:D8:1F:64:BF:2B:03:D7:9C:0A:7A:9F:DF:D4:CD:6F:31:2E:2A
            X509v3 Authority Key Identifier:
                keyid:4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:a6:0a:0f:2a:cd:52:26:9f:7d:df:df:22:13:6e:af:cd:61:
         19:db:c1:ab:0e:1a:f5:db:b3:94:af:d6:e3:0c:1b:9d:52:04:
         a6:d8:96:c7:a2:27:09:73:60:30:df:f3:5d:8b:99:60:49:bd:
         e5:86:a0:5a:ea:77:81:8c:10:10:d5:42:1a:4c:7f:55:9a:12:
         5f:e6:c4:18:25:d1:b5:5e:24:55:3a:3b:31:08:be:e6:fc:68:
         a6:d7:64:73:e2:b4:aa:03:41:b3:1a:2d:86:33:a2:5f:54:b0:
         47:e6:cc:5d:77:7e:d8:ab:83:55:3c:79:d8:40:dc:3f:3b:72:
         16:72:08:b1:53:a0:2e:5b:cc:5a:2c:6b:c4:2d:6f:c4:0d:4c:
         f0:d7:a6:ee:57:62:8d:d4:c3:7f:4f:88:71:63:0d:d2:9d:02:
         f2:3b:28:a1:c5:7d:11:74:d9:90:75:43:39:40:98:a8:4f:ec:
         be:08:b4:83:20:2a:b9:d8:f0:51:16:8a:a4:98:9c:7d:94:b4:
         ce:90:23:2d:70:3c:a7:2e:f9:cb:38:8d:83:32:70:43:2f:99:
         e5:bc:92:00:ad:bf:dd:54:0f:3e:da:b9:48:97:f5:d2:a6:49:
         b0:e6:49:8b:c3:2c:78:94:8b:4d:59:dd:20:cc:d9:b2:bb:72:
         5a:58:21:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:49:03 2026 by rpki-client