Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
File:                     48M322aHKgqTXJ1VXltt01MHLHQ.mft (raw, json)
Hash identifier:          wIwlHuPbKrAtbnJxImk9w4hIkaX44/JlVDgMsxCz+Eo=
Subject key identifier:   6A:06:1F:7C:49:C5:FD:21:F5:3C:F6:EC:70:BA:EE:C8:CB:ED:48:0E
Authority key identifier: E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74
Certificate issuer:       /CN=A912B0A3/serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74
Certificate serial:       08A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
Manifest number:          08A7
Signing time:             Sat 26 Sep 2026 20:44:30 +0000
Manifest this update:     Sat 26 Sep 2026 20:44:29 +0000
Manifest next update:     Sat 03 Oct 2026 20:44:29 +0000
Files and hashes:         1: 48M322aHKgqTXJ1VXltt01MHLHQ.crl (hash: drJMf4hHdX3yTl5UCWnWYI4cLn8/Zo3/TIWMri5tMr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl
                          rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 20:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2215 (0x8a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B0A3, serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74
        Validity
            Not Before: Sep 26 20:44:29 2026 GMT
            Not After : Oct  3 20:44:29 2026 GMT
        Subject: CN=6ab82eae-66da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:79:3d:8b:d4:07:ba:bf:d4:26:cd:23:3f:50:
                    7c:b8:9f:9e:28:75:53:5d:4c:86:73:1c:e4:9d:d8:
                    5f:d0:ae:41:48:dd:b4:d3:7d:09:72:59:ae:19:68:
                    6f:b6:ca:f0:9c:65:22:08:da:e6:fb:a7:9d:eb:db:
                    77:f4:ee:5d:3f:8d:9a:0c:a3:f7:8d:f9:cc:5b:18:
                    47:49:12:09:ae:e6:48:ae:5e:5a:ee:7f:21:19:12:
                    dc:c2:a2:0f:01:97:3f:a1:bf:bf:9b:c8:8d:d9:11:
                    2c:9c:3d:37:ce:52:44:3e:b6:e4:fa:b6:11:15:13:
                    72:08:ed:57:f3:f3:4c:01:42:97:80:98:36:9a:8a:
                    30:a3:b3:2c:89:b4:c1:01:4a:10:3f:d1:f9:c1:6a:
                    90:7a:7b:46:78:c5:78:00:d0:8b:b6:a7:ae:ed:f7:
                    9d:1f:3d:b3:2f:40:9a:8a:db:4a:23:7e:19:23:12:
                    9e:7e:85:ad:17:fa:8e:fc:e6:da:ff:b2:36:16:0d:
                    d4:05:1f:97:43:2c:7d:f5:b6:fa:4a:98:49:c4:fb:
                    1b:28:7a:e5:a8:88:45:9f:29:f7:f0:4c:fc:64:6d:
                    0e:67:02:f4:06:6a:2a:a0:5f:38:24:18:44:a8:e7:
                    cf:cb:fc:09:56:05:b5:1e:5b:4f:0a:a6:2d:c2:3a:
                    23:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:06:1F:7C:49:C5:FD:21:F5:3C:F6:EC:70:BA:EE:C8:CB:ED:48:0E
            X509v3 Authority Key Identifier:
                keyid:E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:34:0c:12:d2:3d:72:30:9d:4b:1c:6c:21:ae:3c:21:d6:bb:
         c3:b1:46:61:a2:38:03:01:c9:9b:8c:1e:fe:06:36:67:47:81:
         c6:1a:d7:4e:02:fa:90:b1:bb:df:47:66:b5:a0:55:91:71:93:
         86:fb:e4:fc:8a:d5:b5:22:65:7e:e5:60:6d:c4:d7:55:cc:f2:
         2e:03:ba:c0:7b:6a:b4:17:13:62:cd:5b:de:eb:16:c4:a7:89:
         15:5d:54:c7:bf:98:99:a7:23:2e:e3:5a:dc:c1:1e:57:55:e2:
         6a:c4:66:a8:a5:e1:32:1c:ab:d3:96:df:57:3f:57:74:4b:0d:
         ca:34:0b:26:95:12:da:fe:3d:4a:8b:3b:fa:b4:63:48:5a:2e:
         ac:40:c5:f8:51:01:e3:33:a0:cd:22:1d:b1:d1:8e:b0:ef:aa:
         ae:2a:f4:15:3b:9f:3b:cb:dc:1a:fe:ee:e4:66:08:cb:df:d6:
         fc:ae:1e:5e:d4:38:c7:fd:39:62:cd:c5:6d:fb:f4:c2:db:7e:
         8e:30:0e:f6:38:ae:2b:53:01:3b:12:45:c0:8f:14:1a:bf:7f:
         53:3e:0b:27:a6:10:c9:c6:2a:f0:9f:16:ed:8e:82:67:33:50:
         26:6f:fd:30:0c:0c:50:b6:9f:8c:34:7b:39:19:3c:1a:78:41:
         4a:92:ec:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:45:11 2026 by rpki-client