Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft
File:                     Mqch0wW1KTmxanDu43n7nIIQmhI.mft (raw, json)
Hash identifier:          lbu+tAVdkj6ZuvWImmYFFctgi+efNzIsii3OCMLXOLE=
Subject key identifier:   C3:C2:DE:8B:41:B9:61:DB:AA:7B:38:79:4C:C7:F2:C3:EC:9D:63:16
Authority key identifier: 32:A7:21:D3:05:B5:29:39:B1:6A:70:EE:E3:79:FB:9C:82:10:9A:12
Certificate issuer:       /CN=A912D71D/serialNumber=32A721D305B52939B16A70EEE379FB9C82109A12
Certificate serial:       FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mqch0wW1KTmxanDu43n7nIIQmhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft
Manifest number:          FD
Signing time:             Sun 27 Sep 2026 06:42:57 +0000
Manifest this update:     Sun 27 Sep 2026 06:42:57 +0000
Manifest next update:     Sun 04 Oct 2026 06:42:57 +0000
Files and hashes:         1: Mqch0wW1KTmxanDu43n7nIIQmhI.crl (hash: 9xf60PCUVYnoDu5Yo564QQ0KCf7uMP/5uILE6bR5Yo0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.crl
                          rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mqch0wW1KTmxanDu43n7nIIQmhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 06:42:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D71D, serialNumber=32A721D305B52939B16A70EEE379FB9C82109A12
        Validity
            Not Before: Sep 27 06:42:57 2026 GMT
            Not After : Oct  4 06:42:57 2026 GMT
        Subject: CN=6ab8baf1-7901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:69:bc:40:d3:ce:a5:f5:b1:30:0b:f8:e6:
                    b2:ea:65:85:fe:f9:ec:e8:c0:76:4f:8d:ac:1a:8d:
                    9c:2a:e9:51:22:54:3e:2d:05:1b:ac:3a:6c:88:05:
                    04:2e:6a:ae:0f:b9:9f:e2:81:30:ea:9e:29:84:88:
                    65:77:d6:7b:cd:f0:24:e1:64:b9:10:82:23:10:d8:
                    c9:c2:28:63:a7:92:6b:a7:67:de:4f:45:a6:95:50:
                    8c:d6:16:f8:b0:ac:9f:1d:39:ad:2b:c6:f5:c5:fd:
                    1a:a1:b3:aa:96:4c:f3:ae:9c:95:0a:d5:66:16:79:
                    c8:e0:93:e9:1c:17:d9:f1:4f:71:e6:ea:1f:c3:cb:
                    1c:3b:5a:5f:78:90:c1:fb:9a:ae:20:c2:5c:b8:59:
                    e4:18:58:00:fe:c9:b7:58:f7:44:8c:0f:a5:4a:7a:
                    f3:ce:b1:1a:6d:a3:9c:73:fa:0f:d5:fc:34:d9:7e:
                    4e:75:cf:57:fc:c7:8d:8e:46:43:00:0e:9d:eb:7b:
                    e9:d5:35:7c:3f:7e:81:e4:73:9b:c3:75:2f:d4:ae:
                    59:5f:39:93:81:13:fd:83:dd:6d:a6:af:cc:30:5a:
                    eb:31:e3:2d:19:76:b1:7d:27:e0:2e:c1:ac:fa:5e:
                    1d:53:fc:79:ba:c6:20:eb:e1:d1:99:6e:e0:a5:e7:
                    33:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C2:DE:8B:41:B9:61:DB:AA:7B:38:79:4C:C7:F2:C3:EC:9D:63:16
            X509v3 Authority Key Identifier:
                keyid:32:A7:21:D3:05:B5:29:39:B1:6A:70:EE:E3:79:FB:9C:82:10:9A:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mqch0wW1KTmxanDu43n7nIIQmhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:8e:bd:1e:89:9a:5f:b0:70:0c:5c:c3:0b:b4:7c:86:07:dd:
         65:5d:4c:9b:f8:43:69:1e:bd:56:9e:bd:57:88:cb:40:3e:39:
         f8:4d:6e:07:17:ab:57:03:ef:ee:55:9c:e9:a2:08:69:6c:b7:
         6b:30:47:a9:2a:dc:43:35:73:00:02:d9:bd:86:0c:8d:54:e5:
         a6:34:58:51:4c:28:70:4d:5c:ab:df:62:14:48:2e:6d:c6:a6:
         a1:88:37:af:f0:bf:5c:0c:e1:f4:2b:77:fe:a3:6f:21:da:93:
         99:e3:3d:77:8c:99:c6:86:fb:96:40:d7:f2:ca:ac:35:0d:13:
         aa:c3:c5:07:38:22:b8:e4:74:76:1b:5d:85:9d:1d:5b:e6:f1:
         74:8b:c4:ff:9c:e0:c1:c0:4b:b6:e4:97:7f:0b:0e:b5:24:6f:
         53:f7:11:21:46:6d:80:fe:df:90:f7:49:06:42:50:f5:12:8a:
         16:2c:1a:57:e4:34:80:ce:b0:ff:e1:fc:35:55:4e:86:8c:80:
         85:b3:85:dc:12:07:b0:06:d1:86:9b:09:b4:21:27:be:eb:e5:
         0b:78:5d:7a:5d:c6:09:bb:0c:9e:b8:8e:2c:74:bc:a9:86:48:
         38:e2:ee:0c:c9:85:f5:38:ec:65:ba:ce:77:e4:65:d4:c3:85:
         dc:18:38:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:47:10 2026 by rpki-client