Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
File:                     RCHzqdfkHW9Ht4b90-eojeQrB7k.mft (raw, json)
Hash identifier:          S4X27OtE4DymzwIW182FplmEjGZQA3t+IUzn52MZ1RQ=
Subject key identifier:   26:B4:7D:6C:FD:77:EC:8A:3B:79:BD:0E:A3:29:A2:93:4B:DA:C1:48
Authority key identifier: 44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9
Certificate issuer:       /CN=A913442A/serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9
Certificate serial:       03A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
Manifest number:          03A1
Signing time:             Fri 25 Sep 2026 00:29:04 +0000
Manifest this update:     Fri 25 Sep 2026 00:29:04 +0000
Manifest next update:     Fri 02 Oct 2026 00:29:04 +0000
Files and hashes:         1: RCHzqdfkHW9Ht4b90-eojeQrB7k.crl (hash: h3jv80myvR9mCVsyCRCP9u/ecOzZGqtLS0IKBKLX1DQ=)
                          2: 0F9DB8E0FC3D11ECAD619C35C4F9AE02.roa (hash: TSieMoGszG5SUgYORyTn0egsepHHBxgsWfXoIbA2Trg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl
                          rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:29:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937 (0x3a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913442A, serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9
        Validity
            Not Before: Sep 25 00:29:04 2026 GMT
            Not After : Oct  2 00:29:04 2026 GMT
        Subject: CN=6ab5c050-3001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fb:1d:ab:de:95:d0:cc:b1:01:9e:21:e0:39:
                    0b:46:c4:06:2a:a7:a0:bd:96:7c:66:49:ff:d2:b0:
                    45:47:3b:39:00:03:d8:0e:f6:39:cb:af:8f:10:54:
                    e4:a3:6d:4f:d4:e8:a8:34:d9:51:71:00:63:07:f2:
                    98:2b:38:b2:7f:27:cf:cc:49:75:40:c3:cd:a8:5e:
                    3a:4a:5e:9e:36:a6:01:c3:48:97:39:50:19:1b:17:
                    9b:61:b8:9f:42:3d:6c:b7:54:48:be:b6:70:ee:e1:
                    74:fb:1d:8e:6b:4c:7c:fc:36:0d:07:90:64:08:2d:
                    6b:d0:87:09:cc:0a:df:5d:01:5d:c1:1b:81:bb:d7:
                    41:2f:c9:3f:d3:c2:46:90:f0:c7:8f:08:fd:23:9e:
                    73:ee:94:94:30:02:ac:88:47:64:59:0d:e1:88:fc:
                    3f:44:4b:01:22:6f:31:48:ec:78:ef:aa:7b:b1:60:
                    ff:f3:42:e1:d4:e6:64:ec:f0:48:fe:d5:eb:bf:0f:
                    e1:77:79:b8:5f:e3:39:9a:09:92:5e:de:a4:c7:1a:
                    5f:fe:65:a6:cd:41:3e:ff:74:c2:3f:90:a2:f6:88:
                    17:06:4f:d4:11:4b:7e:94:6f:bd:b3:f6:9d:51:bd:
                    a9:dc:90:09:a0:25:d0:d7:04:f7:19:b7:5f:29:54:
                    b2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B4:7D:6C:FD:77:EC:8A:3B:79:BD:0E:A3:29:A2:93:4B:DA:C1:48
            X509v3 Authority Key Identifier:
                keyid:44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:30:fd:ac:27:db:9f:5f:b9:24:b2:ef:c6:8c:28:56:63:fa:
         3e:9d:1a:75:8d:36:9f:c3:34:08:83:84:92:41:b1:1a:01:8e:
         3c:07:1c:bd:99:34:b9:d5:a8:6b:c7:49:9e:9a:87:63:da:f0:
         8c:dd:fc:54:71:e4:fe:1d:be:fb:61:27:79:1c:f9:94:df:9f:
         6b:d8:a4:64:d4:c6:c4:5f:dc:f3:b8:4a:76:e7:db:95:ac:67:
         5a:53:7f:3b:4c:b7:af:b7:0c:34:f1:9a:1b:6f:9c:08:e2:92:
         c9:a7:51:ee:a5:8e:38:ff:7a:c0:92:d2:87:13:09:fb:43:3f:
         4f:44:7f:2a:86:dc:36:4b:76:0c:29:4f:ec:e7:ee:77:20:fb:
         09:e1:1d:0b:a9:8e:55:6d:cd:df:11:2e:b7:dd:fe:49:18:6c:
         c6:5a:73:0f:ef:5b:51:8d:37:5c:6b:17:b5:27:91:12:3b:97:
         84:4b:7a:86:b7:77:e7:9f:d5:ea:fd:e4:6a:87:b6:ad:b9:42:
         1f:e3:eb:a2:e0:be:18:89:81:91:1c:f3:0c:07:3c:26:09:4a:
         a8:3b:38:ab:7f:eb:73:22:97:a2:f4:79:8e:62:6e:bd:21:53:
         3c:5d:60:93:6d:bc:99:f9:3d:f4:b1:75:06:3e:39:d6:0f:a4:
         76:27:57:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:52:12 2026 by rpki-client