Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
File:                     Ex72LhIbEd5hBCw-Il5xa7lHniw.mft (raw, json)
Hash identifier:          9n9q1eAtAMsaa83V3fovkCw1hvSaua72Gb+dxMthodI=
Subject key identifier:   C5:FF:F0:4A:AF:23:F7:13:B8:66:19:BE:4B:D9:AD:DD:6F:6E:BD:E9
Authority key identifier: 13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C
Certificate issuer:       /CN=A913D3CE/serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C
Certificate serial:       01A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
Manifest number:          0198
Signing time:             Wed 23 Sep 2026 04:10:33 +0000
Manifest this update:     Wed 23 Sep 2026 04:10:32 +0000
Manifest next update:     Wed 30 Sep 2026 04:10:32 +0000
Files and hashes:         1: Ex72LhIbEd5hBCw-Il5xa7lHniw.crl (hash: 4YR/z9VrVh6ncjG8t8mQO8R8Fx6yAPptQ98OV0jrr48=)
                          2: E160BBDC495E11EF8EE0647AC4F9AE02.roa (hash: k974RhzqG2Z/99mU77qz7S/ikWSKM8wxZ84qtiKHHvY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl
                          rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D3CE, serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C
        Validity
            Not Before: Sep 23 04:10:32 2026 GMT
            Not After : Sep 30 04:10:32 2026 GMT
        Subject: CN=6ab35139-dc8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e0:b9:21:4b:43:e1:ae:b3:c4:63:96:d6:46:
                    2a:8a:6d:9f:ee:9f:af:ae:5d:05:55:50:36:c3:78:
                    19:50:c7:e3:a7:36:d1:93:67:33:1a:7d:21:c3:24:
                    eb:65:8c:48:2c:a4:7f:85:9c:ee:75:73:c9:1f:1d:
                    24:4d:82:33:35:30:ee:3c:69:af:0c:32:21:66:f3:
                    96:99:ae:f6:33:49:32:a4:07:b4:d5:92:9e:39:59:
                    2a:43:db:9f:35:ae:fb:11:66:7f:37:92:01:23:8e:
                    24:fe:43:00:a0:18:ec:c3:2d:8f:9c:ba:db:72:2c:
                    c6:5e:80:f2:e3:1a:20:2f:3d:15:32:32:39:55:42:
                    a8:be:64:f6:50:1f:bd:92:5e:d9:44:3d:3d:02:87:
                    f5:dc:f8:0c:97:0e:53:3f:c4:2e:cb:f4:09:61:0d:
                    26:d0:7f:b5:11:5a:f8:81:3a:80:d8:10:b2:11:49:
                    45:eb:34:d8:8f:2b:b7:fe:cb:d0:1b:c0:ac:e9:78:
                    ec:24:cf:23:5d:a8:82:0a:b5:d7:a6:25:1a:41:36:
                    30:79:9a:98:45:34:98:93:57:bb:f5:6e:7a:dc:ff:
                    4f:7a:53:c3:f3:ef:8a:6f:07:a5:42:d4:8d:01:20:
                    bb:b6:98:fb:29:70:23:18:e2:60:d3:12:a1:4a:ad:
                    f5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FF:F0:4A:AF:23:F7:13:B8:66:19:BE:4B:D9:AD:DD:6F:6E:BD:E9
            X509v3 Authority Key Identifier:
                keyid:13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:6d:62:f4:96:27:c4:5e:14:58:dc:2f:a7:6a:37:ca:2d:ba:
         e3:47:3f:de:07:ad:e2:76:13:61:20:db:81:f9:9b:fe:62:95:
         58:4c:c0:8b:42:62:57:43:c3:cb:5c:50:b8:a1:b0:9d:5d:f2:
         4b:fc:69:2a:d5:b3:b9:e9:97:62:c4:75:bd:8c:58:db:b1:e3:
         e4:e7:71:5c:f2:ea:f4:bd:39:ce:19:66:b8:3c:00:67:a9:9f:
         dc:d1:ff:2a:8c:54:4c:9a:87:d4:28:74:63:3a:21:da:c9:f5:
         73:34:4a:57:16:4c:3b:25:6e:ad:fa:64:7e:30:c8:4f:e5:c8:
         02:4f:45:7e:92:31:81:b3:6d:c0:c0:1a:4c:9f:f5:1f:fc:78:
         21:33:76:cb:a6:47:bd:39:02:00:64:f2:58:2d:c8:89:03:31:
         fe:a1:61:18:b1:20:97:d4:b3:75:90:92:9a:41:2d:ac:97:fd:
         02:ac:95:57:9d:8c:6e:57:9a:ee:f9:9c:58:8c:de:9b:9d:ce:
         f8:94:90:26:75:4a:7b:dd:94:16:f7:28:29:d3:31:fe:2f:d4:
         56:c2:a8:5e:10:51:fe:94:65:74:6b:4a:60:4b:68:ff:8d:d7:
         42:03:f1:2f:f5:e1:52:25:83:c1:0a:b1:d9:d7:bf:79:e5:94:
         53:1f:81:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:46:22 2026 by rpki-client