Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
File:                     rBnGa8SzHOuTC6auDW63R7EKtgY.mft (raw, json)
Hash identifier:          9dNUIWUCGxla+gWir2O22kEfTXVH34rTZI6fymCdWP4=
Subject key identifier:   A0:D6:5E:08:05:B4:BD:07:34:67:66:94:A5:54:FC:F8:E5:3B:93:68
Authority key identifier: AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06
Certificate issuer:       /CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606
Certificate serial:       358C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
Manifest number:          358C
Signing time:             Sun 04 Oct 2026 14:40:29 +0000
Manifest this update:     Sun 04 Oct 2026 14:40:29 +0000
Manifest next update:     Sun 11 Oct 2026 14:40:29 +0000
Files and hashes:         1: rBnGa8SzHOuTC6auDW63R7EKtgY.crl (hash: ffShYPcIHC9HRUZBnfiIGBhizUUJmaZsM9IGiMwitEg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl
                          rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 14:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13708 (0x358c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141E28, serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606
        Validity
            Not Before: Oct  4 14:40:29 2026 GMT
            Not After : Oct 11 14:40:29 2026 GMT
        Subject: CN=6ac2655d-7e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f7:99:47:28:07:b3:2f:7f:5b:72:dd:c3:3e:
                    16:db:ef:fd:3f:03:2c:65:ca:c7:88:94:03:6b:6b:
                    ad:9f:3c:d0:66:ac:61:cd:22:32:ca:44:14:c3:59:
                    0d:f5:ca:b8:ae:d0:1e:b7:84:0f:5e:3b:9d:1d:68:
                    5e:6c:6a:d0:09:cf:f5:85:ff:52:f4:3c:cd:e6:49:
                    e6:b4:36:7b:31:a1:fd:e2:90:43:44:03:eb:07:14:
                    79:55:d7:39:82:5c:f5:9b:7d:57:a1:8c:07:c4:e9:
                    bc:c1:14:b1:51:b8:e2:3e:31:9e:fa:cc:b8:c8:c8:
                    90:6b:68:5e:af:8c:c9:8a:df:ce:f7:7b:9e:59:33:
                    e0:30:7f:dc:64:7f:64:ab:03:a4:0e:c3:62:65:fd:
                    e5:11:c9:10:4f:1a:da:fe:b9:00:07:87:f4:88:44:
                    72:2b:44:63:ba:8a:2d:e4:06:e4:ee:a0:0a:71:c9:
                    a1:53:e8:e4:4a:db:7a:09:fe:81:c8:58:a1:48:6b:
                    ff:ae:fe:ce:b6:90:45:4d:88:b2:3c:6b:4d:65:c5:
                    a4:95:d8:60:ca:6f:fe:90:5e:84:30:b1:83:6f:bc:
                    ff:7e:77:70:ef:d7:a7:e6:56:1b:38:d4:eb:7b:63:
                    56:bc:2d:b3:c0:fd:40:f9:08:f9:2a:fa:ca:a8:74:
                    70:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D6:5E:08:05:B4:BD:07:34:67:66:94:A5:54:FC:F8:E5:3B:93:68
            X509v3 Authority Key Identifier:
                keyid:AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:8b:f8:46:57:89:c2:c1:6e:84:b4:b7:d7:e3:7b:36:0a:8e:
         d3:95:55:c2:4f:db:0e:60:a1:09:84:db:30:41:2f:54:a2:84:
         64:cf:50:81:8b:61:20:c4:bf:fb:3e:90:a7:9a:4f:c0:0b:b8:
         0a:1c:49:8f:88:79:df:05:78:91:71:a4:c9:7c:81:98:5b:04:
         7e:a9:a4:21:09:bd:cd:63:0f:d6:be:c5:9e:a9:27:88:98:26:
         ca:58:68:1f:11:14:17:b9:de:28:ee:b5:fa:39:22:33:7c:6c:
         44:54:1b:ac:0e:0f:27:76:8c:0e:c0:4c:56:1e:64:91:48:e5:
         1d:ef:8d:ed:c9:a4:ef:d6:7e:4a:6a:f0:11:09:e7:e9:b5:de:
         08:85:61:84:85:65:9d:16:2c:5f:ea:ec:35:87:cf:fc:81:0c:
         d7:48:61:cb:da:9e:f1:66:f8:a4:50:ed:8f:32:dd:fc:da:b7:
         e4:2a:bf:0c:42:33:bf:bf:35:25:0e:16:2f:d1:0a:77:ca:ca:
         d6:42:1b:b9:7d:04:fa:2a:db:9a:2c:20:d3:47:0a:1f:08:ec:
         dc:b5:41:ec:52:b0:cc:21:73:93:b2:84:ce:63:36:10:6c:69:
         75:6a:03:f8:b3:c5:2e:6e:d1:53:52:40:db:bf:16:72:f0:9d:
         12:a9:7f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:22:05 2026 by rpki-client