Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
File:                     -0iFaOdSC8eCoRmJdikDDtBpXNs.mft (raw, json)
Hash identifier:          JM3AJEWAHLbiUfeP8L5WU6zwtZWxiUP347bpG1S/LEE=
Subject key identifier:   E0:11:F8:CB:13:BC:1F:CB:C4:49:8E:94:D5:A8:1C:FC:D4:AA:90:FA
Authority key identifier: FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB
Certificate issuer:       /CN=A914459D/serialNumber=FB488568E7520BC782A119897629030ED0695CDB
Certificate serial:       0140
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
Manifest number:          013C
Signing time:             Wed 23 Sep 2026 05:18:49 +0000
Manifest this update:     Wed 23 Sep 2026 05:18:49 +0000
Manifest next update:     Wed 30 Sep 2026 05:18:49 +0000
Files and hashes:         1: -0iFaOdSC8eCoRmJdikDDtBpXNs.crl (hash: bzeiGbLMxyY2Ay7uTHuZ0zZtX2g6pCBtVVpVucOdt20=)
                          2: 4720EB9ED60F11EFA2510540C4F9AE02.roa (hash: dIUAkDQ7djth80Fp66K2XB/D2by8C9/LB315auIcwbE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl
                          rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914459D, serialNumber=FB488568E7520BC782A119897629030ED0695CDB
        Validity
            Not Before: Sep 23 05:18:49 2026 GMT
            Not After : Sep 30 05:18:49 2026 GMT
        Subject: CN=6ab36139-2b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:96:4c:3f:2c:69:c3:3d:37:ba:e1:7a:40:85:
                    06:48:3b:c0:8c:cb:0b:18:59:04:1b:ba:22:c9:3d:
                    f5:1b:d2:27:5c:c0:6a:cb:19:47:8d:dd:a6:cd:51:
                    83:23:80:ae:f0:eb:d5:0e:02:30:9e:ee:aa:6d:67:
                    3f:b5:5e:d9:51:de:b0:11:0d:fe:a4:1c:1b:d3:1d:
                    58:af:69:3c:c0:22:50:49:e2:99:da:dc:62:82:49:
                    31:3b:86:39:f9:0c:0d:e4:06:4c:34:b8:56:cf:f2:
                    45:c8:ba:22:35:b3:6c:70:69:14:41:03:07:3c:79:
                    d4:40:90:b3:3d:22:1c:ef:57:97:62:45:5f:e9:93:
                    63:44:6d:9b:73:72:7e:54:66:fd:45:5a:82:d3:0e:
                    39:d1:0b:2a:93:44:ab:b3:3e:e4:75:f0:cd:ad:f9:
                    20:0d:ed:18:29:30:59:df:9d:29:48:38:d0:12:bc:
                    5f:e9:d4:9d:a1:36:7d:ef:4b:21:61:d4:12:2f:44:
                    18:51:ca:91:69:72:3c:73:53:54:01:57:01:b4:06:
                    a7:6c:cb:8b:d5:dd:86:eb:69:4b:9d:c0:83:fd:84:
                    22:a8:cd:fd:4a:49:74:b8:cc:09:f8:44:65:35:e5:
                    5f:56:ea:d8:c8:7d:2c:70:46:1b:8f:ea:23:e3:af:
                    3a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:11:F8:CB:13:BC:1F:CB:C4:49:8E:94:D5:A8:1C:FC:D4:AA:90:FA
            X509v3 Authority Key Identifier:
                keyid:FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:4f:5f:e2:84:d6:05:e4:8e:59:32:62:ab:5f:62:fa:88:40:
         56:9e:0d:22:80:e7:cb:67:fa:43:ba:a5:bc:9c:5c:de:03:0f:
         91:e9:f7:bd:cf:73:56:74:54:71:94:88:57:9d:fb:43:4e:7a:
         a7:4c:84:3a:7e:c0:f9:8c:5b:5d:00:3b:cb:90:84:94:2b:9f:
         3e:72:59:26:dc:4e:a0:73:82:16:58:2b:f6:d0:4a:c1:48:4a:
         0e:8b:5d:e2:8c:7e:04:56:20:5c:ed:5c:91:3b:45:ae:36:f7:
         84:12:41:77:23:3c:f0:a2:4b:68:ec:9b:e8:cf:5a:3b:8b:28:
         9c:81:b1:92:86:79:1a:5b:25:ad:cb:8c:93:cc:fa:f1:96:36:
         7a:45:af:e2:70:1b:da:6e:e4:54:e8:0f:d2:f8:87:4a:40:ff:
         1a:a5:c1:4d:7e:60:e1:1b:0c:fa:12:b8:46:c6:30:47:18:e7:
         0f:60:eb:80:59:c2:bf:c1:ce:14:9b:b4:1f:e6:e4:f0:1f:2d:
         4d:cc:64:11:9c:87:1b:60:b0:76:77:b6:43:8e:15:aa:de:4f:
         b0:88:11:f0:0d:2e:7f:86:8e:e2:73:65:7e:b7:14:50:b3:67:
         ee:e9:20:22:86:c0:92:68:7e:10:f5:65:a5:48:9f:dd:10:3a:
         80:dc:bd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:03:25 2026 by rpki-client