Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.mft
File:                     isQ8i2LLoieYw56lRmt0xBihqQc.mft (raw, json)
Hash identifier:          7QBdWkLACifXgBwEvDmVTcSBNPpjEFWeyqonyjFysrQ=
Subject key identifier:   A9:AD:5E:55:AA:19:F3:71:0B:02:F7:98:98:35:36:3C:68:41:8C:E7
Authority key identifier: 8A:C4:3C:8B:62:CB:A2:27:98:C3:9E:A5:46:6B:74:C4:18:A1:A9:07
Certificate issuer:       /CN=A9147A12/serialNumber=8AC43C8B62CBA22798C39EA5466B74C418A1A907
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/isQ8i2LLoieYw56lRmt0xBihqQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.mft
Manifest number:          87
Signing time:             Wed 23 Sep 2026 07:21:44 +0000
Manifest this update:     Wed 23 Sep 2026 07:21:44 +0000
Manifest next update:     Wed 30 Sep 2026 07:21:44 +0000
Files and hashes:         1: isQ8i2LLoieYw56lRmt0xBihqQc.crl (hash: QOFyiPpBANS2RvYBvkNy4AncdTkAaK3wIBV7hYrW93A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.crl
                          rsync://rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/isQ8i2LLoieYw56lRmt0xBihqQc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:21:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147A12, serialNumber=8AC43C8B62CBA22798C39EA5466B74C418A1A907
        Validity
            Not Before: Sep 23 07:21:44 2026 GMT
            Not After : Sep 30 07:21:44 2026 GMT
        Subject: CN=6ab37e08-4624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:01:15:3e:e3:05:52:50:66:91:59:c4:51:89:
                    c6:91:df:74:da:a6:88:77:bb:3b:7d:36:e8:0e:c9:
                    38:f9:c6:80:38:66:3e:57:28:b0:ce:79:b9:c5:3a:
                    cf:b8:6b:dd:46:3f:7d:0f:35:ad:25:3b:0f:23:7e:
                    b4:42:6b:b1:28:61:49:6b:3b:71:e9:e8:e2:ea:fe:
                    ac:a6:58:2a:3b:f0:45:60:b3:a0:c2:ae:4d:82:4a:
                    e8:4c:7d:62:c5:83:bc:4f:80:d6:5e:3d:b4:0f:68:
                    9a:5e:7c:3c:e8:41:5c:93:27:a4:0a:60:37:0f:e1:
                    22:bb:16:0b:5b:c2:85:86:3b:ee:87:55:69:fb:0a:
                    7a:df:4a:4f:b8:92:41:52:4b:ad:71:df:f2:2c:2f:
                    74:15:05:4f:1c:32:60:b5:2a:cf:cc:2a:4f:da:1f:
                    7e:26:ca:dd:b1:58:c3:62:2f:60:10:04:1c:f5:51:
                    09:42:a5:64:12:00:79:83:09:3e:fe:70:a0:83:a0:
                    ba:3b:1e:ca:19:16:a4:fe:9a:45:f4:e6:4e:e9:bf:
                    12:79:4b:1a:8f:0e:6f:1f:0c:e2:58:49:05:e4:04:
                    91:20:c5:ab:40:5f:c0:68:d5:84:ed:2b:11:b9:5e:
                    c1:5e:db:aa:4d:1f:12:7f:ce:c9:47:16:04:3c:dc:
                    16:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AD:5E:55:AA:19:F3:71:0B:02:F7:98:98:35:36:3C:68:41:8C:E7
            X509v3 Authority Key Identifier:
                keyid:8A:C4:3C:8B:62:CB:A2:27:98:C3:9E:A5:46:6B:74:C4:18:A1:A9:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/isQ8i2LLoieYw56lRmt0xBihqQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:7c:61:40:ea:33:9e:bc:cf:d8:86:e8:d6:e8:3c:e7:11:cd:
         e6:bd:5c:97:89:42:0d:da:e6:b1:7b:05:6b:50:97:3a:6d:55:
         40:e7:9c:92:01:d6:a3:8b:ce:04:19:af:f0:61:00:a4:04:b7:
         45:85:0a:73:93:5c:12:6f:9d:44:0b:51:0e:ac:f5:38:f1:16:
         f5:38:7a:cd:00:fa:5c:7c:0d:f4:b0:b5:1a:ef:0d:eb:17:22:
         00:c3:12:a9:df:30:ea:85:62:e2:9b:6c:42:83:7e:a0:9d:df:
         ad:ad:f7:dd:8d:ac:fa:a5:0c:68:68:0d:c2:6d:ed:18:f9:15:
         70:d1:e7:78:94:a7:60:5b:4f:c3:a5:39:f9:14:82:bf:b1:dc:
         4a:4f:ea:b0:94:2b:9d:19:97:4f:1c:fc:e7:a9:db:2a:f2:85:
         e9:56:5c:b6:03:37:77:c4:c4:a4:9f:1c:38:cf:4d:88:e3:48:
         34:3f:ba:ee:b2:39:a3:df:e3:63:5e:5b:3d:c9:ae:a3:95:90:
         43:2b:b1:b9:99:50:f3:c0:db:74:fb:7e:71:3a:1f:23:f6:ef:
         16:06:aa:c8:85:0f:f1:bb:b1:c4:fd:65:a4:c5:70:7b:29:7b:
         ff:5e:e5:28:25:10:23:70:ed:d0:0d:77:c8:e3:8b:32:a1:cf:
         92:3c:72:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:19:20 2026 by rpki-client