Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
File:                     aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft (raw, json)
Hash identifier:          R2FCRPFSdXZ0cLl6PFurEnDkX9Gj7gT4/YvkBz/SFB0=
Subject key identifier:   BE:AB:BF:87:F1:43:E2:97:36:42:E1:4A:F8:59:4A:F8:29:82:98:96
Authority key identifier: 69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33
Certificate issuer:       /CN=A914FED3/serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
Certificate serial:       0F02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
Manifest number:          0EE4
Signing time:             Thu 24 Sep 2026 17:37:59 +0000
Manifest this update:     Thu 24 Sep 2026 17:37:59 +0000
Manifest next update:     Thu 01 Oct 2026 17:37:59 +0000
Files and hashes:         1: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl (hash: MMvhogcVZlrTEaUaqhU2Gz50XBQ5jlVjTHOkxwLn+Gg=)
                          2: F9BDC484F7B011EB84345029C4F9AE02.roa (hash: Gz9eqekiWDiK9v3eDHt3H2hLACZfxZzIPs/2qncX1gM=)
                          3: 6E8576BC0F1911F0A007DF16C4F9AE02.roa (hash: uIYeCaBuRDEfSa74mfNr2LSTxBd9PK1A2yHp2J/i9kM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl
                          rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 17:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3842 (0xf02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FED3, serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
        Validity
            Not Before: Sep 24 17:37:59 2026 GMT
            Not After : Oct  1 17:37:59 2026 GMT
        Subject: CN=6ab55ff7-a124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2f:fe:8c:9e:ba:51:aa:21:4e:69:04:d1:c1:
                    8d:e3:7a:62:70:e2:89:05:54:fd:3f:84:ac:a0:c5:
                    62:81:30:12:f3:40:40:e1:15:01:65:c4:b8:93:8e:
                    20:dd:76:22:79:0c:d2:1d:64:7a:a8:b3:45:fa:ab:
                    dd:28:ed:f7:bf:63:5d:db:17:69:8b:79:2a:7f:df:
                    49:e2:c9:f6:27:87:79:8c:5a:09:c3:17:e4:0b:d1:
                    de:10:03:a5:c1:15:0a:9f:c9:e4:c9:3f:d0:1d:b1:
                    e2:e2:6c:cc:ef:e6:11:70:06:96:90:8e:ba:89:79:
                    e9:db:2d:7b:b4:ae:e8:8f:8e:f5:86:01:88:7e:18:
                    d4:a9:f2:bb:02:33:d4:dd:7d:fa:18:e8:b9:b2:e5:
                    66:9d:25:13:f1:2a:bb:e0:5b:ec:72:ab:60:a8:2f:
                    01:99:1b:31:3c:b0:b2:03:4e:12:b0:e1:3f:ab:5b:
                    43:35:b9:6f:1d:99:15:e7:db:37:a5:c2:fc:48:fa:
                    a8:68:9c:af:bf:4a:0c:81:d8:4b:27:c0:ae:8d:e3:
                    23:ac:9d:6a:d5:b5:57:c9:31:77:47:0a:05:ae:5d:
                    e6:7e:fb:13:b1:c1:5e:3d:03:e4:77:d7:d0:28:3d:
                    4a:39:5f:34:6a:c5:74:d8:76:c3:d8:9a:4c:ed:a5:
                    a6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AB:BF:87:F1:43:E2:97:36:42:E1:4A:F8:59:4A:F8:29:82:98:96
            X509v3 Authority Key Identifier:
                keyid:69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:88:d0:69:50:e2:c7:53:25:ec:33:bd:4f:f9:a0:60:6b:f4:
         93:87:db:e1:d9:a7:cb:72:c3:67:ec:cf:57:d3:fa:27:c8:c5:
         be:13:ab:47:e7:ca:5d:92:42:ed:8e:f3:22:a6:22:e9:93:54:
         52:1e:a3:89:44:ec:4b:e1:53:86:73:f1:91:fc:98:05:00:df:
         37:7c:e2:86:28:bd:d1:83:8e:72:44:31:65:5b:7b:e3:92:59:
         c1:c8:bc:66:4f:d9:28:5d:bd:2b:d4:70:ec:91:fa:2d:4b:53:
         0c:63:76:d5:e6:91:be:19:2f:bb:d0:91:98:6d:13:3c:58:d0:
         2b:2a:21:96:96:e7:41:7e:fc:d8:5f:a1:ab:2a:9a:39:4d:56:
         49:51:92:46:e2:5a:7d:e4:51:aa:f6:8c:b0:75:16:88:b5:fe:
         fa:b5:13:e5:21:34:b6:b3:b8:ee:3b:d7:c5:58:81:6d:20:32:
         14:04:14:52:9f:30:9a:f3:61:bb:a0:4e:62:a3:8c:28:45:9a:
         2c:c4:01:fa:bf:10:50:67:c8:ff:84:46:e7:5c:7d:62:53:4a:
         8a:91:14:0c:60:68:28:3e:1b:97:c3:83:aa:d0:20:b5:8d:ef:
         a0:67:7b:ed:98:38:8c:74:14:29:0c:80:ac:01:ff:d6:fb:b4:
         d3:ad:61:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:53:34 2026 by rpki-client