Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
File:                     PPkWCCJoGcPp2oTRGVtTJvkkn70.mft (raw, json)
Hash identifier:          1ID+pGIBmPvyX1XxSduMZDFtjk1BYcyPaWilzTPE2Wc=
Subject key identifier:   56:AC:EE:5B:C9:BF:47:3D:6B:EF:12:F5:21:77:17:62:A9:EF:00:24
Authority key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
Certificate issuer:       /CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Certificate serial:       03C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
Manifest number:          03A2
Signing time:             Tue 29 Sep 2026 00:52:24 +0000
Manifest this update:     Tue 29 Sep 2026 00:52:23 +0000
Manifest next update:     Tue 06 Oct 2026 00:52:23 +0000
Files and hashes:         1: PPkWCCJoGcPp2oTRGVtTJvkkn70.crl (hash: MXjJLyjzenPj5nRvu9mRzo/jf1fHrgFBo20emezFkyw=)
                          2: E8343A14280A11ED80EB7F2FC4F9AE02.roa (hash: mf0wGIWAXtcqp5A/STrLzJZxEHdPx6LC7pC19PfOQBM=)
                          3: 873C98E0DE5911ED826BDB39C4F9AE02.roa (hash: 2nCCBmzmG2InvvOtDCmpe4jEwoKwgbej2xels7IW/q4=)
                          4: 76494F6E146111ED83A8FB50C4F9AE02.roa (hash: aleDxGkltCMG83BiNVnwleaosOHKlcQfiTqzx3RLirc=)
                          5: 807EEE68281011ED9C81C50DC4F9AE02.roa (hash: Hqy1LRVKHy8Ftub7eFKosjYqL2kysNH4BmXhj25dFeY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl
                          rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 00:52:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 966 (0x3c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155AE4, serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
        Validity
            Not Before: Sep 29 00:52:23 2026 GMT
            Not After : Oct  6 00:52:23 2026 GMT
        Subject: CN=6abb0bc8-93b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:26:22:b4:c9:f5:9b:08:77:67:6f:18:3e:fd:
                    ed:5c:70:48:46:d6:95:a4:fe:76:cd:9c:8f:b5:14:
                    d4:ee:66:86:6b:3d:c6:ad:f2:0b:19:47:40:2e:19:
                    4d:6f:fc:10:7f:35:64:69:61:c8:fc:3a:3c:39:0c:
                    c7:78:e7:07:34:de:30:4e:49:9c:bf:a1:0c:cc:90:
                    1c:38:97:39:77:44:2f:c4:58:23:84:33:ba:61:a4:
                    6c:09:1a:7c:ea:cd:68:6c:94:52:c0:c1:04:02:5d:
                    91:10:ba:9a:59:22:05:30:74:e6:ae:27:1a:05:fc:
                    d7:5c:38:e7:8b:23:32:79:c6:e2:3d:45:2a:0f:06:
                    f6:5f:4d:c3:09:4a:2a:6b:7a:fc:20:0d:87:15:4f:
                    a7:72:5b:97:0e:67:cb:7e:89:b9:ed:14:8c:f5:79:
                    87:d6:81:19:42:9d:78:c6:c6:d1:e7:3b:09:68:ef:
                    b7:ff:a9:c9:5a:3d:d5:c6:70:f3:ba:0d:50:b8:25:
                    06:fa:c0:19:27:3b:d7:11:17:5d:87:99:cf:ad:ab:
                    53:36:f0:ee:e0:47:df:d0:26:9c:6d:9f:21:49:b0:
                    ac:a4:74:62:21:7a:8d:40:dc:84:41:51:b0:98:cb:
                    e3:ec:d5:4f:aa:69:f6:83:88:29:81:a3:28:1b:d5:
                    e0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AC:EE:5B:C9:BF:47:3D:6B:EF:12:F5:21:77:17:62:A9:EF:00:24
            X509v3 Authority Key Identifier:
                keyid:3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:51:d2:01:88:b9:fc:5f:76:71:f5:9c:82:9d:32:0c:43:71:
         a9:fd:c6:7b:f9:78:4b:fc:68:60:12:c6:5b:5d:24:e0:4a:7b:
         a4:45:bd:72:c3:18:8a:d7:d5:70:ae:52:2d:52:0b:91:5f:7d:
         68:ee:dc:74:42:6d:80:46:56:5a:fa:4b:46:cc:ce:06:c3:fd:
         e9:8d:c1:0e:95:96:b0:26:9f:8b:51:ad:23:24:e8:92:fa:e0:
         90:be:ad:99:4a:29:2f:bb:96:f7:0d:ea:e6:a7:81:14:e0:64:
         f3:95:bf:10:99:7c:7d:60:e6:95:a4:4e:ac:8d:2b:e7:d5:9b:
         40:83:b5:c7:f3:f5:c9:91:08:5f:62:47:26:0b:bc:7b:4e:cc:
         37:98:75:66:81:f3:1e:97:97:0c:8d:d9:9b:e1:1e:7b:3b:d2:
         03:dc:85:c5:3c:b9:e7:3c:c2:11:3d:88:21:f3:51:37:91:6f:
         6c:21:e9:78:8d:21:ff:8b:83:c6:db:32:7b:7f:7e:0c:ac:82:
         d0:fd:55:0b:20:2f:79:fe:f5:f4:af:6e:1d:d2:fa:37:8b:49:
         91:9c:ac:04:66:62:2c:c0:cf:f1:50:c8:61:c1:b1:d9:3b:9f:
         35:25:32:5d:01:24:f5:e4:c9:04:8c:ed:69:57:bf:41:e1:32:
         e5:44:a2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:15:00 2026 by rpki-client