Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
File:                     8RbpEqlQneSy1rPZPLwY9QA24Wg.mft (raw, json)
Hash identifier:          12V/yCKdwUDr9ihd4OLuKATHSHXkRpQP1mAmH00s/J8=
Subject key identifier:   5B:63:FA:82:E1:EA:CA:60:6F:9F:DE:83:A9:9A:36:7E:4B:5D:7A:51
Authority key identifier: F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68
Certificate issuer:       /CN=A9156D54/serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168
Certificate serial:       036F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
Manifest number:          036F
Signing time:             Fri 25 Sep 2026 00:37:54 +0000
Manifest this update:     Fri 25 Sep 2026 00:37:54 +0000
Manifest next update:     Fri 02 Oct 2026 00:37:54 +0000
Files and hashes:         1: 8RbpEqlQneSy1rPZPLwY9QA24Wg.crl (hash: jdrH3vSO5DGzvxQg9Ywb/W41XSaNDg798ZNAKMfK91w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl
                          rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879 (0x36f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156D54, serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168
        Validity
            Not Before: Sep 25 00:37:54 2026 GMT
            Not After : Oct  2 00:37:54 2026 GMT
        Subject: CN=6ab5c262-c901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1b:fc:69:ad:11:45:c6:d5:35:ba:6b:24:80:
                    38:0c:64:60:35:84:a1:1e:55:16:1c:b0:07:ad:7d:
                    c8:0c:cf:0e:4f:6b:b0:a9:58:b6:0b:7f:39:ba:f3:
                    df:7e:b3:e0:d3:a2:c1:69:28:91:e5:f5:98:b8:d4:
                    25:6f:93:7d:a6:d3:f2:fd:43:ad:c4:b6:18:bd:77:
                    dc:73:1f:1c:55:41:bb:1d:99:55:44:da:62:b3:23:
                    00:a3:a5:50:f3:ce:74:73:39:e9:b2:d1:d4:61:20:
                    bf:e4:8f:43:d4:48:a9:74:70:8d:56:0b:fd:55:a8:
                    38:1c:74:0b:3f:4c:77:a0:2c:32:21:1b:ce:a2:8f:
                    dc:17:01:70:0e:dd:b3:4b:54:4b:71:d3:bd:00:dc:
                    a2:17:78:c7:ea:68:51:62:3c:c9:61:ff:01:0f:f1:
                    a7:be:a7:c4:e3:89:b5:a5:95:e8:eb:41:30:69:51:
                    f2:89:20:2b:16:68:c9:61:78:bd:89:79:4b:57:30:
                    bb:91:df:7f:41:a1:a9:35:15:0d:94:89:e9:7d:eb:
                    e6:07:48:c1:c3:f3:f2:0d:2e:b4:85:2c:3d:5c:0a:
                    6a:b4:4e:d8:06:de:07:a6:f3:e1:23:fd:b3:28:58:
                    6f:40:ed:49:59:20:44:67:c1:04:10:fb:65:9f:74:
                    35:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:63:FA:82:E1:EA:CA:60:6F:9F:DE:83:A9:9A:36:7E:4B:5D:7A:51
            X509v3 Authority Key Identifier:
                keyid:F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:c5:89:ef:57:4e:e2:4f:31:f9:ca:56:60:38:6c:12:05:f2:
         5e:87:13:af:74:7e:a0:31:59:99:71:73:36:7d:cb:52:fe:cd:
         b2:39:5e:77:c2:4a:43:47:79:ae:f9:e5:76:69:b3:0a:b7:9d:
         80:42:f7:9d:b6:30:7c:46:17:73:c0:72:1b:3b:fa:a3:7e:04:
         85:dd:aa:48:29:ad:14:5e:27:bc:9b:71:02:5a:cc:07:58:99:
         4f:b9:83:74:31:f6:35:86:54:35:8a:6d:e1:96:3e:68:26:73:
         f6:a2:0c:d0:f2:e4:90:c1:eb:b5:f0:c4:c5:c0:ca:9d:f2:55:
         88:8a:56:fe:b6:55:ca:d2:6b:8a:36:71:57:8a:90:82:79:3b:
         8e:2a:f5:c7:d4:4a:54:e4:18:d8:75:54:60:59:db:d5:3f:2b:
         af:4b:b6:87:6b:08:5f:ce:0a:7d:d3:b2:15:1a:60:9b:53:3a:
         51:e9:7c:16:ad:b8:b6:60:db:9c:2a:b6:00:fc:90:79:86:a8:
         d6:4b:6b:f4:c6:04:17:d9:df:91:1f:e8:2c:7e:bb:e4:66:f9:
         1f:0f:ce:4e:44:9f:4a:20:e5:f7:20:71:cc:d1:e8:29:f1:d3:
         2f:25:02:b5:9b:c7:7b:10:78:e2:18:c0:97:1a:7a:d0:3c:8d:
         61:bf:dc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:08:10 2026 by rpki-client