Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
File:                     v4hgssA3e7Xv7b461A8c8YnyrLI.mft (raw, json)
Hash identifier:          G2YwOSbU2oel3wqXrHfwirKSSa0RUq2v7h9cDTTCYLU=
Subject key identifier:   EB:95:E7:5E:FB:DE:7B:09:9D:A5:E1:44:2F:37:B4:65:EA:28:33:17
Authority key identifier: BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2
Certificate issuer:       /CN=A9157B74/serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
Manifest number:          FE
Signing time:             Fri 25 Sep 2026 06:17:11 +0000
Manifest this update:     Fri 25 Sep 2026 06:17:10 +0000
Manifest next update:     Fri 02 Oct 2026 06:17:10 +0000
Files and hashes:         1: v4hgssA3e7Xv7b461A8c8YnyrLI.crl (hash: tjCsL5G0St+8CSltz1DmE1b7BBwIICw8i31jWRcqx2Q=)
                          2: 074A7A1436C511F0A4E5C52BC4F9AE02.roa (hash: Z9wsNscGW8jTuOrPcKnc3KiOXLu3fKLaOWy4uh1nNqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl
                          rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 06:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157B74, serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2
        Validity
            Not Before: Sep 25 06:17:10 2026 GMT
            Not After : Oct  2 06:17:10 2026 GMT
        Subject: CN=6ab611e7-702d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0b:e9:61:82:07:57:ea:6e:36:08:8d:d9:d1:
                    f6:96:f2:6b:c9:21:c8:03:0f:97:e1:d4:74:97:cb:
                    aa:e9:17:c0:ca:af:78:06:9e:3c:45:75:ba:f9:79:
                    7e:14:a5:ec:e5:09:ac:2a:29:9d:71:3c:90:21:52:
                    75:6e:5e:50:26:e0:ca:51:65:ff:fc:7b:77:11:50:
                    f3:13:19:6c:a6:e5:a3:7d:91:86:6c:ee:cd:37:33:
                    0e:a4:a9:bd:2d:c5:3e:44:14:a7:fb:f4:d5:7d:77:
                    9f:ef:6a:e4:77:45:ee:33:8e:cb:d1:52:ec:08:bc:
                    ee:32:fe:36:96:c9:3b:38:a1:bb:ee:d6:33:85:fd:
                    d0:e1:1c:cc:33:40:a0:a2:c0:39:c9:53:5e:fc:5c:
                    16:5b:bc:1b:db:28:d3:c3:cd:9d:ff:4b:cf:be:d4:
                    3d:ff:94:49:1f:24:67:50:b0:bf:e5:8e:f1:1b:f2:
                    b7:dc:bb:23:25:a5:15:cb:cd:d6:02:fa:fa:27:ab:
                    02:fd:b1:d7:f3:9e:65:f6:73:1d:6c:28:08:76:af:
                    7e:51:b0:73:8b:ad:c8:9b:d4:9a:38:1f:d3:51:5f:
                    81:05:7f:69:fe:04:4d:46:c5:6a:e3:eb:fa:fc:c3:
                    08:d8:d9:04:f5:e4:71:b3:d1:98:51:d5:f2:d3:d6:
                    eb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:95:E7:5E:FB:DE:7B:09:9D:A5:E1:44:2F:37:B4:65:EA:28:33:17
            X509v3 Authority Key Identifier:
                keyid:BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:95:ae:01:7c:9b:c3:62:a6:7c:aa:fb:57:84:b7:a2:e9:3f:
         01:ec:4a:80:0a:af:d2:45:e8:05:9a:c1:af:53:11:1e:bb:dd:
         e3:45:fd:fb:80:76:c3:94:ca:7d:27:1d:8a:76:3b:cc:47:15:
         6b:df:bd:7d:ba:b5:6e:a5:4e:ae:01:00:89:ab:7b:20:07:ca:
         55:b0:8b:51:fb:63:fa:66:10:8a:f0:39:9e:a5:33:cc:be:b7:
         f2:9b:79:78:12:26:61:2b:d8:a8:82:59:93:f5:29:26:a6:b6:
         50:d2:03:16:8b:e1:0e:31:9b:85:46:70:c5:7e:99:85:2f:8d:
         f6:96:e9:e9:ae:da:9a:c8:77:eb:09:69:02:86:3a:ae:c5:44:
         ae:9d:d3:b8:8f:20:68:c3:26:c4:c4:54:d5:4c:e5:93:30:ae:
         dd:9d:7c:4f:d7:23:8c:71:77:a3:f6:06:7b:6e:ea:d3:80:2b:
         ec:e6:ab:c3:b8:9f:5d:dc:77:26:bb:4e:90:f3:fb:5c:a0:c9:
         2a:4b:88:5f:83:6e:dc:da:06:82:6e:46:c9:18:60:28:7d:cb:
         53:c4:e2:ba:f3:fb:b9:b8:f7:f4:43:09:7a:b3:57:fb:0c:62:
         9b:0c:56:2e:6c:0c:39:ba:8b:3f:3d:40:b6:30:d5:72:bb:02:
         63:ae:e8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:43:11 2026 by rpki-client