Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft
File:                     w97H_d1FyVFyYIZPqe68_nuLz1c.mft (raw, json)
Hash identifier:          nY3AIiM5BA2Zaamtqc6HEmzhPGXOFJcLFg3vYoUFp1U=
Subject key identifier:   9E:17:4C:53:C0:5E:33:BA:8A:60:1E:7D:95:7E:33:09:66:9E:F4:BC
Authority key identifier: C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57
Certificate issuer:       /CN=A9159234/serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57
Certificate serial:       0668
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft
Manifest number:          0655
Signing time:             Thu 24 Sep 2026 22:33:42 +0000
Manifest this update:     Thu 24 Sep 2026 22:33:41 +0000
Manifest next update:     Thu 01 Oct 2026 22:33:41 +0000
Files and hashes:         1: w97H_d1FyVFyYIZPqe68_nuLz1c.crl (hash: DuIzXLwuKbD6fjVVFL782d5aqjzNftfhbwahNPLObI4=)
                          2: B58C9578378011ECA9E26B5AC4F9AE02.roa (hash: 7EYVCJnCzEtN1QHSYAihuuFiHcgoW3hwFtVhlxVQpNQ=)
                          3: EO-lcNCPNdGLfnrT1XvCuZWzd0o.asa (hash: ksKpmYvOphy08sHwmt1rQUj1FHAYUu4L7/Ls6NhHISc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl
                          rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 21:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1640 (0x668)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159234, serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57
        Validity
            Not Before: Sep 24 22:33:41 2026 GMT
            Not After : Oct  1 22:33:41 2026 GMT
        Subject: CN=6ab5a546-b9ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:35:01:ef:95:5e:75:b2:a7:11:8b:41:1e:0a:
                    21:94:fb:05:ad:27:14:28:08:23:44:31:4e:6b:09:
                    bc:f4:13:0e:3f:c6:42:b5:77:de:19:9e:a4:14:bc:
                    28:01:83:4b:7b:70:3c:d0:25:dd:93:be:9f:4f:46:
                    59:18:2d:0b:5a:d3:4d:48:cb:55:10:5e:fc:06:aa:
                    1b:c0:f5:19:1b:67:c4:f4:8a:da:08:5b:90:80:55:
                    d6:99:d4:36:47:e6:63:f5:67:b9:1f:8e:3f:ae:62:
                    a6:92:9e:29:91:37:af:9b:bc:3a:58:98:1f:15:98:
                    95:6c:3d:7d:e6:c4:b1:6b:ae:c5:c6:01:4e:64:25:
                    f2:63:74:23:7d:c1:9d:01:25:bf:22:75:a6:37:20:
                    80:38:c3:2a:59:c2:59:d6:f3:3d:1f:65:05:81:eb:
                    78:1a:06:1a:6e:7a:c7:26:36:ed:cd:5e:7f:90:79:
                    da:5b:28:ba:23:fa:88:79:a2:61:5d:2f:bc:ea:92:
                    91:eb:1e:5d:56:e3:6e:8d:04:b2:e8:5b:51:d5:8d:
                    45:ae:6a:5b:f0:21:f5:6f:68:4c:ef:03:f6:92:c4:
                    bc:fa:a0:55:5f:6c:8b:1f:2d:9c:a4:2d:a6:dd:a4:
                    14:0a:77:eb:5f:32:2f:65:30:13:93:8d:05:bf:d6:
                    99:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:17:4C:53:C0:5E:33:BA:8A:60:1E:7D:95:7E:33:09:66:9E:F4:BC
            X509v3 Authority Key Identifier:
                keyid:C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:9e:3e:4d:4b:45:d0:69:52:6d:fd:ac:6d:e2:0a:22:cb:b4:
         e7:8c:f7:b2:e5:40:c1:6e:3c:e2:88:12:19:e2:73:78:1f:42:
         91:80:5c:7f:f9:b9:7b:4e:40:a1:ef:9f:0a:81:28:e2:d6:e7:
         3a:b0:ec:6e:b7:49:71:a4:21:fc:bb:3c:45:e4:1d:9f:66:6d:
         ce:ff:5f:62:b1:b1:62:e8:cb:ef:86:32:68:2f:40:a0:02:39:
         d0:b2:22:8c:39:6a:f0:84:95:70:52:4b:ae:bc:7c:87:84:07:
         63:b1:1e:c1:a2:e4:11:61:b8:2c:bc:6a:89:6b:81:dc:eb:d0:
         ef:bf:1a:1a:d1:5b:7f:b4:07:f5:1e:ff:90:3b:ed:d6:1a:0b:
         07:81:2e:e4:c9:f4:58:79:6c:c0:d7:bd:3f:96:a6:6e:c5:b0:
         f4:86:7f:a6:24:d3:85:d7:72:f9:6c:65:f0:27:9d:d8:bd:60:
         7f:9e:37:f0:62:2a:0e:11:02:e8:7e:19:94:cb:d8:b7:f4:10:
         5b:ad:33:b5:5e:72:d4:f9:89:4f:b4:5b:4a:06:48:b5:04:f9:
         7c:20:b4:ca:c9:b0:ae:12:e8:49:a2:b2:31:42:dc:f6:90:4a:
         93:2c:96:e5:98:03:7b:e4:6f:87:d4:1f:6b:05:e9:cb:fc:59:
         60:2f:97:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:28:35 2026 by rpki-client