Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
File:                     MsAhMRti_kUAvI5OD0hSxkvF2ss.mft (raw, json)
Hash identifier:          35q3i1zv9MhSifuSxSpl3TgVN1TGbfd2ehiAAJiKT2Y=
Subject key identifier:   F8:2C:4C:A7:4E:F9:EC:D8:B5:06:7B:98:D1:9E:68:EB:AD:20:57:44
Authority key identifier: 32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB
Certificate issuer:       /CN=A915D8F3/serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB
Certificate serial:       016D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
Manifest number:          0168
Signing time:             Fri 25 Sep 2026 03:39:25 +0000
Manifest this update:     Fri 25 Sep 2026 03:39:25 +0000
Manifest next update:     Fri 02 Oct 2026 03:39:25 +0000
Files and hashes:         1: MsAhMRti_kUAvI5OD0hSxkvF2ss.crl (hash: R+PcGyAoT5Fu6hWeiiXCGEXtlckxr2amiwTUVJc4so0=)
                          2: 37DEC83C9DEC11EFB004850FC4F9AE02.roa (hash: FNB/Vhah+1KKF+D8+8ZX+5xp4x5bxuKgnMy6uZOCSaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl
                          rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 03:39:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D8F3, serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB
        Validity
            Not Before: Sep 25 03:39:25 2026 GMT
            Not After : Oct  2 03:39:25 2026 GMT
        Subject: CN=6ab5eced-dcc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3d:3e:1b:d1:b1:cb:0c:c8:96:1f:47:bb:b6:
                    28:da:ef:50:92:10:6b:7e:6c:62:28:b7:c9:77:6f:
                    3e:7c:ec:66:7c:be:55:a1:1e:59:10:6a:b2:dd:e6:
                    78:7b:dd:01:45:56:52:9d:ec:a7:c5:8b:d0:57:80:
                    0c:21:f2:07:a6:a4:d7:ac:76:c9:a3:a9:c1:5f:4c:
                    a7:4f:ac:e1:f7:de:1a:ad:7d:2b:71:fe:ba:e4:72:
                    02:11:93:bc:17:9c:b5:ba:75:5f:80:e2:89:99:c7:
                    b8:de:89:e0:30:70:db:58:c4:12:0e:40:a7:ab:b5:
                    49:a1:a7:74:45:1c:2d:88:85:ca:8c:8e:4a:7b:92:
                    d3:8d:e9:a5:12:ee:31:8c:4a:2d:cb:66:5d:8c:71:
                    37:f5:bc:0d:b9:99:bc:fe:10:a8:f0:ae:ed:86:3d:
                    1f:04:9b:46:e2:75:5b:05:51:23:5d:6e:3d:51:8d:
                    c1:cc:35:83:44:8f:b6:85:a7:b4:ae:75:2e:c3:e9:
                    4c:44:3f:f2:54:b8:fc:f4:0a:de:70:f0:5e:ee:5c:
                    9b:9f:26:65:3e:41:3d:43:37:2c:79:92:51:1c:7a:
                    b0:1f:06:e7:c1:f0:a1:b2:f6:8d:bc:dd:56:2d:7d:
                    7c:61:c4:50:7e:80:32:23:60:dd:12:7f:58:f3:85:
                    ae:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2C:4C:A7:4E:F9:EC:D8:B5:06:7B:98:D1:9E:68:EB:AD:20:57:44
            X509v3 Authority Key Identifier:
                keyid:32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b4:f5:b8:26:d3:5a:c9:fa:7f:ca:1f:07:bd:3d:56:3a:7e:
         9e:43:c0:80:3e:8e:28:1e:a7:f4:11:36:47:da:4f:63:9f:a4:
         5c:11:4d:26:4d:98:da:a0:07:fb:a3:97:83:91:85:e6:89:7e:
         72:05:e7:d2:68:e2:a6:04:15:c2:f4:98:8c:d6:18:b6:ad:c8:
         bb:8a:3c:13:54:be:03:fa:76:2d:77:f9:49:ee:ec:eb:8b:7e:
         f7:a0:cd:04:2d:74:d8:25:f1:d7:33:ef:a2:6c:17:04:37:e6:
         d0:52:1a:d0:73:a7:69:64:8d:48:e9:9f:91:50:ac:23:76:7b:
         e8:1c:f3:60:e0:0f:73:91:43:02:aa:ea:21:01:34:14:a3:be:
         8d:be:c5:5a:68:9e:18:90:51:0c:62:f4:86:58:64:36:54:3d:
         6c:cc:53:7e:8b:f7:03:4a:89:70:31:61:c5:62:8b:75:a9:25:
         a1:ac:a8:1d:da:db:35:4d:c7:52:68:1d:30:68:dc:ae:f7:df:
         77:29:c7:34:70:62:e8:9c:1f:17:2c:ff:f7:f0:43:3d:7e:57:
         aa:bd:a6:b9:b9:26:72:23:2e:fd:59:6a:6f:09:fb:ed:79:81:
         13:12:c5:0f:52:bb:93:97:3c:ba:4a:10:7d:c2:a7:6f:61:36:
         a4:66:63:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:26:32 2026 by rpki-client