Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft
File:                     08nS13n2aEMJcSuzDPoZkpDhuNY.mft (raw, json)
Hash identifier:          9Udg5yzFiHvp6EFYh+pt9vq5JR6vsmAk79wCE8FtRYI=
Subject key identifier:   3F:4C:B7:A3:33:23:96:C4:9C:B7:95:FD:FD:2C:E0:98:91:4C:47:16
Authority key identifier: D3:C9:D2:D7:79:F6:68:43:09:71:2B:B3:0C:FA:19:92:90:E1:B8:D6
Certificate issuer:       /CN=A915DE8F/serialNumber=D3C9D2D779F6684309712BB30CFA199290E1B8D6
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08nS13n2aEMJcSuzDPoZkpDhuNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft
Manifest number:          0161
Signing time:             Fri 25 Sep 2026 05:05:38 +0000
Manifest this update:     Fri 25 Sep 2026 05:05:38 +0000
Manifest next update:     Fri 02 Oct 2026 05:05:38 +0000
Files and hashes:         1: 08nS13n2aEMJcSuzDPoZkpDhuNY.crl (hash: /wJyZftAX+p+f/iTPSrtS+fWeWx9aSzBYqd10MSOYb4=)
                          2: 6DEFE6D8A14611EF93AB8E21C4F9AE02.roa (hash: XPN51TPloT0Sb6kUSDOMyNz4bBTH/IHqHYJPkeZz8vA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.crl
                          rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08nS13n2aEMJcSuzDPoZkpDhuNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:05:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DE8F, serialNumber=D3C9D2D779F6684309712BB30CFA199290E1B8D6
        Validity
            Not Before: Sep 25 05:05:38 2026 GMT
            Not After : Oct  2 05:05:38 2026 GMT
        Subject: CN=6ab60122-6748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:f1:76:07:31:89:52:4f:b6:fd:b9:48:26:
                    49:bc:42:c4:9d:9d:cf:28:f8:4d:24:14:53:75:d5:
                    28:86:05:58:b8:45:56:4e:82:5c:06:2c:95:ba:e7:
                    e9:22:4b:35:4d:45:ab:b2:94:88:78:5a:18:35:9e:
                    08:91:da:77:fc:03:6d:b8:bb:6d:4f:d7:57:b2:15:
                    ab:d5:a0:47:e0:bc:17:ef:16:92:7e:06:ed:9a:91:
                    1b:ed:18:6f:95:d2:60:0c:55:a5:34:4a:42:f5:b7:
                    30:3f:00:cd:9c:4d:e0:19:2b:a0:05:61:19:63:4e:
                    82:3c:f4:84:3c:cb:52:11:41:4a:c8:7d:aa:f4:43:
                    f2:54:0a:e6:fc:96:e0:86:dc:32:49:d4:d0:02:90:
                    cf:89:61:bf:76:f6:c8:c8:83:a1:e6:11:66:de:77:
                    84:9d:7b:c5:b2:d5:fc:7b:4f:b8:b0:4e:c5:81:a8:
                    42:f4:d7:4e:5e:19:de:b4:b0:d9:a2:b7:ff:f2:9c:
                    bc:6a:b3:ed:93:a6:87:b1:fa:a0:6b:3a:d7:d5:61:
                    5f:65:8f:2c:de:da:49:9d:21:0c:48:5d:36:51:73:
                    6b:ba:be:c2:c4:1f:6a:05:32:92:52:68:d8:26:81:
                    2a:4d:6b:0a:bb:34:74:7f:01:92:6b:3d:b3:00:88:
                    26:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4C:B7:A3:33:23:96:C4:9C:B7:95:FD:FD:2C:E0:98:91:4C:47:16
            X509v3 Authority Key Identifier:
                keyid:D3:C9:D2:D7:79:F6:68:43:09:71:2B:B3:0C:FA:19:92:90:E1:B8:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08nS13n2aEMJcSuzDPoZkpDhuNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:4a:70:4f:f2:a6:b1:cf:3f:52:26:87:90:3e:3e:ff:c4:3e:
         1b:1f:52:88:36:cc:e4:6a:4e:f8:83:c0:18:8a:79:f5:81:3f:
         ef:5a:d9:61:62:88:c9:47:61:a0:9d:d8:39:d5:b5:20:fc:26:
         2d:e4:b1:42:0e:23:8f:a8:b6:6c:db:bd:b8:74:89:f7:ef:b2:
         6d:56:8b:65:e6:fd:35:08:e3:76:c4:a9:45:6a:81:3f:87:06:
         fe:bc:0f:77:d3:3e:d8:36:e9:88:d2:92:a2:f0:a6:64:59:38:
         c9:6a:0e:b8:14:65:35:4f:2d:03:d8:c0:2f:b9:56:9f:71:ae:
         b9:49:2c:58:92:3d:04:a3:75:c8:df:4b:4e:ed:8f:a8:d2:38:
         fb:73:62:6f:34:3f:15:b8:ab:82:27:32:df:1b:71:77:89:26:
         94:e6:19:07:ab:32:03:25:10:5e:c7:b4:13:59:fb:2d:ae:ba:
         10:57:f1:8c:3a:6f:6d:a6:ea:99:fe:53:b2:1f:2e:71:1e:04:
         b7:d7:7e:22:b4:7f:d4:4e:e0:4d:a8:84:c6:20:8b:38:df:31:
         c4:bd:64:1d:37:7a:75:b7:0e:e7:f8:3c:21:01:50:2e:e7:e9:
         76:ed:d1:ce:5a:c2:6b:15:84:b6:77:60:31:d8:e2:58:65:69:
         f3:f2:d9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:46:51 2026 by rpki-client