Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
File:                     AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft (raw, json)
Hash identifier:          Xb7/TPo+/p55fU0fStjHPPUna/L3Kg41DhRiZ41JQSA=
Subject key identifier:   2E:53:CA:6F:E3:94:3B:9F:3F:A1:84:92:4E:B1:E7:5F:D7:00:83:66
Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91
Certificate issuer:       /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
Certificate serial:       023B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
Manifest number:          022B
Signing time:             Sat 03 Oct 2026 03:26:23 +0000
Manifest this update:     Sat 03 Oct 2026 03:26:23 +0000
Manifest next update:     Sat 10 Oct 2026 03:26:23 +0000
Files and hashes:         1: AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl (hash: /VcJ/hKHjujLKgpqdEQCG4ApX22GRWhpNiZdstDLr7k=)
                          2: D39B04847C4B11EEB4EA3632C4F9AE02.roa (hash: ObuiXVUmDVsIfjaZ5h2LSS7KqAx0/euE3EgfxN0Szi0=)
                          3: 5694D344791B11EEA64C016BC4F9AE02.roa (hash: 9wThx/YsC4g2ZRPkZ1NZP6ysSeYk1+tTKZyloe+Ezic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl
                          rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 03:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E678, serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
        Validity
            Not Before: Oct  3 03:26:23 2026 GMT
            Not After : Oct 10 03:26:23 2026 GMT
        Subject: CN=6ac075df-935f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1e:46:2c:85:3a:12:d2:3f:54:d4:36:75:c8:
                    a0:b7:c5:4c:cd:96:34:10:15:aa:a0:f9:ce:d1:62:
                    01:a7:1d:7e:b7:5a:99:f2:fb:a0:e1:f9:38:6a:b0:
                    fb:fe:3f:6f:dc:a9:3f:34:8d:1b:44:d9:ec:02:02:
                    bf:b4:aa:69:f9:b6:45:d4:47:b7:a1:6f:76:4a:8c:
                    30:85:fd:31:8c:d1:97:49:3b:d9:fe:ee:d1:30:ef:
                    76:50:9e:34:09:db:29:c9:f2:9c:5b:f2:2d:eb:87:
                    22:e2:98:c5:fb:cd:b6:2e:fc:3a:72:6b:e5:78:c2:
                    ed:c1:d7:dc:0f:04:67:12:f8:1b:a0:09:13:18:5f:
                    4d:8b:8c:e5:e9:8e:47:15:41:a9:c7:5f:7d:8b:8e:
                    f9:93:50:a1:71:a1:0e:dd:62:1a:67:44:17:cf:43:
                    b3:de:15:1f:5f:64:c8:ff:ad:dd:89:97:93:7a:ad:
                    3d:84:91:88:10:68:9e:d6:e4:60:3c:9f:75:c0:c3:
                    72:9c:46:53:df:39:68:d9:fd:8a:72:8c:2c:d1:13:
                    ab:49:4e:0e:6b:a7:81:71:7f:e8:9e:c4:fe:e4:c9:
                    f4:75:20:b4:e3:f9:2f:30:ff:67:19:68:71:c3:d9:
                    59:39:93:be:db:2e:44:f2:2c:8f:35:fd:c9:03:13:
                    b0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:53:CA:6F:E3:94:3B:9F:3F:A1:84:92:4E:B1:E7:5F:D7:00:83:66
            X509v3 Authority Key Identifier:
                keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:bc:21:31:1a:74:55:08:1a:0d:12:c0:2b:d0:f2:30:5a:f6:
         41:83:7e:19:25:4c:d7:e0:88:6a:44:e8:27:75:e1:a3:b4:04:
         51:a4:c5:cd:12:41:30:13:45:61:5d:95:07:3e:85:58:c2:36:
         53:21:aa:b3:b2:da:e6:63:f0:76:7d:62:bd:28:ce:16:1a:98:
         ab:3f:f2:f2:c5:e8:24:fa:28:cf:9f:00:cf:84:21:36:f4:07:
         78:75:e5:2d:6e:84:8d:23:74:aa:03:0e:9f:3c:ad:23:17:7f:
         31:af:93:11:ea:19:87:92:13:39:30:b0:07:dc:e0:e0:4f:a8:
         3d:34:e2:98:75:52:26:f7:16:f5:c0:a5:0c:08:cc:3b:2d:27:
         f9:a2:2c:ee:c5:e5:6e:01:0b:c1:71:17:85:44:ba:10:4a:ac:
         8c:22:b8:22:48:b1:46:be:2c:64:b8:f8:d1:62:cd:98:0a:85:
         81:36:0d:a2:e4:b7:11:ab:43:dd:84:bc:b1:e6:68:be:64:98:
         97:1c:47:51:ed:99:f5:c3:9d:10:53:64:e1:95:5b:cb:38:04:
         80:34:a8:65:c4:02:8a:07:6a:96:2b:93:df:6a:4e:0c:08:e3:
         0d:be:82:24:83:f7:6b:e7:97:db:8a:ed:47:a9:a8:ab:4b:70:
         09:9b:5a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:13:58 2026 by rpki-client