Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft
File:                     Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft (raw, json)
Hash identifier:          HVKTZRyQIWPci5GFbJs17404seCZYGtWRo86gj6ctEw=
Subject key identifier:   10:1F:B6:BC:FC:46:E4:CE:F3:D5:42:F1:C2:77:6A:76:81:49:C9:05
Authority key identifier: 49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2
Certificate issuer:       /CN=A916156D/serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2
Certificate serial:       F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft
Manifest number:          F1
Signing time:             Mon 21 Sep 2026 06:23:54 +0000
Manifest this update:     Mon 21 Sep 2026 06:23:53 +0000
Manifest next update:     Mon 28 Sep 2026 06:23:53 +0000
Files and hashes:         1: Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl (hash: rfbd0N7RZSWeOIQ2zmc25Q50GtaqhuHGkdGnOlKeh1w=)
                          2: 850105504F3D11F0A0960F7CC4F9AE02.roa (hash: qNWHgfJsoNs5L5U5kNXNpJEP/6NUawEmBu4riDVc1MI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl
                          rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916156D, serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2
        Validity
            Not Before: Sep 21 06:23:53 2026 GMT
            Not After : Sep 28 06:23:53 2026 GMT
        Subject: CN=6ab0cd7a-487d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e2:e9:8f:69:af:89:07:90:8e:43:e8:6a:14:
                    03:ef:54:95:cf:2b:a4:d5:39:c7:e1:14:63:b8:f9:
                    80:3a:6b:5e:9b:e5:83:99:c8:9d:db:b9:0c:81:85:
                    97:f9:70:71:cb:bb:62:83:bb:17:75:77:94:c2:35:
                    6b:4a:b4:d2:81:91:e2:6f:82:8f:9e:35:63:00:f2:
                    62:30:cf:64:03:43:b1:05:3c:09:ab:59:fc:51:8f:
                    09:f2:a7:c6:24:f6:8f:0f:5d:61:8f:df:2a:3d:91:
                    c6:25:5f:f6:c1:98:c6:5f:9e:8a:0c:6a:2f:64:cf:
                    84:0d:13:a3:b0:59:0c:08:a5:dd:b0:ec:5c:9f:ba:
                    b1:dd:37:72:a9:e1:19:0e:b5:58:bf:8b:28:70:e8:
                    3b:44:bb:1d:fb:91:46:f4:44:36:44:0d:7d:79:b9:
                    cc:55:fa:2d:ec:db:52:3c:e3:39:a5:49:b0:56:71:
                    64:9f:ae:0f:91:10:38:05:28:c7:0a:56:72:34:c4:
                    07:6c:86:e9:f5:28:25:97:75:58:d5:92:ae:7e:ad:
                    e5:5f:e3:9d:d6:d2:e5:24:ed:3c:ff:4a:22:2f:63:
                    ac:5e:99:db:12:1a:4d:44:bd:13:42:a2:f5:ce:a6:
                    f6:9c:f1:b0:00:3e:a1:f8:7e:03:38:df:89:d4:fb:
                    c4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1F:B6:BC:FC:46:E4:CE:F3:D5:42:F1:C2:77:6A:76:81:49:C9:05
            X509v3 Authority Key Identifier:
                keyid:49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:30:1c:5e:1a:a2:9d:48:9f:bd:36:a0:8a:bc:47:b7:02:f1:
         7e:cc:3c:58:56:45:97:2b:da:5d:04:f3:3c:04:2f:50:82:a4:
         2a:3d:a8:5c:18:45:03:95:5f:19:84:2b:b0:8e:1d:80:67:45:
         80:44:da:b0:9a:54:c6:9a:24:60:2c:e3:da:7b:13:0b:b0:c3:
         f2:f4:03:26:7d:53:62:96:f1:f1:fc:51:7e:0f:f7:7a:a2:1a:
         14:31:94:ee:91:bc:a7:b2:04:e5:10:0e:48:96:6a:b8:40:65:
         76:cd:f0:03:0d:07:85:c2:16:16:ef:5b:cf:9a:e3:0d:70:4d:
         c0:31:15:4d:cb:60:a2:04:03:05:81:33:ba:f5:3b:77:3c:36:
         99:f9:5f:a9:cf:d1:b8:84:6a:a9:bc:8b:83:89:13:09:a5:ad:
         39:c8:46:9a:dd:07:5b:5a:36:20:35:ae:53:21:c1:a4:7d:e7:
         32:8f:f0:e5:2d:1c:50:66:96:48:87:a1:54:98:c5:c7:db:71:
         8c:58:f5:42:3c:4f:7c:fc:60:ea:66:28:f0:03:24:e8:3b:a1:
         64:dc:28:87:1b:8b:99:7c:ed:c0:e7:a6:74:86:de:25:8f:9c:
         b3:f5:33:d4:0d:92:93:14:37:fa:58:5f:e8:f2:ee:e8:8e:cb:
         39:f9:45:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:59:22 2026 by rpki-client