Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
File:                     dCWq4W3bRko-K0ecekDJkCODa6A.mft (raw, json)
Hash identifier:          4pgevPi+Wyn5IyMfLVeU4lA87JW+CupziOxw6IalevY=
Subject key identifier:   9B:14:FD:19:7F:7C:71:16:45:27:69:56:F3:09:CB:42:CC:2D:99:AC
Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
Certificate issuer:       /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Certificate serial:       03CC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
Manifest number:          03A6
Signing time:             Wed 23 Sep 2026 00:23:32 +0000
Manifest this update:     Wed 23 Sep 2026 00:23:31 +0000
Manifest next update:     Wed 30 Sep 2026 00:23:31 +0000
Files and hashes:         1: dCWq4W3bRko-K0ecekDJkCODa6A.crl (hash: gMhqSrVd5vmmfnm7GLjfLFrX5aoBv3pRFwJeY0OqG24=)
                          2: 1EA5984A0BE111ED9E3AA135C4F9AE02.roa (hash: PAqkmFF7NdZLc+WBtc68ZNEhsmCDHgoBRZN4pVqjKP8=)
                          3: 7F78A06E6BBD11F18D81D59C7947A888.roa (hash: eg0ecmCsbK5JnVphz+icPr5TGD+NYgXexf2SF0w1KKU=)
                          4: A3C1A64E020811EF900CC60CC4F9AE02.roa (hash: HpPZhZVSwGrzf4zGYjjyQ7ueOCim2ZvtK0gkwPhEOmI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl
                          rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972 (0x3cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163998, serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
        Validity
            Not Before: Sep 23 00:23:31 2026 GMT
            Not After : Sep 30 00:23:31 2026 GMT
        Subject: CN=6ab31c04-f6ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b3:c0:ff:cd:51:c4:ff:b1:61:f0:a0:6f:52:
                    86:0a:7f:70:eb:b5:14:1b:77:0f:40:54:d2:77:34:
                    87:74:dd:b7:7b:e8:03:bb:c6:b2:a3:c5:bf:e0:6c:
                    af:d0:af:ea:5c:d9:c9:fd:d9:5e:d5:69:5e:fa:2b:
                    76:48:30:d2:23:4b:38:0d:28:fc:82:42:23:53:60:
                    c0:bb:65:94:22:e9:43:72:35:91:92:57:71:91:5c:
                    06:33:0d:c5:4e:a7:7d:71:dd:50:d7:51:88:6a:68:
                    28:e4:af:a4:15:2d:29:91:84:b2:e6:ff:c4:86:af:
                    f8:81:a4:6d:7b:1f:f3:1e:1a:a8:32:e5:9b:57:cb:
                    53:6b:be:fd:40:f6:93:09:b4:74:4d:83:ba:e3:b8:
                    41:2c:bd:90:f1:47:36:ea:94:37:2e:b7:45:c9:16:
                    d9:df:f4:47:bd:ea:9a:a7:c0:04:fc:b2:86:51:8a:
                    8c:dc:b2:2e:ed:d9:45:1d:a4:eb:ce:9c:48:86:f7:
                    65:64:08:33:79:22:4c:18:2d:01:d5:8b:f0:95:3b:
                    55:51:0c:46:38:f9:57:59:41:d8:27:8b:16:b9:e6:
                    1b:78:1e:e7:1b:16:61:36:03:45:fe:b6:84:6b:a6:
                    98:aa:92:a8:65:f4:19:83:e7:e2:d0:0e:50:46:c2:
                    d5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:14:FD:19:7F:7C:71:16:45:27:69:56:F3:09:CB:42:CC:2D:99:AC
            X509v3 Authority Key Identifier:
                keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a3:88:0c:be:35:67:b7:c4:36:2c:e0:56:1c:f5:0f:e5:bc:
         f3:06:f4:4a:f2:70:57:73:0d:18:26:15:23:ed:7f:16:d2:0c:
         84:b3:3f:14:0f:b8:07:21:67:8c:28:c6:71:a3:bf:d9:f2:ec:
         ff:e8:07:f6:82:2f:df:cf:0b:75:2d:d8:1d:ee:f8:8a:96:73:
         84:63:e7:e9:d3:5e:9e:16:f7:7b:11:3e:17:8a:12:8a:58:46:
         1f:d1:76:3b:52:71:47:a0:09:2a:2d:5c:3e:85:cf:d1:92:df:
         fa:3b:38:11:36:ab:b1:a1:21:0e:28:46:67:74:cc:0a:b7:80:
         46:c6:ee:60:32:cf:c2:e7:86:a8:c2:ef:42:1f:3b:d6:88:c1:
         b5:e0:42:e8:b7:22:c0:65:a5:a4:a0:ca:29:3c:9e:60:af:fb:
         e6:1e:3a:65:a0:18:bc:01:73:f9:fa:59:45:4e:a4:76:ce:18:
         0b:b7:63:1f:25:1d:08:f1:54:16:af:fe:74:b0:fe:55:8b:cb:
         f4:ae:b0:af:22:3b:6a:aa:b6:d1:44:1b:8a:47:22:a4:ae:71:
         12:42:40:8e:1b:24:6a:ca:b5:dd:83:b1:a3:10:34:40:79:16:
         fc:a9:8b:06:a5:7e:7c:a0:30:de:57:02:ca:37:9e:56:2b:5f:
         1f:38:15:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:27:13 2026 by rpki-client