Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.mft
File:                     haeIySXAhvfi-8AHHZ6SmOwCPlk.mft (raw, json)
Hash identifier:          f9kv9uGK/4qarym/2yepFmzOMd3BKz4FcJAdUY8TaLI=
Subject key identifier:   F4:02:58:06:4D:84:9D:2A:B2:E1:60:F8:3D:7C:2A:CE:CC:18:1C:80
Authority key identifier: 85:A7:88:C9:25:C0:86:F7:E2:FB:C0:07:1D:9E:92:98:EC:02:3E:59
Certificate issuer:       /CN=A9163FDD/serialNumber=85A788C925C086F7E2FBC0071D9E9298EC023E59
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haeIySXAhvfi-8AHHZ6SmOwCPlk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.mft
Manifest number:          49
Signing time:             Wed 23 Sep 2026 08:07:32 +0000
Manifest this update:     Wed 23 Sep 2026 08:07:32 +0000
Manifest next update:     Wed 30 Sep 2026 08:07:32 +0000
Files and hashes:         1: haeIySXAhvfi-8AHHZ6SmOwCPlk.crl (hash: K/SYAmR290/oS/CNI+0Ik3pvpCI4xRNTYfrMie6X8lw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.crl
                          rsync://rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haeIySXAhvfi-8AHHZ6SmOwCPlk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:07:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163FDD, serialNumber=85A788C925C086F7E2FBC0071D9E9298EC023E59
        Validity
            Not Before: Sep 23 08:07:32 2026 GMT
            Not After : Sep 30 08:07:32 2026 GMT
        Subject: CN=6ab388c4-4f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bd:e6:47:ae:b1:a3:e7:ad:57:44:e6:40:ac:
                    7e:e7:7a:cc:61:cb:9b:3e:f2:c9:4d:88:1f:cd:b7:
                    8b:4c:4d:6e:5c:54:62:1d:58:06:f8:ea:15:47:07:
                    96:d1:48:2b:0c:7b:5f:83:13:33:55:e1:b0:38:94:
                    92:d2:6d:b2:8b:fc:a6:85:5f:69:eb:31:a8:4b:ba:
                    97:04:19:f7:ca:a0:65:60:28:cc:19:0f:e8:f4:78:
                    92:b0:2a:c1:64:79:11:47:ea:e6:51:cc:a6:70:eb:
                    a1:d8:bd:55:ae:51:cb:5e:b3:12:5c:8f:94:14:c7:
                    ae:9e:e1:9c:8e:cc:72:c4:f5:23:22:7d:f2:dc:e2:
                    1e:79:ce:76:9e:f6:51:ad:ed:06:9e:ea:64:33:e3:
                    53:98:e6:9b:89:6e:27:ec:db:a8:61:b2:ea:68:79:
                    a2:4c:41:c4:1f:d8:7c:48:a4:db:5f:48:94:ab:c6:
                    e2:6c:85:48:53:56:92:e1:db:d3:5a:5b:85:7a:ea:
                    71:16:0c:c4:81:10:88:fa:35:9a:57:26:d7:e9:10:
                    34:0c:6d:a4:3b:7d:8a:3d:98:ad:99:45:e5:1e:2a:
                    6f:a2:24:f3:92:0a:09:d3:90:5f:e2:7c:7e:f8:a7:
                    35:67:c8:fb:70:46:28:f5:a0:5b:51:55:ec:4e:62:
                    ff:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:02:58:06:4D:84:9D:2A:B2:E1:60:F8:3D:7C:2A:CE:CC:18:1C:80
            X509v3 Authority Key Identifier:
                keyid:85:A7:88:C9:25:C0:86:F7:E2:FB:C0:07:1D:9E:92:98:EC:02:3E:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haeIySXAhvfi-8AHHZ6SmOwCPlk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:9d:a8:48:fd:b7:6a:73:25:05:3e:3c:1d:a0:fe:5b:0a:ad:
         0b:14:9d:bc:5d:06:37:09:04:8c:dc:b9:2a:e4:59:4d:0f:66:
         0d:91:70:28:f6:e5:88:cb:4f:81:2a:9a:a0:26:6e:2c:16:10:
         84:4b:38:b6:05:5a:6f:0d:1a:ab:31:8b:f5:e0:8a:17:0d:10:
         1c:03:41:e7:21:92:67:a1:4c:7a:12:c9:c9:03:a4:87:70:d8:
         6f:5a:b1:f1:ab:74:04:5f:0a:6d:f3:5c:fe:30:ac:a7:30:bb:
         1a:16:d7:c5:00:e3:76:ff:d2:2c:aa:c5:b1:c5:ff:44:28:06:
         e1:87:3d:8d:6b:3d:ac:83:72:c8:a3:29:90:e0:11:5a:55:eb:
         48:f3:ea:db:e4:81:2f:6f:77:da:19:0d:63:27:c6:e0:4b:c3:
         db:3d:ae:c6:e7:d7:d4:0b:f1:aa:6a:b0:35:3b:43:5a:d3:75:
         f2:15:be:3a:77:d1:57:7b:f3:13:1a:9b:a7:cf:67:87:9f:ad:
         1a:7c:94:a7:10:09:6a:0b:14:01:2a:1e:c9:55:11:b3:87:8a:
         13:72:0a:64:bd:1a:a2:38:d8:3b:03:a9:f9:56:30:8f:8b:ca:
         74:a8:d7:13:9e:75:f5:23:ec:e9:cc:4f:07:49:f6:2a:66:93:
         4a:44:e0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:46:03 2026 by rpki-client