Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft
File:                     CUyLxdrczZwvs89F0UZN7s86HGA.mft (raw, json)
Hash identifier:          9khKam1VRuF8mhX7fO8uDNEGKPnCjzXDfuKgCHu/YLA=
Subject key identifier:   74:8B:23:B0:80:22:E9:F6:9D:28:69:4F:E7:CE:89:2A:F7:B5:B2:3B
Authority key identifier: 09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60
Certificate issuer:       /CN=A9164164/serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft
Manifest number:          015E
Signing time:             Fri 25 Sep 2026 05:05:56 +0000
Manifest this update:     Fri 25 Sep 2026 05:05:56 +0000
Manifest next update:     Fri 02 Oct 2026 05:05:56 +0000
Files and hashes:         1: CUyLxdrczZwvs89F0UZN7s86HGA.crl (hash: FVtS9X75EpoRZD2S1NOviNdYxR1rMoXoEoUcKYP7MPM=)
                          2: F1B3D754A18211EFA2B7E923C4F9AE02.roa (hash: r3aI1/tR8opqWS0V1KSkbb0iZwN9sMbMB5X14kpNYs4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.crl
                          rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164164, serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60
        Validity
            Not Before: Sep 25 05:05:56 2026 GMT
            Not After : Oct  2 05:05:56 2026 GMT
        Subject: CN=6ab60134-4dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6f:6d:7e:dd:ea:96:7f:66:49:49:86:e5:48:
                    13:bc:4e:9c:6c:0d:62:ea:3c:bc:a7:da:fd:78:f0:
                    60:2b:82:29:de:f1:42:56:ae:0d:93:4f:af:69:7d:
                    5d:3a:0e:8d:ac:93:5b:ae:a8:be:64:c1:9f:ea:d4:
                    22:1e:4b:47:76:24:6f:1c:68:17:30:bc:ea:39:66:
                    91:64:df:56:61:84:f6:1f:a8:7a:c8:cb:d9:41:58:
                    b8:e2:09:4f:a9:8d:a1:a2:8c:ae:ed:f3:31:67:95:
                    e7:92:a4:a5:cb:fb:b2:0e:bd:6a:97:b3:65:90:56:
                    59:41:c4:55:2a:2d:88:a7:50:8a:c8:99:ea:44:bd:
                    f7:f6:40:28:2e:96:17:ea:91:e9:02:d6:a8:72:6c:
                    d4:ee:45:91:dd:b3:02:50:b3:32:ea:e4:3e:48:af:
                    ff:47:9f:eb:9e:81:4d:b9:8a:9e:1b:9b:53:5e:4e:
                    79:00:23:e5:b1:c9:01:10:97:ae:c8:d8:a8:52:0e:
                    c2:5e:db:f4:d1:62:16:db:c3:5e:7b:19:2a:6d:a1:
                    db:93:f9:54:47:ac:ba:c0:da:82:7a:c1:5e:1f:5a:
                    2b:1f:e9:c1:f6:fb:cb:ed:4a:67:2d:bf:d2:ff:0b:
                    3c:6b:a1:fd:96:9d:27:71:20:40:74:3e:35:cf:c4:
                    61:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8B:23:B0:80:22:E9:F6:9D:28:69:4F:E7:CE:89:2A:F7:B5:B2:3B
            X509v3 Authority Key Identifier:
                keyid:09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:73:ee:59:f8:6b:e9:94:0c:57:a7:1c:16:05:fd:66:3f:42:
         ea:85:c7:f7:ef:6b:9f:7e:61:d8:f7:a0:d7:b3:c7:02:59:a1:
         f5:a2:5a:3b:40:9c:06:0f:16:c5:1c:3a:f4:2a:c3:5f:1d:79:
         3e:f7:a8:84:ce:70:38:7a:27:a4:48:a2:25:27:d8:75:08:a2:
         6b:ea:5b:ee:09:88:c7:25:ff:68:82:38:38:1e:5f:55:aa:9f:
         03:a3:52:71:4e:bf:e1:ce:21:3d:4a:62:63:04:f9:3a:4a:ad:
         69:f2:af:90:c9:05:a6:ac:b5:2a:73:93:1d:aa:3d:59:d7:07:
         a0:31:2d:74:73:3e:b3:5d:6e:dd:ea:28:d6:2a:86:c5:68:75:
         7e:8b:e1:b1:be:d1:ee:a0:94:72:61:71:99:c0:98:fd:49:8c:
         d2:53:e5:67:1d:cf:cb:21:6e:f8:42:0d:8f:9e:3a:7a:5b:54:
         14:29:ec:9a:89:a4:64:45:c1:bd:30:a2:54:2d:50:30:ec:0c:
         11:03:21:61:93:0d:e0:76:9a:61:e9:3e:56:ef:5f:49:31:79:
         19:3a:79:1f:bd:76:24:ca:ec:50:7d:73:81:48:3c:72:bb:24:
         9a:2a:53:49:46:23:82:06:76:ad:53:3f:50:a1:8a:88:cb:70:
         09:dd:35:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:10:38 2026 by rpki-client