Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft
File:                     sc2DuJnOYCmsikIu278VgzU5HQg.mft (raw, json)
Hash identifier:          249zTpXd4UPI4hqDSfOa2/kGVqg+cnh+maE8A7aIATs=
Subject key identifier:   E3:C9:45:FD:65:3D:C0:A4:E6:57:4C:58:25:F1:48:DA:07:12:47:4B
Authority key identifier: B1:CD:83:B8:99:CE:60:29:AC:8A:42:2E:DB:BF:15:83:35:39:1D:08
Certificate issuer:       /CN=A9168497/serialNumber=B1CD83B899CE6029AC8A422EDBBF158335391D08
Certificate serial:       86
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft
Manifest number:          86
Signing time:             Sun 27 Sep 2026 08:11:11 +0000
Manifest this update:     Sun 27 Sep 2026 08:11:10 +0000
Manifest next update:     Sun 04 Oct 2026 08:11:10 +0000
Files and hashes:         1: sc2DuJnOYCmsikIu278VgzU5HQg.crl (hash: mjAts2BO7LWDCLZaH+5XjEyCCK8P8HvhQ2IKurd0Uzg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.crl
                          rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 08:11:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168497, serialNumber=B1CD83B899CE6029AC8A422EDBBF158335391D08
        Validity
            Not Before: Sep 27 08:11:10 2026 GMT
            Not After : Oct  4 08:11:10 2026 GMT
        Subject: CN=6ab8cf9f-8c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:38:5b:df:9e:c6:95:f5:48:cc:c8:00:78:fb:
                    63:7f:e4:10:6e:8f:e7:89:50:0a:4d:4f:17:c3:ec:
                    2b:1a:b5:b4:4b:89:b3:6e:4c:e2:4f:42:7b:16:a1:
                    83:a2:b5:af:f0:71:36:5a:f8:26:ef:b9:b5:77:50:
                    e1:65:cd:8b:98:43:88:8d:81:f8:82:27:fb:99:97:
                    73:8f:27:a6:8c:77:fa:db:28:4b:34:a3:d7:a5:cf:
                    c8:cc:64:d8:d2:5f:21:05:59:a1:4e:4a:eb:70:f3:
                    94:e5:a3:af:c6:58:06:75:99:27:73:6f:f3:f8:ac:
                    ed:ce:ea:9f:f1:11:2f:5a:22:fc:45:ca:23:a6:c1:
                    f9:c8:e6:67:b4:c5:0c:36:5d:f2:25:0e:bc:0a:0a:
                    f5:05:d3:c7:a1:71:93:db:7d:13:a1:90:8f:5d:78:
                    55:66:81:ec:9f:d9:c5:3c:f3:6a:df:46:f8:de:1f:
                    36:a8:2b:27:5d:42:1a:e4:80:9d:2a:af:c8:a8:d7:
                    4a:a2:1d:07:02:93:9c:8a:99:e1:83:f4:ec:78:d3:
                    07:14:e3:bc:dd:4e:94:e7:cc:73:dc:85:c8:77:78:
                    9f:2f:fa:fe:77:8f:df:e6:af:d5:d9:9c:9b:79:a1:
                    a2:57:2f:76:af:75:77:ed:a3:d0:c4:89:12:f9:d3:
                    6f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C9:45:FD:65:3D:C0:A4:E6:57:4C:58:25:F1:48:DA:07:12:47:4B
            X509v3 Authority Key Identifier:
                keyid:B1:CD:83:B8:99:CE:60:29:AC:8A:42:2E:DB:BF:15:83:35:39:1D:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:23:51:79:4f:62:88:e4:67:e9:6e:e7:f8:23:a3:f5:e1:e4:
         0d:1b:6d:fd:f5:2a:c9:d7:4d:52:a7:72:09:f6:4d:c0:0d:aa:
         43:0c:11:8e:94:00:62:59:fe:f0:99:00:27:66:d0:50:e1:f3:
         54:82:2a:3a:ad:51:7a:b0:2a:97:7f:17:ea:b6:d6:37:82:b9:
         2a:04:cd:30:66:47:93:49:07:0e:33:04:db:45:59:ef:30:ef:
         c8:cd:fa:af:f9:6e:07:fd:08:58:bd:4a:4a:ed:b9:89:6a:fd:
         11:4c:f4:af:e0:08:61:94:c0:cc:bc:a0:dd:4b:26:b0:2a:95:
         2a:78:b9:14:3e:c1:6b:45:b8:a0:85:25:64:f5:54:50:69:91:
         4a:57:a6:b6:57:93:47:9e:fa:77:ee:27:05:4e:a6:99:c2:71:
         de:4a:e6:b4:32:8d:86:46:f0:37:62:02:e1:be:ee:6a:1b:47:
         b3:3b:6e:0f:f7:2b:74:ff:87:9c:97:39:46:b4:78:f2:e9:e5:
         8f:d2:e8:93:3f:01:ee:5b:83:98:20:81:2b:0b:3b:e3:af:e4:
         29:5b:dc:dd:47:34:c2:69:8e:f5:9d:83:35:9b:5b:3c:4c:ac:
         eb:a8:31:ce:a3:bd:5e:ff:b1:22:cf:ea:59:0a:52:a2:7d:ec:
         44:b9:2f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:38:14 2026 by rpki-client