Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
File:                     pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft (raw, json)
Hash identifier:          TVyu7zsTvKHc6wMOO7TbrpcfHoU/6I3xLU/bhfJsLfg=
Subject key identifier:   D4:5B:F9:A5:31:52:19:30:79:61:5B:F2:DE:82:87:AA:0F:70:CB:F4
Authority key identifier: A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3
Certificate issuer:       /CN=A916A763/serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
Certificate serial:       0257
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
Manifest number:          0249
Signing time:             Wed 23 Sep 2026 02:18:21 +0000
Manifest this update:     Wed 23 Sep 2026 02:18:21 +0000
Manifest next update:     Wed 30 Sep 2026 02:18:21 +0000
Files and hashes:         1: pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl (hash: MO8V1pT80lEqigprfPqnl4Wt//o3mAHi6YvXJpMgHO8=)
                          2: BF685A9E232E11F0B8BD6F6AC4F9AE02.roa (hash: nh4J30ldV6euRi2gtjyBB84BcovSsS6aKNr/8qxVkj8=)
                          3: 966CB516179B11F080B9434CC4F9AE02.roa (hash: YLQ7yflAgMKuFttC7CpmBZs+3zOwW6N2rvXK4lKqfAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl
                          rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 599 (0x257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A763, serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
        Validity
            Not Before: Sep 23 02:18:21 2026 GMT
            Not After : Sep 30 02:18:21 2026 GMT
        Subject: CN=6ab336ed-f32b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b3:93:79:be:94:00:37:e9:fb:a9:88:9f:7b:
                    20:5a:f9:46:c6:d2:af:1e:ce:00:cd:0b:76:00:1f:
                    40:63:6c:6e:7f:20:24:85:97:09:12:dc:ed:e4:d1:
                    10:e2:c3:35:97:88:58:4f:a6:31:83:71:d3:9a:ea:
                    4f:42:32:a0:53:7f:cb:94:2f:bd:c8:3f:03:31:f9:
                    51:a6:06:74:bb:c2:04:fe:df:25:68:24:c5:14:c5:
                    c3:31:c7:95:68:1f:c3:41:4e:9b:b3:cf:d2:27:e9:
                    47:84:f0:7f:ce:f9:9e:4f:53:6d:20:f2:b6:5e:b3:
                    92:df:e0:d5:08:9b:d0:83:1d:8a:ad:82:cd:e3:06:
                    df:b5:d8:0e:18:af:5f:4e:17:9e:55:51:33:8e:35:
                    ad:74:2d:ae:b9:a7:9e:6e:2b:1c:bc:5a:34:45:f5:
                    c0:09:22:7a:d2:06:b9:d6:db:54:a8:f7:aa:e6:5c:
                    7b:14:5e:02:70:30:df:ef:e1:38:e7:c2:4e:f7:a3:
                    03:be:98:5c:52:18:a5:f0:ad:c7:0e:e9:e8:dc:19:
                    d3:bb:be:f5:06:45:1d:1b:36:f5:1d:a2:ec:81:de:
                    1b:a9:e8:db:6e:cf:78:ef:5a:9d:fd:ff:f8:1b:dd:
                    7d:39:20:f8:e1:53:57:33:96:94:10:f2:af:39:16:
                    3f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5B:F9:A5:31:52:19:30:79:61:5B:F2:DE:82:87:AA:0F:70:CB:F4
            X509v3 Authority Key Identifier:
                keyid:A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:0a:be:be:17:03:e0:0a:02:db:c5:80:75:25:f0:14:7c:83:
         68:22:49:23:f6:1e:e6:8e:84:88:85:5c:cc:ee:f4:16:e7:68:
         0a:98:0a:97:e2:63:0c:3b:08:b6:01:72:d6:a6:97:24:43:56:
         a8:56:b3:a9:14:26:24:b1:b8:9e:fb:d3:f2:5d:87:42:6a:c4:
         87:98:f3:57:7b:e9:db:25:92:9a:8b:a2:a1:a6:07:e7:a3:a6:
         96:c7:ee:cc:d4:36:72:31:6a:a7:60:0a:5d:9e:57:60:30:e8:
         d7:20:11:71:09:b5:24:69:1f:75:26:40:a3:df:f9:19:39:fe:
         91:2d:84:ea:92:e3:15:49:5c:76:db:2d:90:c9:5d:8b:e9:d4:
         02:c1:7d:9f:d2:f5:26:80:1b:22:c4:73:f5:fe:7a:dd:86:da:
         4b:47:67:42:5a:a7:06:19:96:a0:37:bc:8c:9f:e5:26:95:8f:
         e6:27:3b:89:a4:db:11:6f:e2:a1:4f:56:02:03:59:7c:a4:c3:
         75:12:68:fb:64:5c:4c:e8:20:d9:6e:f8:8e:c0:8b:23:a8:8a:
         4c:71:34:fb:1f:ad:6f:40:d0:d0:73:0f:cc:90:c9:56:e4:e0:
         41:c9:56:d7:8a:46:32:19:6f:b8:90:e2:8a:fd:c8:76:a8:9a:
         3c:32:21:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:50:27 2026 by rpki-client