Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
File:                     9TkpGRnN4USwNO8oiwpjR4PoLH8.mft (raw, json)
Hash identifier:          2qZCMpAL/4Sycci9ntx808cFbfiLrtc62kEuFrKsBSE=
Subject key identifier:   4B:B9:6D:9D:98:67:6B:C4:71:E8:D1:1E:15:04:E8:E2:00:F9:B7:F2
Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
Certificate issuer:       /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Certificate serial:       0586
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
Manifest number:          0536
Signing time:             Thu 24 Sep 2026 23:36:53 +0000
Manifest this update:     Thu 24 Sep 2026 23:36:53 +0000
Manifest next update:     Thu 01 Oct 2026 23:36:53 +0000
Files and hashes:         1: 9TkpGRnN4USwNO8oiwpjR4PoLH8.crl (hash: rPitgfkJr39W9g/9eGjhlPsBkyLDCiMFvFmDByGJu5o=)
                          2: 5BEDAC5EB29C11F1844EAF604011F970.roa (hash: 6qkTtVypHQojTU1bjcFOcIWXA5vO5zsqcVN/pLhyQO8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
                          rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 23:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1414 (0x586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
        Validity
            Not Before: Sep 24 23:36:53 2026 GMT
            Not After : Oct  1 23:36:53 2026 GMT
        Subject: CN=6ab5b415-cb85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a3:b5:40:92:8c:b2:1c:4f:8b:9b:20:4e:ac:
                    66:92:2d:2b:b9:df:53:5f:ae:2e:e8:c3:74:18:3e:
                    8d:e3:a5:3f:0a:b7:fb:56:d3:25:90:f7:e1:30:d2:
                    fd:04:72:61:76:4d:de:3c:ad:33:9a:96:e8:88:cf:
                    62:11:97:a7:20:c0:f8:cd:bb:44:36:53:4e:2a:dd:
                    5b:df:fe:36:7a:6d:b3:77:96:3c:60:06:63:f2:f6:
                    76:d4:31:9f:9d:41:db:30:43:95:67:91:86:62:ae:
                    fa:e8:e1:aa:74:dc:7e:79:bd:e3:54:53:ee:f8:f5:
                    e1:3e:7f:09:4f:8f:ca:26:af:a4:09:89:91:1b:79:
                    cb:77:cc:5c:86:b6:d0:cd:84:e3:55:36:73:ac:e7:
                    16:b3:e1:64:a5:49:34:e4:4d:c4:82:09:55:5e:05:
                    21:c8:47:84:1a:d1:2b:db:5d:f5:fa:a2:b8:9c:ce:
                    f6:19:a9:f2:98:b1:b4:2b:0a:df:b6:35:8f:ef:32:
                    c1:ba:04:7a:08:e2:25:c6:bf:75:08:fa:73:28:02:
                    a5:30:fc:a8:ce:cf:d1:eb:44:30:29:cc:3c:92:bc:
                    95:65:76:0e:28:2d:e8:06:38:c2:0f:e5:e1:b2:4f:
                    c8:95:ec:3a:bf:7f:24:fd:df:7b:74:6e:c0:84:82:
                    88:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B9:6D:9D:98:67:6B:C4:71:E8:D1:1E:15:04:E8:E2:00:F9:B7:F2
            X509v3 Authority Key Identifier:
                keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:30:a7:71:ef:d4:1d:8b:2c:d6:18:4e:09:d5:61:21:2b:42:
         ba:71:a4:d6:60:7e:c4:65:e4:5f:10:8e:d0:b6:42:be:86:28:
         b0:52:00:50:af:1a:61:84:29:64:6d:5a:e8:f9:de:73:df:b6:
         d8:fa:76:7d:cf:61:9c:49:ad:aa:02:79:6b:c1:18:da:14:ea:
         0d:98:e2:98:9c:43:7f:13:71:8e:60:ea:00:8b:4f:34:2b:0a:
         c0:c8:44:0e:ba:d3:ed:93:c8:c3:13:dd:87:0f:7d:b8:b9:b4:
         90:cc:4d:bb:6f:7c:29:21:c4:d6:c6:63:2e:6b:3d:bd:e8:30:
         97:47:d2:12:15:ca:57:0f:ac:b0:e9:02:23:5a:0f:e9:77:c1:
         ac:8d:76:b0:26:5d:2e:db:43:1c:fa:4e:4c:a1:ca:9b:e3:15:
         74:ce:24:30:b2:9e:1b:47:54:7b:05:41:c8:b1:a4:09:58:cb:
         20:b1:77:6c:43:04:c3:e7:53:bc:bd:c7:79:a4:78:b8:6f:ee:
         0b:5e:60:ef:16:fb:12:4e:4b:be:1c:05:ac:53:40:46:c9:ef:
         93:f6:49:79:5a:c1:2a:8c:86:a3:a3:ac:d5:50:3b:80:bd:fb:
         24:0f:72:36:e9:b6:0b:d0:60:79:b4:55:02:9f:97:b2:cd:55:
         09:a4:05:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:15:38 2026 by rpki-client