Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
File:                     pC2IwS1kcYPHe_xK74KM8pRLnsY.mft (raw, json)
Hash identifier:          CJ+4q5U3FU9KUU7P2RgI89soqwMl3XaFSjqUhbQ7sR8=
Subject key identifier:   78:47:CA:63:1E:90:AC:08:A4:F0:60:EE:8E:A4:02:C7:5C:C1:3B:CD
Authority key identifier: A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6
Certificate issuer:       /CN=A916C756/serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6
Certificate serial:       02E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
Manifest number:          02E3
Signing time:             Wed 23 Sep 2026 00:49:55 +0000
Manifest this update:     Wed 23 Sep 2026 00:49:54 +0000
Manifest next update:     Wed 30 Sep 2026 00:49:54 +0000
Files and hashes:         1: pC2IwS1kcYPHe_xK74KM8pRLnsY.crl (hash: 97TQvoZeQTWPxgA7FEmbK4JqioXY/0M9nPh0h84PSlQ=)
                          2: BB052E76A76E11F1B714FA7A3A11F970.roa (hash: RodMID7dxNErWw1sBBYwx0WpdnoFizXAEXRE37nOvNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl
                          rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 740 (0x2e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C756, serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6
        Validity
            Not Before: Sep 23 00:49:54 2026 GMT
            Not After : Sep 30 00:49:54 2026 GMT
        Subject: CN=6ab32233-6e3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c0:22:30:7e:07:4b:48:f8:1d:4e:f6:32:d8:
                    c6:bd:8f:4f:27:56:62:a3:ee:40:90:d0:5f:00:cf:
                    33:9a:49:13:a2:0c:9e:51:35:94:b0:b8:f0:9c:48:
                    ad:7e:9b:94:a5:bf:9f:22:46:f0:01:ad:55:ef:57:
                    fd:31:ce:d6:8e:7f:61:af:d3:48:5c:69:aa:6d:86:
                    3e:ff:f4:fe:68:b6:55:53:1b:12:38:32:a7:76:5b:
                    ce:19:d5:d1:82:ab:48:02:b6:77:91:3a:47:51:c7:
                    01:c9:8e:47:fa:f8:ec:1f:0b:49:87:a0:c4:4c:66:
                    06:ea:3b:71:73:2f:8b:b2:c3:10:07:3e:3c:6a:57:
                    33:53:5f:10:eb:51:a6:08:c2:93:98:1d:9c:f2:bd:
                    d4:4c:b8:3e:bf:90:6b:31:fe:70:dc:b4:73:b3:11:
                    a7:95:98:de:cb:f9:cd:9f:c2:93:7d:c4:ef:7e:12:
                    82:b0:20:b7:ff:c9:57:86:7e:d7:8c:57:79:03:6f:
                    1e:57:4a:ce:a8:4e:5c:58:52:92:80:d0:cd:36:a0:
                    f4:e4:4c:0e:bf:e8:5d:2f:00:e6:2d:b4:80:19:82:
                    d2:de:a3:a0:f3:fe:df:1c:df:3b:f7:af:9c:69:35:
                    60:ba:bb:88:cb:82:3c:c4:0f:96:a1:ae:bd:d2:75:
                    76:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:47:CA:63:1E:90:AC:08:A4:F0:60:EE:8E:A4:02:C7:5C:C1:3B:CD
            X509v3 Authority Key Identifier:
                keyid:A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:e4:52:26:f0:c7:a2:26:22:0c:c6:35:a3:d5:05:81:94:cc:
         fa:f0:da:a6:f2:0b:30:38:a5:12:38:04:e6:22:d3:a2:20:c2:
         45:8f:9a:67:42:79:62:8f:06:ed:3e:26:b1:5f:f0:5a:11:4e:
         33:12:2f:8d:e1:b0:79:63:67:7d:9b:df:40:b7:74:c2:fa:8d:
         ab:ce:97:16:f6:d7:94:18:f6:d2:f2:69:c5:3a:b3:bc:ee:25:
         37:c6:24:b0:26:d3:a0:1a:10:a4:60:79:6b:fd:87:cb:8e:de:
         80:ff:fa:68:25:4e:9b:4a:43:d8:fc:cf:0a:63:1e:f3:dd:51:
         a3:46:c0:e5:69:5b:4a:34:a3:34:e5:3f:7b:37:47:38:48:c1:
         83:e8:fd:04:f5:df:c1:d6:31:f9:00:ea:f7:c6:17:bf:f1:ac:
         e6:a8:d1:52:4f:d5:75:cd:37:22:b1:db:a6:9e:77:d1:38:f1:
         36:2c:23:b8:2b:bf:97:5d:54:81:17:e1:d0:a7:a8:e6:34:00:
         b9:b5:f5:26:5e:0d:12:0d:46:7a:a0:41:f9:22:ec:5f:87:46:
         c5:0b:53:e0:fa:87:21:01:9b:ef:bb:1a:c5:2d:63:f9:dc:2e:
         c8:4c:16:fe:c9:be:3c:94:2f:65:41:bd:90:24:45:06:39:2b:
         bb:52:5e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:01:03 2026 by rpki-client