Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917286F/14272A8C53BD11F1B6592A56B9833773/h2Q49-A2DORsAHz91IHDH05WCHs.mft
File:                     h2Q49-A2DORsAHz91IHDH05WCHs.mft (raw, json)
Hash identifier:          a211cq42T6RUlfoxsyU8ZHkjOFlN2GJtEsN5C+6rO6g=
Subject key identifier:   5E:AA:41:DF:8C:F7:B8:64:6D:D2:56:32:CA:69:44:12:ED:BA:87:82
Authority key identifier: 87:64:38:F7:E0:36:0C:E4:6C:00:7C:FD:D4:81:C3:1F:4E:56:08:7B
Certificate issuer:       /CN=A917286F/serialNumber=876438F7E0360CE46C007CFDD481C31F4E56087B
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2Q49-A2DORsAHz91IHDH05WCHs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917286F/14272A8C53BD11F1B6592A56B9833773/h2Q49-A2DORsAHz91IHDH05WCHs.mft
Manifest number:          44
Signing time:             Sun 27 Sep 2026 09:02:26 +0000
Manifest this update:     Sun 27 Sep 2026 09:02:25 +0000
Manifest next update:     Sun 04 Oct 2026 09:02:25 +0000
Files and hashes:         1: h2Q49-A2DORsAHz91IHDH05WCHs.crl (hash: w7qLMEdMTbhecGNe0AG+VgfRIhukBeDqhH1XI7aKFBM=)
                          2: 5257F21E53C211F19F1FA923BC833773.roa (hash: CKg/cSeBRG6ufQaILezJ2kDTbCeuVdt5eddE5iZ+RX0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917286F/14272A8C53BD11F1B6592A56B9833773/h2Q49-A2DORsAHz91IHDH05WCHs.crl
                          rsync://rpki.apnic.net/member_repository/A917286F/14272A8C53BD11F1B6592A56B9833773/h2Q49-A2DORsAHz91IHDH05WCHs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2Q49-A2DORsAHz91IHDH05WCHs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917286F, serialNumber=876438F7E0360CE46C007CFDD481C31F4E56087B
        Validity
            Not Before: Sep 27 09:02:25 2026 GMT
            Not After : Oct  4 09:02:25 2026 GMT
        Subject: CN=6ab8dba1-f473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:53:d7:9f:bd:b0:97:b4:87:f0:e2:6d:4f:21:
                    f4:f2:c2:3c:df:a0:4d:ba:0c:49:0f:90:6e:c2:77:
                    08:06:5b:74:99:22:ee:03:db:10:ea:c2:61:92:3f:
                    e6:cb:2b:07:5a:1a:aa:6f:c1:cb:8e:76:52:2f:9d:
                    67:d0:f3:03:0b:ff:e0:ad:d0:6b:7b:a5:e1:9b:95:
                    ce:18:cf:2b:6b:6a:37:f0:e4:a9:ab:c8:4d:fe:d5:
                    b5:89:c4:a6:f0:53:5e:23:de:28:e1:b4:4a:88:ab:
                    b5:1d:9e:12:ca:2d:4f:3d:8d:61:67:a7:cf:ab:51:
                    33:de:34:62:11:bb:01:44:f9:c7:68:a6:78:9e:c3:
                    e7:ef:01:6e:fd:43:4b:a7:9a:8e:58:38:da:91:b2:
                    0c:3d:68:bf:9b:ee:ed:b0:50:e0:99:fd:50:f5:75:
                    ae:58:3a:ff:fd:44:c5:fc:d3:b9:88:6a:8b:2b:3c:
                    3f:b4:18:15:81:00:d6:72:97:e7:4b:8d:e7:98:74:
                    6a:41:a3:45:f9:27:a2:88:95:af:58:8b:24:96:b8:
                    6d:e6:62:84:ef:6e:1b:1e:b3:38:a0:66:5c:2b:42:
                    4c:10:10:d3:c0:5b:9d:03:88:ca:f0:d3:ef:bc:4b:
                    fe:c1:fa:71:82:f2:3e:dc:c2:4d:7a:2a:1a:4c:0f:
                    b1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AA:41:DF:8C:F7:B8:64:6D:D2:56:32:CA:69:44:12:ED:BA:87:82
            X509v3 Authority Key Identifier:
                keyid:87:64:38:F7:E0:36:0C:E4:6C:00:7C:FD:D4:81:C3:1F:4E:56:08:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917286F/14272A8C53BD11F1B6592A56B9833773/h2Q49-A2DORsAHz91IHDH05WCHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2Q49-A2DORsAHz91IHDH05WCHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917286F/14272A8C53BD11F1B6592A56B9833773/h2Q49-A2DORsAHz91IHDH05WCHs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:6e:cc:92:8b:0d:d9:37:6d:7a:2c:5d:f4:1f:23:64:73:88:
         50:a5:4a:cc:9b:68:79:35:42:67:0a:bd:59:91:3b:95:c1:c2:
         85:60:a4:a7:a8:e5:39:da:92:0b:ff:e2:4e:4f:4a:87:d2:e6:
         8e:47:b0:34:e5:fe:25:32:97:a5:33:d5:30:98:d8:9a:4b:60:
         bd:a7:b6:c1:41:38:00:11:bc:65:55:9a:1a:8d:99:e2:21:79:
         33:52:04:ff:97:61:27:78:76:14:a3:8a:ab:f2:9e:fa:bb:5b:
         40:b8:4c:b1:ea:4d:c2:75:a8:b9:3e:73:39:51:c2:51:3b:fa:
         56:1a:60:b8:4c:b0:97:cf:cb:76:cc:6f:85:88:e8:cf:01:e8:
         e8:07:31:fa:98:94:b0:1c:af:17:40:21:1a:2e:3b:df:c6:bd:
         74:75:ac:b8:95:4b:82:07:8a:96:f2:f0:24:ad:d6:b9:d6:77:
         48:db:c7:1d:4a:ae:b0:2c:82:cd:aa:11:b8:46:b0:11:4b:37:
         ec:96:54:3f:8d:77:43:6b:8e:37:21:fe:a3:3f:50:21:f7:29:
         c1:20:cf:04:a6:fc:1d:68:6b:dc:48:47:36:60:21:b9:fe:a3:
         7e:6f:e8:66:0e:c9:35:b8:78:43:b3:ac:cb:4f:79:45:26:e9:
         27:8f:4b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:09:44 2026 by rpki-client