Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft
File:                     f2OOENa_P0qFS8YKE8I5svNdFOE.mft (raw, json)
Hash identifier:          rQL6C2xo6a+09yXbh7wbPztyuS6J0LxzmqyWsB9ndbk=
Subject key identifier:   3D:CB:6D:91:10:B4:0F:3B:74:F3:84:F2:96:C2:04:B9:66:48:DE:B8
Authority key identifier: 7F:63:8E:10:D6:BF:3F:4A:85:4B:C6:0A:13:C2:39:B2:F3:5D:14:E1
Certificate issuer:       /CN=A9173D5E/serialNumber=7F638E10D6BF3F4A854BC60A13C239B2F35D14E1
Certificate serial:       7B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft
Manifest number:          7B
Signing time:             Wed 23 Sep 2026 07:31:39 +0000
Manifest this update:     Wed 23 Sep 2026 07:31:39 +0000
Manifest next update:     Wed 30 Sep 2026 07:31:39 +0000
Files and hashes:         1: f2OOENa_P0qFS8YKE8I5svNdFOE.crl (hash: 4llddwIyh4GcX+pFwJvEjDVK1Cy59qgUHYtieNqOVEI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.crl
                          rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173D5E, serialNumber=7F638E10D6BF3F4A854BC60A13C239B2F35D14E1
        Validity
            Not Before: Sep 23 07:31:39 2026 GMT
            Not After : Sep 30 07:31:39 2026 GMT
        Subject: CN=6ab3805b-2f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dc:8b:43:0f:9f:bf:07:fd:df:f3:09:97:4e:
                    b8:ff:d0:55:2b:78:93:06:1e:e1:11:0c:7b:96:a2:
                    e5:bf:53:7d:b0:c9:bc:e2:44:e9:48:39:68:d8:f2:
                    a7:4d:bb:06:2c:e6:81:49:da:75:b7:aa:5c:2b:78:
                    0e:3b:5f:2a:b6:3e:6a:d8:18:e3:7b:a0:43:17:c9:
                    2b:d9:24:e3:10:5f:80:50:9e:39:2d:30:42:9b:5c:
                    c7:2a:ae:cc:7c:bc:ec:40:84:45:b7:e3:bd:06:70:
                    45:3e:ba:58:44:48:4a:46:00:f5:d9:25:af:a3:f4:
                    15:17:47:62:df:28:9b:d2:65:f2:3a:e9:1a:59:b3:
                    00:d4:28:ea:c7:ab:97:8f:b5:0a:5b:41:51:79:f7:
                    82:93:f3:0c:36:7d:9c:db:23:91:7a:16:5a:1c:ef:
                    de:21:99:3e:c2:31:cf:97:8d:77:d9:4b:41:30:67:
                    34:d3:33:84:5c:79:2e:71:82:63:f3:9b:a7:62:f6:
                    fc:63:60:a4:a8:0b:f0:7f:17:f7:ed:1e:0d:97:1e:
                    e7:66:bc:60:a4:3c:db:9b:77:c1:51:cc:2f:3a:9f:
                    23:5a:4e:b5:48:15:86:37:6b:4e:0f:5c:69:a5:ff:
                    d6:39:f0:fa:46:7f:32:58:7e:56:02:cc:2b:da:39:
                    08:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CB:6D:91:10:B4:0F:3B:74:F3:84:F2:96:C2:04:B9:66:48:DE:B8
            X509v3 Authority Key Identifier:
                keyid:7F:63:8E:10:D6:BF:3F:4A:85:4B:C6:0A:13:C2:39:B2:F3:5D:14:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:44:9e:d4:0d:89:47:7f:1d:1e:59:11:95:9d:93:4d:69:f5:
         8d:81:aa:71:c9:60:4b:a2:09:c0:3f:46:0b:19:29:0f:60:51:
         35:7a:97:5c:c3:3e:30:d3:fb:53:34:4e:f5:56:02:33:8d:da:
         e9:53:61:75:00:6a:6c:29:c9:8b:bc:fd:a2:3e:13:42:20:b2:
         14:74:92:11:c2:dd:a0:3a:84:a7:80:bb:37:86:6a:85:22:07:
         3c:27:3a:df:12:76:6d:6c:0a:32:b9:0b:4e:23:ee:20:f7:52:
         d5:5f:d2:82:d9:02:cb:07:fe:3a:9c:35:44:d8:e5:34:4c:07:
         fd:7d:6f:48:92:4f:95:91:11:56:53:0b:d6:96:7e:50:3d:b5:
         bf:35:b2:f0:25:95:85:47:9e:5a:32:86:a2:ad:8a:8c:80:3a:
         98:62:4e:d9:79:5e:96:cb:ae:c1:2c:80:ea:e1:af:8c:d6:ee:
         d7:25:99:89:f5:46:56:ae:5b:7c:e8:2f:eb:13:9c:d7:69:7a:
         4c:77:0a:e0:6a:4a:8c:d8:e2:9b:d6:ce:65:db:2e:cc:d3:2b:
         1c:a5:8f:5d:4e:51:36:16:eb:88:00:90:e4:e1:fe:4d:7b:f1:
         25:a2:c4:cd:4b:b2:f0:b5:b9:d9:10:dd:05:5e:81:71:61:15:
         a6:65:05:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:49:10 2026 by rpki-client