Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
File:                     4XcstdOWUnbPTpjTdmtjDX4_gXg.mft (raw, json)
Hash identifier:          n06INLTbdU5X7q85Q4fl2X6SP2P/rxo6pv2PigS+Z/0=
Subject key identifier:   0A:57:C1:06:1A:0F:81:B5:54:C4:4C:9F:9B:1E:DF:2A:9C:A1:E2:56
Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78
Certificate issuer:       /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178
Certificate serial:       0891
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
Manifest number:          086A
Signing time:             Tue 22 Sep 2026 20:47:24 +0000
Manifest this update:     Tue 22 Sep 2026 20:47:23 +0000
Manifest next update:     Tue 29 Sep 2026 20:47:23 +0000
Files and hashes:         1: 4XcstdOWUnbPTpjTdmtjDX4_gXg.crl (hash: AAauScNcGSxyV+6jSsSsMMff+tbkD2jk1so8a/CIZm4=)
                          2: xGs6rug6WDHyh1ZySeTGRrJxMY4.asa (hash: 9yEt3DikIep4O7B9SercxIT/lUI+BT7pT0etSvn7IqM=)
                          3: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (hash: 4V6lPO7ag/YW0Vp0T9oZKnRuFp3L/Sg6PmpvkYR7JtQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl
                          rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2193 (0x891)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175027, serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178
        Validity
            Not Before: Sep 22 20:47:23 2026 GMT
            Not After : Sep 29 20:47:23 2026 GMT
        Subject: CN=6ab2e95c-fc69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:97:c5:eb:5d:fe:cd:97:ed:38:c6:4b:f0:f0:
                    62:03:0f:3c:38:ae:e1:60:f5:9a:ae:1d:83:67:ae:
                    d1:4f:08:1e:f6:6f:7b:1d:a0:9b:eb:71:37:9b:d0:
                    66:3a:3b:04:b7:fc:e6:85:e7:3d:2e:5d:9b:94:37:
                    53:ea:c2:89:eb:41:a5:e7:7c:f0:38:14:bc:3a:ad:
                    c1:fd:c1:2e:6d:cc:57:6d:7d:3f:95:a6:66:7f:ef:
                    3c:13:21:07:71:c5:2e:53:e7:77:69:7c:ee:8a:67:
                    13:5f:c2:34:be:84:84:6e:09:fd:0e:00:07:db:a8:
                    7b:62:74:02:0f:4e:0b:72:88:e1:31:f9:c3:31:6a:
                    4f:50:c0:08:b9:82:9f:0c:bf:57:e2:c5:8a:d3:c4:
                    13:20:98:04:b0:ac:0c:48:fe:a8:47:b8:7d:2a:c9:
                    b4:cf:d4:b3:86:c5:5d:1d:b6:54:62:9c:03:e8:88:
                    c8:5f:31:2d:69:31:6f:ae:25:2a:08:73:3f:ee:9f:
                    99:c2:73:05:d1:dc:5b:10:7c:ee:d9:86:c7:9b:86:
                    31:f2:7d:51:4f:0f:dc:98:69:b1:dd:eb:16:b7:4d:
                    61:c0:99:9c:d3:85:bc:af:3f:52:6e:a9:41:b9:50:
                    3e:e4:71:7a:71:42:b8:93:3d:89:94:9f:ce:f5:0a:
                    8a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:57:C1:06:1A:0F:81:B5:54:C4:4C:9F:9B:1E:DF:2A:9C:A1:E2:56
            X509v3 Authority Key Identifier:
                keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:66:98:28:9d:48:c2:8f:51:dc:a0:24:5a:e9:27:f4:78:f0:
         fb:89:db:56:32:9f:ea:0f:24:de:e6:a4:17:9c:e7:87:e7:70:
         71:48:6d:c5:cd:3b:c3:1d:5a:69:4a:b6:14:af:fa:76:b2:8c:
         37:57:d8:03:87:37:29:48:e5:c0:cb:01:19:a9:db:1b:e8:de:
         5e:9d:0c:f0:c0:df:f6:82:30:e9:57:cf:9b:c9:76:c5:40:52:
         ab:94:6b:22:7e:d9:71:43:95:e7:92:35:e6:eb:87:3a:18:96:
         a6:77:fe:c9:da:11:ee:bf:2e:4f:6a:6a:41:8d:0b:87:2f:c6:
         9b:a4:a2:f7:5f:26:05:ff:5f:67:d5:cc:0c:48:56:e9:ad:fb:
         75:cf:5f:f3:5f:5c:a4:e9:fb:5e:35:1b:90:dd:ad:79:30:6d:
         3a:8f:ed:57:86:5f:d2:8b:0b:9c:4c:5c:9c:6d:99:dd:7c:cd:
         03:42:25:a2:ce:6c:5c:77:f5:ce:ad:65:fe:06:2e:a9:67:7b:
         4e:03:0c:54:36:a1:ac:54:13:ab:d1:2c:52:c0:fe:3d:e8:6f:
         db:ce:74:90:03:e0:04:e1:30:f1:76:5c:43:f0:03:d2:3d:7e:
         9a:a6:e6:aa:c2:4f:a8:d2:ca:a6:ac:95:0a:28:a3:7e:88:0f:
         78:8d:10:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:14:19 2026 by rpki-client