Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
File:                     4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft (raw, json)
Hash identifier:          5NTFl9+VkIEMFhLzY6jD6ylOW0xkzqJ65qZAfTGBURc=
Subject key identifier:   AA:36:74:8B:CE:A5:3B:94:4B:19:06:0A:A4:0A:CB:F2:BA:6A:2A:87
Authority key identifier: E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30
Certificate issuer:       /CN=A917F0AF/serialNumber=E114378DA934861469F495D97598E0F00289C330
Certificate serial:       014A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
Manifest number:          0145
Signing time:             Fri 25 Sep 2026 05:27:25 +0000
Manifest this update:     Fri 25 Sep 2026 05:27:25 +0000
Manifest next update:     Fri 02 Oct 2026 05:27:25 +0000
Files and hashes:         1: 4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl (hash: Oz35uO/jQzRjspUxo7FaIxVosZK0jqJJq3fmbcm38Qc=)
                          2: 27E5184CCC6211EFA20BEE1BC4F9AE02.roa (hash: A1wPnRMGx6RYQ7IXRqQ2UEVamfvjRwCyLh6fwcM/Gl4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl
                          rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F0AF, serialNumber=E114378DA934861469F495D97598E0F00289C330
        Validity
            Not Before: Sep 25 05:27:25 2026 GMT
            Not After : Oct  2 05:27:25 2026 GMT
        Subject: CN=6ab6063d-ded6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c5:cc:ef:b6:ca:d0:8a:5b:17:bc:0e:c6:b5:
                    82:db:77:c2:2e:29:3b:a2:52:0a:29:05:85:7e:af:
                    5c:3b:86:80:bf:ab:a9:1a:1e:a0:d4:b3:6d:4c:33:
                    32:a7:d2:ae:ad:f6:86:0f:25:a8:3a:6f:39:70:ab:
                    f8:03:6c:06:66:55:4d:88:5f:2d:3d:25:69:b5:5d:
                    24:71:df:5e:68:29:b0:ec:5e:6c:cc:3d:1d:98:10:
                    ab:c2:fb:9b:08:62:80:1e:57:a8:65:ec:0f:a9:60:
                    62:f5:3c:1f:fc:1f:c4:e0:e7:d1:3b:87:e3:57:5b:
                    e1:ba:18:76:83:70:a3:db:9b:d2:56:91:50:35:b0:
                    fb:b3:6c:1f:3a:44:32:27:53:76:4c:0e:b6:d4:14:
                    4f:73:43:31:c3:7e:31:92:90:21:25:bc:68:4a:4a:
                    e8:03:bd:4c:04:e1:1c:bb:51:30:cf:1f:12:c6:1a:
                    0f:27:00:91:84:2d:bc:fd:30:91:f9:a9:21:d0:0d:
                    c8:73:9f:a2:2a:46:0f:2e:9c:3f:50:f5:3c:ef:85:
                    56:31:c5:3a:e8:f8:78:30:b5:09:c9:97:81:b7:6f:
                    3c:54:48:21:da:bc:ce:7c:d1:ea:7e:0a:7c:67:2c:
                    06:1f:a2:fc:7f:93:54:64:ea:12:00:ea:23:17:00:
                    c2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:36:74:8B:CE:A5:3B:94:4B:19:06:0A:A4:0A:CB:F2:BA:6A:2A:87
            X509v3 Authority Key Identifier:
                keyid:E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:d2:56:db:99:ef:0f:c4:d8:7f:d4:27:e7:1a:c4:d7:f3:22:
         91:1a:b8:a2:24:8c:68:a8:c2:4e:65:3c:02:68:0b:b0:79:de:
         98:53:b1:86:40:86:e9:f4:83:8c:84:6c:5f:1c:b0:0c:b6:3c:
         84:93:26:67:6d:ac:0c:cc:34:0f:07:55:4e:bf:90:94:8c:58:
         48:cd:de:54:72:4c:e7:f8:43:fe:50:47:d1:9f:f3:5c:05:b1:
         e3:0e:8d:da:9a:b8:18:41:99:0c:0a:2a:35:58:54:8b:32:8d:
         a1:06:1d:a2:fe:bb:29:82:e6:a5:43:9c:c6:a3:9f:5c:08:71:
         b5:6c:62:88:6d:1d:20:df:d7:e4:3c:f7:93:be:cb:6b:26:dc:
         b7:8e:21:88:ea:25:4c:9c:47:52:43:08:7b:1b:fd:42:d6:ab:
         67:35:ea:2d:2f:be:7e:46:10:7b:83:60:a6:13:ec:76:54:63:
         14:b1:22:38:5b:e4:29:48:04:b4:b1:de:e6:06:72:81:f1:fb:
         a5:2d:ff:11:b5:47:f3:10:5c:95:ff:61:57:f1:d6:f6:15:b2:
         9d:53:13:88:ac:f1:ab:2b:3c:e5:ff:62:8e:ea:ca:11:71:d9:
         65:63:cc:ad:40:bf:10:38:02:b7:76:f8:4a:8a:db:73:5f:48:
         ea:c6:14:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:42:13 2026 by rpki-client