Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft
File:                     rHE1BMtD6841eUt90irqe7WCPEk.mft (raw, json)
Hash identifier:          b3rVLWi65zpgRGtKcOqgULWGPuZoZOFXB9a8/FcgjKo=
Subject key identifier:   F1:6A:C2:36:DD:21:EF:E6:AA:FB:9D:11:46:6E:47:5C:17:DD:0B:A5
Authority key identifier: AC:71:35:04:CB:43:EB:CE:35:79:4B:7D:D2:2A:EA:7B:B5:82:3C:49
Certificate issuer:       /CN=A9186777/serialNumber=AC713504CB43EBCE35794B7DD22AEA7BB5823C49
Certificate serial:       0D3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft
Manifest number:          0D2A
Signing time:             Tue 22 Sep 2026 18:10:08 +0000
Manifest this update:     Tue 22 Sep 2026 18:10:07 +0000
Manifest next update:     Tue 29 Sep 2026 18:10:07 +0000
Files and hashes:         1: rHE1BMtD6841eUt90irqe7WCPEk.crl (hash: jiC/kCav7cbCD9qkYo+/nvDle1vo7wjKk5vP5mdjX1A=)
                          2: 54E193E20AD511EA8397192EC4F9AE02.roa (hash: j1i32i4DcWmzE0uaE4oTPdeM+ihAZQ+LPsH+5WRc5e4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.crl
                          rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:10:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3387 (0xd3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186777, serialNumber=AC713504CB43EBCE35794B7DD22AEA7BB5823C49
        Validity
            Not Before: Sep 22 18:10:07 2026 GMT
            Not After : Sep 29 18:10:07 2026 GMT
        Subject: CN=6ab2c480-7c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9e:b7:f9:03:85:b4:c2:77:6d:66:cb:ef:c3:
                    58:1a:f4:d0:13:71:b6:af:10:da:26:a0:66:01:2f:
                    d0:b2:7a:4f:9c:62:e5:f8:58:37:06:84:73:69:93:
                    b8:f3:4d:27:f7:b9:f4:e3:5e:85:b8:5f:0f:60:a4:
                    8c:96:2d:4a:d2:77:91:6f:ea:7a:88:ae:38:a2:db:
                    ed:53:36:15:c4:35:10:2d:9a:d0:d2:a1:1e:d7:ec:
                    5e:30:0c:a7:3d:8c:82:e5:eb:22:40:5c:66:52:9e:
                    9c:dc:ab:ee:17:b2:ec:bc:2c:b8:12:9d:da:a6:42:
                    a6:3b:47:2e:8c:a1:55:f4:f6:63:15:df:f1:32:61:
                    da:ca:6c:36:53:1b:e8:78:23:e1:83:78:1c:0f:e4:
                    15:25:57:d5:c9:f3:91:5c:48:91:67:41:16:44:70:
                    4e:2b:c9:ff:1e:a7:d7:e4:52:2b:49:0e:35:ab:1f:
                    5c:ee:38:80:46:91:a3:d8:9f:43:01:36:d1:7c:8f:
                    1a:c5:5f:60:18:93:1f:b9:3e:89:eb:79:55:1c:cd:
                    f8:9d:42:07:3d:6c:5c:17:15:89:46:67:9b:c0:b6:
                    65:3c:6d:04:7d:d9:29:f5:b4:66:48:1c:cd:9a:15:
                    1c:17:67:10:db:04:99:92:75:68:a6:54:e2:45:41:
                    0e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6A:C2:36:DD:21:EF:E6:AA:FB:9D:11:46:6E:47:5C:17:DD:0B:A5
            X509v3 Authority Key Identifier:
                keyid:AC:71:35:04:CB:43:EB:CE:35:79:4B:7D:D2:2A:EA:7B:B5:82:3C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:bf:cb:08:6b:73:b3:90:05:84:02:c0:b1:27:17:6f:89:26:
         2d:32:2f:7b:e3:38:06:08:99:93:02:dd:77:5b:48:58:85:5d:
         61:ed:d4:88:e3:c2:ad:a1:05:c2:e0:98:c7:9f:35:8d:a7:c5:
         ee:8a:94:d7:9a:d7:cf:9f:d6:80:82:fb:cf:e0:1d:cc:d5:1d:
         5f:8c:8e:29:20:8b:2b:3b:94:10:65:4e:ca:f6:31:98:e8:7d:
         34:d2:d0:9b:3e:d0:3f:13:0c:db:f8:54:df:a7:8e:a8:78:24:
         72:5c:64:a7:e6:c7:c6:29:b8:50:19:30:c2:f6:c9:15:0c:52:
         c6:5a:58:fb:8a:5e:51:f9:e2:78:3d:f7:e2:d3:8f:a0:91:93:
         12:d9:59:23:2c:66:44:59:ef:63:f6:e6:09:83:44:0e:42:f3:
         ed:34:31:a5:4d:af:c0:ca:75:98:7d:75:49:a9:d7:cc:53:40:
         dc:52:b3:ad:96:4a:15:ae:2f:14:40:40:50:f9:21:f4:bf:8e:
         17:fb:16:62:28:08:e8:43:d5:2b:81:17:15:f6:c6:9b:36:b4:
         18:b1:38:82:99:69:f4:7a:58:95:83:17:4b:d9:1a:7d:0c:79:
         b3:72:b7:9d:68:49:53:ed:65:de:45:eb:dd:40:db:3c:d3:93:
         31:c4:e1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:24:19 2026 by rpki-client