Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
File:                     1p-CbIwgERW0fuzDf7XgAI41a9w.mft (raw, json)
Hash identifier:          N7w8siBAb5E/3e0I+X8oljFCer7UOYXhfwoUJrB2vyY=
Subject key identifier:   F9:EA:F5:9A:36:D7:04:4A:13:0D:9B:B0:5A:AD:E6:A7:B9:AB:C5:1B
Authority key identifier: D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC
Certificate issuer:       /CN=A918D6AD/serialNumber=D69F826C8C201115B47EECC37FB5E0008E356BDC
Certificate serial:       B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
Manifest number:          AF
Signing time:             Wed 23 Sep 2026 06:53:15 +0000
Manifest this update:     Wed 23 Sep 2026 06:53:14 +0000
Manifest next update:     Wed 30 Sep 2026 06:53:14 +0000
Files and hashes:         1: 1p-CbIwgERW0fuzDf7XgAI41a9w.crl (hash: 97gw9lQEbySawr6eJj9ghFZH9KsooZnL2Rko1kFBUXk=)
                          2: 2D57F1BAB90511F0BF94505DC4F9AE02.roa (hash: JKJHFFpKhMqZKta0zHh97l6PnllD0+iW/lc7gyj9EKo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.crl
                          rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:53:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D6AD, serialNumber=D69F826C8C201115B47EECC37FB5E0008E356BDC
        Validity
            Not Before: Sep 23 06:53:14 2026 GMT
            Not After : Sep 30 06:53:14 2026 GMT
        Subject: CN=6ab3775b-27e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9c:50:02:48:18:fe:5e:16:b6:75:bc:8d:db:
                    ab:6b:c3:24:67:ff:e5:10:3a:c2:63:80:6a:9f:46:
                    8d:59:c7:e1:35:c2:35:66:d1:29:8e:4b:02:14:22:
                    d8:a9:ec:79:6d:a7:a1:db:a8:cc:28:37:e7:2b:05:
                    91:0a:7c:a6:67:9d:2d:c3:79:38:71:c7:05:b8:ff:
                    a8:6d:7d:c5:74:7b:65:c8:da:eb:dc:4b:51:54:c3:
                    26:fd:0d:bb:c0:b1:32:a9:53:68:ee:d5:e3:fe:b8:
                    a4:05:bd:2d:84:d5:7c:cf:e3:c9:73:9e:0c:13:e2:
                    ab:d7:e0:c5:da:40:33:0f:63:69:f9:39:d0:3e:c9:
                    81:81:c8:23:cc:a1:0e:b6:4d:34:b1:81:6b:2f:ec:
                    20:f0:78:a2:e6:44:57:ce:15:41:5d:01:e4:9e:f8:
                    3f:3b:81:40:66:00:30:0e:5d:38:7f:8e:13:f1:54:
                    e2:85:58:dd:2f:ac:f9:f3:32:a8:48:77:7e:70:27:
                    81:68:ca:26:a6:17:6d:6f:68:2b:aa:03:3e:b5:71:
                    fa:81:6b:4c:a0:fa:33:6b:53:e5:0d:7b:c1:b4:b5:
                    6d:98:a8:9e:c1:35:0e:3c:3d:f0:d0:1c:07:25:ac:
                    d7:fa:24:3a:cc:1d:cf:3f:f3:59:0f:65:6d:35:c7:
                    35:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EA:F5:9A:36:D7:04:4A:13:0D:9B:B0:5A:AD:E6:A7:B9:AB:C5:1B
            X509v3 Authority Key Identifier:
                keyid:D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:30:c3:0a:ff:d8:81:55:e4:ed:60:d8:73:0a:a0:38:9c:48:
         f3:15:7d:e0:14:b9:05:48:cf:b2:7c:4b:1c:03:d5:e3:d6:7d:
         87:e4:23:3c:20:14:e8:7b:c5:5f:a3:f1:3e:35:34:7c:30:34:
         f6:0b:d5:f1:74:32:99:88:af:cf:a5:51:19:82:19:12:07:0d:
         7b:80:45:ca:07:b2:da:14:a9:a7:e1:54:56:fe:31:49:0d:1b:
         19:5b:aa:d2:c6:10:66:6a:2e:69:b0:49:86:07:ad:dc:dc:4c:
         5a:ab:a3:74:3b:9b:94:0f:f3:9c:28:aa:b0:1f:4f:15:e3:60:
         02:39:58:76:f5:21:76:49:d9:48:c3:36:0b:79:be:81:4d:96:
         d8:5e:16:42:55:02:07:f1:12:89:f8:a5:65:ba:f0:12:07:37:
         69:56:c0:e5:fc:36:7b:89:b2:40:93:c1:29:ec:cc:b0:a3:e3:
         49:49:51:4d:95:08:25:d3:03:d3:57:2c:91:1a:a3:32:57:0b:
         d5:2f:91:84:97:d7:26:7f:a9:c5:ef:af:07:f9:34:65:3e:3f:
         59:e1:91:7b:e5:c4:d6:07:07:07:84:2f:e6:49:61:6a:e4:3c:
         f3:24:69:f9:f4:51:45:86:bc:12:2d:f2:33:80:40:07:b5:00:
         5c:68:87:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:41:11 2026 by rpki-client