Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft
File:                     pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft (raw, json)
Hash identifier:          iQah4mue+n1Zli+kU1baPriWmtT7QhAGRpUXRRqB2tM=
Subject key identifier:   27:17:0E:AF:EA:0F:95:6B:85:5E:B2:52:01:78:BD:01:58:F1:EB:23
Authority key identifier: A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE
Certificate issuer:       /CN=A918FF9D/serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE
Certificate serial:       0A2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft
Manifest number:          0A22
Signing time:             Tue 22 Sep 2026 19:33:27 +0000
Manifest this update:     Tue 22 Sep 2026 19:33:26 +0000
Manifest next update:     Tue 29 Sep 2026 19:33:26 +0000
Files and hashes:         1: pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl (hash: L+mwH+hyTQnDBz+iVDilCyWaV/RiuHsFFIXKNSzJkHA=)
                          2: 2A1AD3BA9FE711EAAFA97B81C4F9AE02.roa (hash: vDZT3DfVTn1W66wuzGllN1nmfcDrVZhrmZ141ppoOSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl
                          rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 19:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2602 (0xa2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FF9D, serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE
        Validity
            Not Before: Sep 22 19:33:26 2026 GMT
            Not After : Sep 29 19:33:26 2026 GMT
        Subject: CN=6ab2d807-a560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:74:34:87:84:ee:cc:ba:f5:47:5d:fb:c7:58:
                    b9:15:01:d9:87:d9:09:f7:6c:01:c7:01:f1:42:7e:
                    08:80:cc:80:12:19:38:f4:48:0e:8a:5c:e1:1b:1f:
                    92:c6:0b:5f:e4:58:0b:e5:2e:4e:94:05:6a:db:4f:
                    3a:94:2b:3e:10:c3:32:c5:79:f6:41:b2:b2:8c:82:
                    35:19:dd:77:6a:a0:a8:32:04:41:03:06:71:d3:ec:
                    fb:d2:fd:3a:c2:89:3f:3b:8c:f2:d8:ca:ee:21:27:
                    40:de:4c:1a:8a:93:03:d2:8e:56:c7:3f:fb:ba:e5:
                    96:c3:94:83:21:aa:29:d9:8a:e9:b3:33:76:1d:c3:
                    20:d4:4e:a0:90:96:af:21:49:0a:33:16:f2:09:41:
                    57:7e:90:31:e0:da:63:64:25:fa:bf:61:b5:9e:f2:
                    3c:13:81:ff:e2:65:52:5f:d3:7d:0b:77:51:bd:8e:
                    12:bf:5c:cf:57:03:38:49:23:fb:d7:4c:b8:23:c4:
                    7f:0f:91:3c:4e:bd:66:0e:39:bb:18:a9:55:a6:ad:
                    97:ca:79:e4:c0:08:4c:df:95:2a:af:4b:fd:f8:db:
                    2f:14:59:45:76:4b:af:ca:eb:2a:44:c6:36:cd:0f:
                    26:2d:e1:c9:cc:0d:6a:9d:db:c4:dc:1e:83:5e:27:
                    bd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:17:0E:AF:EA:0F:95:6B:85:5E:B2:52:01:78:BD:01:58:F1:EB:23
            X509v3 Authority Key Identifier:
                keyid:A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:70:31:59:39:6e:86:96:87:96:54:bc:f4:8d:95:9c:97:ac:
         2d:42:51:04:a4:2c:9d:44:67:26:28:2c:b1:2b:f2:70:7b:dc:
         ce:3a:ab:08:8a:28:70:48:ba:cf:19:30:35:07:47:6f:44:c1:
         32:df:cf:28:c7:af:37:2f:be:01:a0:1a:1d:90:a5:c7:9a:30:
         a6:df:dc:eb:a3:48:e8:5a:e9:02:b9:69:30:7c:bb:8a:bf:8d:
         f3:6a:ef:2b:e5:d7:55:06:92:ce:93:a6:9b:fa:f4:ee:e8:2f:
         7b:ea:69:34:ac:71:7b:d2:30:4a:9a:4a:87:e8:ca:73:47:a2:
         bb:f5:0f:5d:aa:e0:4e:24:ad:12:6a:ef:06:19:28:50:38:e0:
         72:64:52:10:a2:5c:d8:5d:7a:4b:26:12:8d:17:ae:ab:16:5d:
         30:1f:6a:01:1c:5e:42:ae:cd:7d:e5:36:9a:d1:e7:32:70:ca:
         c9:d7:73:63:24:80:1f:c7:72:97:c1:42:90:6e:a3:98:5c:c4:
         1d:f3:5d:84:1a:e1:28:d4:a8:9f:c3:8c:29:10:ed:9b:5d:eb:
         b4:6c:be:fa:f5:c7:c8:3f:39:57:69:bd:58:b2:ee:08:2a:51:
         3d:10:1b:81:f2:26:61:a3:0e:b8:08:1b:ab:ba:a2:55:d9:9e:
         55:02:20:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:03:30 2026 by rpki-client