Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
File:                     f3dZIELjyHvlbu2B2cyw6XQCzdc.mft (raw, json)
Hash identifier:          FPSXMaAEQt+DB3GFUa6q+CxokJDVd/zh3bI1lLtUasA=
Subject key identifier:   70:98:A3:40:09:1A:02:67:F9:4E:19:00:9D:FF:7E:C9:16:14:95:31
Authority key identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7
Certificate issuer:       /CN=A9192A47/serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
Certificate serial:       0160
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
Manifest number:          0156
Signing time:             Sun 27 Sep 2026 05:44:12 +0000
Manifest this update:     Sun 27 Sep 2026 05:44:12 +0000
Manifest next update:     Sun 04 Oct 2026 05:44:12 +0000
Files and hashes:         1: f3dZIELjyHvlbu2B2cyw6XQCzdc.crl (hash: 4MUHC729dL0A6kxWMIDqaSK2jh/ycjjkn6WeF+v/BRI=)
                          2: 43631816B82211EFB74FF56BC4F9AE02.roa (hash: 8H2e0J6ttQKl0SPd9mkDBdGO8YngFPILlTNxbAVIA68=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl
                          rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 05:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A47, serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
        Validity
            Not Before: Sep 27 05:44:12 2026 GMT
            Not After : Oct  4 05:44:12 2026 GMT
        Subject: CN=6ab8ad2c-b703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:42:45:a1:dc:44:6b:2f:18:04:5e:a9:35:3b:
                    42:f6:3e:71:72:35:97:44:f0:8e:5b:6b:dd:6f:58:
                    0b:b0:a0:01:17:9b:ed:b5:e1:44:66:83:f5:7a:11:
                    e2:93:69:a0:8d:27:b2:f6:9b:00:88:71:c4:87:34:
                    6e:69:e1:cf:0a:e9:c0:f0:78:f5:75:aa:f3:d2:01:
                    13:7b:39:49:65:91:52:99:7a:d8:14:81:58:a4:ef:
                    9c:14:e4:7f:31:0c:7c:0b:66:45:cf:e0:dc:60:88:
                    d0:25:65:09:07:7f:78:7f:74:73:2d:0e:42:58:d8:
                    35:8e:66:1a:29:fe:59:92:b9:61:38:12:42:4a:af:
                    4e:b1:7c:30:42:45:e7:d6:fa:7e:2d:e6:1b:d1:f3:
                    9b:55:af:50:39:a4:43:9d:db:5b:32:60:99:a2:d9:
                    4f:8b:0d:63:7b:db:d4:88:99:d1:0a:96:5d:ef:0f:
                    0f:41:fe:e7:b8:1d:74:d8:f8:d4:ad:6a:c3:2d:ba:
                    7e:91:f6:0f:de:36:ee:d9:1f:a6:2d:2a:6c:79:de:
                    33:d0:bc:fc:b5:cf:6a:b7:b6:b8:70:2e:d3:00:b3:
                    c7:5b:c5:72:b6:23:52:c7:67:7b:3f:80:a1:74:9d:
                    ab:ce:d9:5f:10:c7:92:48:79:4b:54:3f:db:14:11:
                    bf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:98:A3:40:09:1A:02:67:F9:4E:19:00:9D:FF:7E:C9:16:14:95:31
            X509v3 Authority Key Identifier:
                keyid:7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:02:18:2e:88:1e:f2:f7:3b:0a:48:24:d1:79:e5:58:dd:fb:
         7f:85:95:01:a6:7d:24:c5:6e:fe:11:15:75:c8:86:97:a2:a9:
         d5:b6:a7:45:21:eb:6b:68:57:8b:18:ab:65:56:09:7f:79:b5:
         d3:11:5d:7d:a1:21:4b:64:ab:bf:86:d8:35:fd:d3:b5:10:1c:
         18:ba:63:56:1c:0c:d0:fe:80:93:aa:29:03:1e:7f:e0:c2:98:
         b7:97:43:8e:9e:85:ef:bc:71:b1:5f:40:61:d6:f9:98:fb:d2:
         5d:7e:be:e1:19:ea:1e:7e:64:7a:4e:4d:56:c2:82:38:09:80:
         88:da:1f:2c:08:c5:a7:a6:b4:54:78:18:43:15:04:32:fd:59:
         dd:a8:4b:6f:84:2f:b3:ea:14:bd:f3:ac:95:e8:e8:c7:ca:87:
         6e:64:ff:0d:13:b2:a9:53:56:46:d4:15:81:0b:05:81:8e:06:
         c1:25:91:81:67:f5:ad:dd:ab:df:d2:77:c9:0f:30:d7:b3:d3:
         b9:08:9b:e6:e1:75:30:3d:8d:ee:50:2b:73:bd:f2:e5:23:93:
         4c:e5:8c:f8:bd:64:fb:64:82:fc:14:e9:db:92:6f:ad:f8:ea:
         74:d9:27:96:2d:57:79:31:d0:b9:50:e6:4a:bd:c5:a1:f2:19:
         5c:b7:ff:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:52:58 2026 by rpki-client