Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
File:                     7enmnD0KkdKXM8a3AvPMSL7dzuk.mft (raw, json)
Hash identifier:          dAWn+x9MOpjdq7WF7Msb30WORkWsB7qJoNwhvAizuMk=
Subject key identifier:   73:44:17:9A:98:19:B9:2C:C2:87:9D:04:95:00:A9:06:1C:FD:F0:6F
Authority key identifier: ED:E9:E6:9C:3D:0A:91:D2:97:33:C6:B7:02:F3:CC:48:BE:DD:CE:E9
Certificate issuer:       /CN=A9193869/serialNumber=EDE9E69C3D0A91D29733C6B702F3CC48BEDDCEE9
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
Manifest number:          AB
Signing time:             Wed 23 Sep 2026 06:54:33 +0000
Manifest this update:     Wed 23 Sep 2026 06:54:32 +0000
Manifest next update:     Wed 30 Sep 2026 06:54:32 +0000
Files and hashes:         1: 7enmnD0KkdKXM8a3AvPMSL7dzuk.crl (hash: bcinMgY+QFbu3C4emr9SYSDF+Js9gzncrJf/vniejc4=)
                          2: 00C05CEAB7D511F0AE891D43C4F9AE02.roa (hash: rj8hIrfRi7V3r6PzJ0L9zJhnR+XSN/cXbFpz9A4TU5Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.crl
                          rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:54:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193869, serialNumber=EDE9E69C3D0A91D29733C6B702F3CC48BEDDCEE9
        Validity
            Not Before: Sep 23 06:54:32 2026 GMT
            Not After : Sep 30 06:54:32 2026 GMT
        Subject: CN=6ab377a8-2438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e5:81:96:eb:f9:97:c5:dc:0b:08:4a:81:a6:
                    26:9d:16:30:7f:c8:7a:88:4f:c1:24:f7:80:88:1f:
                    42:30:3f:35:ca:99:01:ab:95:b3:4e:11:41:32:f1:
                    b2:8b:d9:12:a1:9f:89:f3:b7:47:6e:c0:ef:02:49:
                    d7:9b:f5:ee:9c:14:7c:ab:00:eb:cf:68:a9:71:3f:
                    17:90:df:a1:32:11:01:3a:cf:a1:86:52:77:10:03:
                    88:14:dc:35:44:3c:6a:bd:da:71:ed:31:ec:74:51:
                    f7:f0:1e:0b:39:58:da:03:70:24:7d:af:ee:6d:2f:
                    4a:eb:cf:aa:86:ba:98:de:4f:7d:f0:ce:5e:2a:cc:
                    fe:3a:39:24:0b:2d:89:a3:2c:0f:ac:ca:99:7b:30:
                    1f:72:b8:95:2b:b4:21:6d:8e:e2:fe:dc:50:8e:fb:
                    d5:c0:32:be:9a:04:d7:18:a8:ab:6e:ec:1b:e0:27:
                    5a:e9:0c:9b:32:34:72:2b:7f:91:b3:3a:e0:d5:a0:
                    d1:c6:79:a8:2e:2d:3a:a7:04:4f:d9:94:9b:9d:0c:
                    80:ee:63:ac:b9:fd:9f:11:87:71:cb:f5:f4:89:30:
                    c5:d9:ac:7c:12:dd:a2:02:ae:f8:eb:37:8f:18:e6:
                    da:88:26:cf:8d:7c:f4:2a:17:2c:90:ff:42:49:5d:
                    95:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:44:17:9A:98:19:B9:2C:C2:87:9D:04:95:00:A9:06:1C:FD:F0:6F
            X509v3 Authority Key Identifier:
                keyid:ED:E9:E6:9C:3D:0A:91:D2:97:33:C6:B7:02:F3:CC:48:BE:DD:CE:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:26:f7:f6:f2:1c:d3:32:5a:80:27:70:f5:8b:95:26:3a:1b:
         6e:4e:8c:be:27:b1:c5:a3:b6:cc:65:9b:dc:4d:40:b9:fb:04:
         df:82:34:47:8c:9f:2c:5c:24:07:90:b5:86:86:cf:34:6c:d8:
         ab:d8:24:8c:5c:c1:75:fa:76:e9:0c:97:b6:59:10:7a:b3:51:
         ce:92:61:87:f8:fb:bf:61:4d:56:c1:67:24:a2:46:4b:28:04:
         6d:90:72:fc:ea:18:4c:3e:e0:f1:74:ea:e6:21:f4:3a:e7:7e:
         da:ca:0d:5a:b0:fd:c7:b4:b5:c9:6a:c0:3e:be:ae:91:c3:f0:
         16:5d:e4:43:4a:f8:f6:a1:fc:30:ac:d4:9c:69:00:55:f1:bc:
         1d:ae:8b:84:0f:5e:ed:a6:2d:02:07:5a:36:14:36:ec:45:4f:
         c3:18:ed:fa:f8:ad:5c:62:40:95:44:57:87:cb:28:0d:0b:55:
         a7:a3:63:55:49:9f:67:b4:5b:c7:cb:6c:f4:4a:dc:ad:a6:79:
         5b:94:a7:4b:22:3b:23:0c:09:f0:54:5a:17:03:7c:5a:b2:49:
         52:50:28:d7:0d:af:c5:ed:22:ac:94:4a:d3:16:5a:8f:61:0c:
         fa:06:87:cb:a5:76:aa:33:f9:4c:ac:9b:f6:ae:cd:7d:39:79:
         bf:ce:c8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:06:49 2026 by rpki-client