Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft
File:                     SIcH43YxSt1UXMZgreziKYZME-A.mft (raw, json)
Hash identifier:          mHFaQCuZXRKigaHlByJ1G6N35U0UHpivoI8BzpyywIE=
Subject key identifier:   2D:88:39:CF:86:E3:05:26:26:2E:AC:92:AC:13:6C:B4:DD:87:F9:92
Authority key identifier: 48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0
Certificate issuer:       /CN=A9193B7A/serialNumber=488707E376314ADD545CC660ADECE229864C13E0
Certificate serial:       CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft
Manifest number:          CD
Signing time:             Wed 23 Sep 2026 06:31:42 +0000
Manifest this update:     Wed 23 Sep 2026 06:31:42 +0000
Manifest next update:     Wed 30 Sep 2026 06:31:42 +0000
Files and hashes:         1: SIcH43YxSt1UXMZgreziKYZME-A.crl (hash: YD1mK7hSlmGnC+jkDGMSIzlYBOr7c9MeHo+BWtzT9bI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.crl
                          rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193B7A, serialNumber=488707E376314ADD545CC660ADECE229864C13E0
        Validity
            Not Before: Sep 23 06:31:42 2026 GMT
            Not After : Sep 30 06:31:42 2026 GMT
        Subject: CN=6ab3724e-48fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ac:a2:19:ce:be:76:c8:11:3b:a2:8f:47:38:
                    09:d8:35:f5:e9:c7:e0:15:1b:f6:24:fe:2f:38:16:
                    c3:01:3c:43:c6:6a:be:67:eb:ee:ee:71:00:31:20:
                    6f:72:34:e8:54:82:bc:f8:d9:49:aa:c1:90:bc:21:
                    df:82:c5:51:96:09:db:1a:9e:7c:0f:7f:62:b0:50:
                    70:46:0d:57:69:40:9b:40:87:97:ed:8e:1e:89:20:
                    be:b7:c3:14:61:7e:40:f2:ba:dd:24:52:de:6e:4b:
                    a7:c2:cf:86:69:06:ee:9b:6e:b2:94:78:10:a5:f6:
                    89:05:61:30:e7:3d:38:c0:12:91:63:f9:d5:2b:9a:
                    c1:bd:d9:68:bd:47:9b:73:e5:41:18:31:e8:b4:8a:
                    53:b0:00:2f:10:bb:3d:32:12:27:93:05:cb:22:ee:
                    30:93:16:cb:13:9c:3d:61:05:a9:e0:d6:6e:d9:58:
                    cd:d2:cd:94:11:51:77:16:86:61:b2:50:23:ed:fd:
                    73:f1:4b:f2:d9:14:be:0b:49:95:a2:f0:f0:bd:fd:
                    09:c6:3e:eb:61:64:9b:7c:47:a0:df:2f:44:7a:fd:
                    96:bb:5e:29:e3:56:3c:1e:31:27:92:2d:89:5e:ef:
                    30:5b:97:7a:50:d6:51:3b:5a:4d:be:c0:74:93:d7:
                    1d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:88:39:CF:86:E3:05:26:26:2E:AC:92:AC:13:6C:B4:DD:87:F9:92
            X509v3 Authority Key Identifier:
                keyid:48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b9:4c:28:3c:b2:c9:89:63:54:8c:fe:e1:a5:10:a4:be:44:
         3f:63:98:34:26:c7:a2:af:30:8a:50:9b:84:bc:20:49:21:7d:
         f8:90:3d:0f:36:22:c1:1a:6a:bb:4a:92:c3:aa:8c:7f:0b:72:
         77:70:51:90:8a:39:69:88:a0:e7:77:57:f6:48:5e:d5:f9:a4:
         b3:02:6f:6d:a4:69:75:18:cb:a3:f2:06:51:10:a0:4f:f8:ad:
         b2:cf:f6:2b:c8:ce:fa:8a:fb:f0:b7:7e:cb:49:7e:61:8b:9e:
         27:fa:ae:4e:e7:70:d7:16:2f:41:bb:26:f9:a1:97:d3:ad:b6:
         3b:2f:98:58:c6:4a:9e:a9:e2:c3:67:a2:88:45:51:cb:b0:4a:
         6f:44:01:30:f5:30:07:b7:05:74:d7:20:7e:70:a7:b6:67:e2:
         e5:59:65:b5:54:04:16:0b:02:d5:fc:c2:7a:03:f6:7c:63:67:
         d4:54:13:dd:b9:35:87:6a:51:ff:98:04:15:e1:7c:a1:05:a0:
         53:29:73:d2:c7:66:e1:81:08:12:a8:bf:4d:4b:cd:71:ea:55:
         cd:9e:49:a6:f8:c7:90:37:e3:1b:01:ca:4b:c4:62:42:fb:66:
         c2:f8:29:c9:00:c1:8b:4c:e3:d2:35:44:29:16:31:d1:1b:cd:
         d0:54:5a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:06:03 2026 by rpki-client