Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
File:                     Cr_XemhpLv60MkAP_d3XrhsjvCc.mft (raw, json)
Hash identifier:          zgLO6KZtadLcWhn9Ked3/8Tuk1WYtTZB3rfK25yIr1k=
Subject key identifier:   4B:D9:76:A9:52:27:33:EF:BA:C3:13:17:95:9D:C3:60:5E:A3:28:9A
Authority key identifier: 0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27
Certificate issuer:       /CN=A9194A8C/serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27
Certificate serial:       05B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
Manifest number:          0803
Signing time:             Tue 22 Sep 2026 22:47:07 +0000
Manifest this update:     Tue 22 Sep 2026 22:47:06 +0000
Manifest next update:     Tue 29 Sep 2026 22:47:06 +0000
Files and hashes:         1: Cr_XemhpLv60MkAP_d3XrhsjvCc.crl (hash: OLw/SOLI5fZ208Iq7xrGuJJezU5taBTyBUv0AT4rWFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl
                          rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1463 (0x5b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194A8C, serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27
        Validity
            Not Before: Sep 22 22:47:06 2026 GMT
            Not After : Sep 29 22:47:06 2026 GMT
        Subject: CN=6ab3056b-1395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3e:62:76:d2:cd:55:23:95:51:eb:da:61:1c:
                    03:21:ef:ba:64:25:0b:e0:e1:e5:56:6d:e7:6c:82:
                    22:7e:3d:8a:01:e4:2b:5b:d7:f5:d2:39:66:8e:e0:
                    31:d1:53:79:2c:4b:36:52:51:e8:64:d4:a6:ad:de:
                    a6:80:00:d6:3f:d4:25:5b:66:f0:d2:01:f1:67:14:
                    5b:50:08:cc:ef:38:10:cd:e7:57:42:6b:4d:14:97:
                    51:a1:b1:f4:d1:b8:27:3f:e1:bd:36:c4:75:cd:db:
                    73:84:6d:41:76:83:cc:18:c2:e8:2e:92:57:1e:75:
                    25:d3:bc:a1:d6:94:6f:8e:18:a9:ce:06:59:ba:d3:
                    63:e4:48:c8:b5:61:0c:36:ba:d6:4c:d5:ce:46:12:
                    69:6f:e9:ae:45:5e:50:34:92:eb:92:50:b0:01:ac:
                    98:68:c9:20:0d:dd:f8:af:f2:da:64:f9:cd:2c:08:
                    b2:33:11:f6:f3:26:35:16:b1:0a:1a:43:63:3c:11:
                    26:a8:14:6e:53:74:a7:f1:ef:e3:22:ce:4a:d3:f0:
                    4a:19:84:26:d3:dc:04:0b:d3:d1:73:ac:aa:47:55:
                    f5:c9:99:90:c7:79:75:61:33:dd:7c:c1:10:78:61:
                    6f:ec:83:c8:3e:5f:97:d0:ae:45:d6:7a:9b:5b:79:
                    6a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D9:76:A9:52:27:33:EF:BA:C3:13:17:95:9D:C3:60:5E:A3:28:9A
            X509v3 Authority Key Identifier:
                keyid:0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:13:f3:2e:a4:20:c5:3f:29:4b:71:9b:db:9d:e3:2f:6e:c3:
         ef:54:32:d2:a7:dd:ce:2f:94:88:33:b2:60:f9:37:46:19:39:
         7f:ba:5a:09:b7:6e:8e:af:ed:ab:28:75:9f:2c:d4:04:f3:00:
         16:90:80:59:b6:76:49:cc:45:c9:cf:55:04:e3:56:6f:b0:9c:
         d1:5e:73:30:0d:25:50:b8:b6:a6:c6:a0:e6:28:ea:23:b3:94:
         75:06:d8:f7:6f:35:7c:03:97:48:fb:5b:8d:40:59:c5:01:87:
         11:10:ec:b8:e3:80:d3:30:98:4f:46:9b:3d:33:d2:e9:f5:88:
         80:43:db:9b:cd:88:cd:41:b5:d0:0e:4d:1c:c3:fa:56:69:18:
         38:fa:f9:f4:59:37:be:e9:5b:70:c7:80:12:a9:82:75:21:76:
         c6:1f:9d:67:3c:18:31:80:23:07:2b:8f:66:a8:37:e6:00:9c:
         5f:c6:db:a5:75:4a:94:cb:11:a7:80:2f:3a:a0:17:fd:77:e4:
         ab:94:d0:e1:da:c8:3f:4c:65:e5:ff:65:15:f6:b4:31:92:a3:
         8a:90:26:df:0a:de:3a:fd:3d:3e:c2:26:4b:30:54:f0:f4:8c:
         24:4e:ce:e5:4e:db:9d:6f:d5:a0:76:8c:25:c1:8a:1b:d0:b7:
         6a:e4:61:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRBOEMxMTAvBgNVBAUTKDBBQkZENzdBNjg2OTJFRkVCNDMyNDAwRkZEREREN0FF
MUIyM0JDMjcwHhcNMjYwOTIyMjI0NzA2WhcNMjYwOTI5MjI0NzA2WjAYMRYwFAYD
VQQDEw02YWIzMDU2Yi0xMzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvT5idtLNVSOVUevaYRwDIe+6ZCUL4OHlVm3nbIIifj2KAeQrW9f10jlmjuAx
0VN5LEs2UlHoZNSmrd6mgADWP9QlW2bw0gHxZxRbUAjM7zgQzedXQmtNFJdRobH0
0bgnP+G9NsR1zdtzhG1BdoPMGMLoLpJXHnUl07yh1pRvjhipzgZZutNj5EjItWEM
NrrWTNXORhJpb+muRV5QNJLrklCwAayYaMkgDd34r/LaZPnNLAiyMxH28yY1FrEK
GkNjPBEmqBRuU3Sn8e/jIs5K0/BKGYQm09wEC9PRc6yqR1X1yZmQx3l1YTPdfMEQ
eGFv7IPIPl+X0K5F1nqbW3lqSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEvZdqlS
JzPvusMTF5Wdw2BeoyiaMB8GA1UdIwQYMBaAFAq/13poaS7+tDJAD/3d164bI7wn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC
MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi9Dcl9YZW1ocEx2NjBNa0FQX2QzWHJoc2p2
Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NyX1hlbWhwTHY2ME1rQVBfZDNYcmhzanZDYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEE4Qy85RTY3MTFBNDJCMUMxMUVDOTU5OTc0MDlDNEY5QUUwMi9Dcl9YZW1ocEx2
NjBNa0FQX2QzWHJoc2p2Q2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnxPzLqQgxT8pS3Gb253jL27D71Qy0qfdzi+UiDOyYPk3Rhk5f7paCbdujq/t
qyh1nyzUBPMAFpCAWbZ2ScxFyc9VBONWb7Cc0V5zMA0lULi2psag5ijqI7OUdQbY
9281fAOXSPtbjUBZxQGHERDsuOOA0zCYT0abPTPS6fWIgEPbm82IzUG10A5NHMP6
VmkYOPr59Fk3vulbcMeAEqmCdSF2xh+dZzwYMYAjByuPZqg35gCcX8bbpXVKlMsR
p4AvOqAX/Xfkq5TQ4drIP0xl5f9lFfa0MZKjipAm3wreOv09PsImSzBU8PSMJE7O
5U7bnW/VoHaMJcGKG9C3auRhtA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 00:43:57 2026 by rpki-client