Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
File:                     pRz7iig43CPyh2RKRzXvwT2MMRM.mft (raw, json)
Hash identifier:          Fn+N1d+48T36J8flXF7pjptDGmfkGg12FxJQveoRrcw=
Subject key identifier:   AC:83:33:54:DB:16:65:9B:D0:E2:58:AF:19:A2:22:85:99:28:73:C5
Authority key identifier: A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13
Certificate issuer:       /CN=A9197724/serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113
Certificate serial:       0177
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
Manifest number:          016F
Signing time:             Sat 03 Oct 2026 05:32:08 +0000
Manifest this update:     Sat 03 Oct 2026 05:32:07 +0000
Manifest next update:     Sat 10 Oct 2026 05:32:07 +0000
Files and hashes:         1: pRz7iig43CPyh2RKRzXvwT2MMRM.crl (hash: G4fKIVPqHGMN/icI6NjTxnPkIcTV+DjtMxQA34cNOjA=)
                          2: A2C3AA7E904E11EF9FC6B922C4F9AE02.roa (hash: WPfdAXefVfZ1Z8B0KAdDL3U8aL68A120XQbVokS39W4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl
                          rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 05:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197724, serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113
        Validity
            Not Before: Oct  3 05:32:07 2026 GMT
            Not After : Oct 10 05:32:07 2026 GMT
        Subject: CN=6ac09358-8b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6e:49:86:29:e4:8f:84:f5:6f:73:41:d4:30:
                    b2:c9:7d:f9:22:a8:02:fe:e6:2f:77:13:ea:22:99:
                    a1:f9:b2:7d:22:20:a8:79:7d:9a:c4:c5:43:c2:9d:
                    d2:71:6a:2a:e6:88:27:79:70:51:1a:4c:85:09:5b:
                    22:8f:f3:f9:5f:db:d7:b0:81:59:14:6f:1d:fa:84:
                    df:8b:3b:9e:ba:a6:8b:d4:45:0f:4e:a1:90:4a:87:
                    05:57:96:74:02:75:33:5f:2a:c4:01:13:45:63:4b:
                    80:60:57:0a:c9:bc:60:a7:d0:d6:dc:fd:f9:12:55:
                    ea:90:18:a3:ea:ce:c4:c1:4c:02:fc:f5:83:33:df:
                    9e:31:89:5c:15:e7:40:2c:a2:6c:30:77:33:da:ad:
                    6a:44:94:5e:22:f0:17:af:42:6b:50:f3:ae:81:2d:
                    09:81:e3:06:43:e1:a9:70:54:6a:3a:99:80:fe:dc:
                    8a:82:9b:7f:85:43:a2:a8:7d:0b:1b:6a:d0:fb:a1:
                    f6:8a:73:2e:36:42:7f:cd:eb:c7:80:5f:20:44:44:
                    81:fc:b6:02:7e:96:2d:fe:02:01:e2:15:c5:85:e0:
                    5c:3c:6e:3a:e3:85:1c:b9:ca:28:73:60:bd:94:04:
                    db:a9:23:73:41:2e:b6:fe:a6:9b:4c:9a:c6:18:63:
                    96:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:83:33:54:DB:16:65:9B:D0:E2:58:AF:19:A2:22:85:99:28:73:C5
            X509v3 Authority Key Identifier:
                keyid:A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:7c:df:e2:7e:4d:53:60:af:b6:b3:25:bb:41:e1:dc:b3:d7:
         21:ab:fa:9a:34:13:54:d0:4e:ce:1e:ea:51:82:55:30:a5:67:
         47:58:b2:a3:20:58:c1:3d:91:ea:ee:b1:ad:67:f7:0b:62:50:
         3c:bb:7d:7c:9b:4d:0d:bf:ed:b7:7f:26:7f:7b:80:e2:26:a9:
         31:c5:f9:f4:ac:99:b6:85:b3:7a:97:2e:93:d7:d5:22:3c:57:
         68:aa:31:1d:15:c4:ed:14:34:1d:9c:97:24:a3:aa:5e:a2:e6:
         9f:f6:b0:69:81:5d:eb:ba:66:b8:b2:3a:a4:6c:31:d8:58:4d:
         f8:37:c5:57:dd:c9:a6:f7:3c:49:da:db:1c:16:4a:44:a0:6c:
         6e:5c:f3:fc:39:3f:9a:10:8b:bb:bc:1b:04:15:a6:48:b9:6d:
         bb:60:c1:42:1e:98:14:6d:6f:33:05:c5:15:53:27:9b:80:99:
         74:35:c5:54:26:13:aa:6f:00:68:ed:1d:7f:82:d8:6e:b7:5f:
         4b:64:79:27:79:5c:0e:ff:04:2a:24:77:e6:e4:36:ba:22:3a:
         a7:52:96:86:f6:01:a6:70:f2:5e:8e:cd:7e:30:5e:38:a9:d6:
         23:f1:ba:f1:a4:3f:6e:97:db:67:81:ee:d0:74:77:12:06:ff:
         9f:f7:d7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:29:35 2026 by rpki-client