Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
File:                     05hHRxQle77zpal12QzQ3GW92-8.mft (raw, json)
Hash identifier:          DzaFdZMV5krxMMHyQEMtbqeSWCqfC9EAkqYOWxkbGUM=
Subject key identifier:   6B:09:78:C1:68:39:BF:32:C8:74:4E:87:9B:7B:E4:BF:6C:23:B4:94
Authority key identifier: D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF
Certificate issuer:       /CN=A9197CBC/serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF
Certificate serial:       0198
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
Manifest number:          0190
Signing time:             Fri 25 Sep 2026 04:31:58 +0000
Manifest this update:     Fri 25 Sep 2026 04:31:57 +0000
Manifest next update:     Fri 02 Oct 2026 04:31:57 +0000
Files and hashes:         1: 05hHRxQle77zpal12QzQ3GW92-8.crl (hash: GqHbqwvELfaMyhG9FskJ+1CW+OF0Lp1/kbDqrHWcs5s=)
                          2: 13435546ABF211F0BA77FA0DC4F9AE02.roa (hash: 6Iz+Zjz7W/z2VSOl5A1kVCCKL4JJS2AWEccWCBcTKH8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl
                          rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 04:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197CBC, serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF
        Validity
            Not Before: Sep 25 04:31:57 2026 GMT
            Not After : Oct  2 04:31:57 2026 GMT
        Subject: CN=6ab5f93e-471b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d6:0e:51:a2:f2:9b:bc:7d:a3:7c:ee:6f:2a:
                    ba:a4:3b:ee:12:a9:ae:1f:3f:49:0d:e5:52:cb:d4:
                    79:b4:82:7e:7a:b5:30:b4:eb:8a:ca:b1:2c:b0:2d:
                    c8:f0:60:22:c8:2b:ec:db:f2:a4:53:11:e9:7c:7f:
                    14:22:c9:b6:df:76:6b:53:66:b9:9c:56:07:72:d5:
                    97:85:62:ed:e0:4e:89:61:04:34:14:61:d1:be:dd:
                    75:5f:d0:c3:0f:ab:df:af:a5:55:1c:a0:fe:2a:e5:
                    e2:7f:df:45:4e:1e:15:0a:e7:a4:32:96:09:a2:8b:
                    75:5f:f9:43:f5:66:60:f0:e7:06:ba:af:03:05:36:
                    06:7b:60:72:de:90:cd:ea:01:e5:4f:87:5c:4c:07:
                    c7:9e:05:4e:a3:4c:54:53:a5:5e:a0:0e:b7:89:6f:
                    61:78:65:73:a6:7c:f5:f5:11:01:a6:c0:0b:1d:73:
                    ba:a2:4b:03:20:0f:3c:80:b7:20:98:d7:d5:96:71:
                    17:f3:8d:f2:24:bc:72:d6:ef:d4:39:b3:85:b3:dc:
                    e9:09:15:02:ad:5f:a4:28:2a:2f:43:7c:3d:2a:e0:
                    b7:a3:b0:91:41:d3:06:f8:f1:48:55:e8:ec:79:d1:
                    b6:8e:99:90:74:a4:51:37:e8:b0:ef:c3:b2:b0:73:
                    5b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:09:78:C1:68:39:BF:32:C8:74:4E:87:9B:7B:E4:BF:6C:23:B4:94
            X509v3 Authority Key Identifier:
                keyid:D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:5f:a9:37:d7:c9:30:a6:3f:5d:87:c2:96:3e:88:d3:24:df:
         42:41:15:ca:01:90:57:48:86:37:11:92:79:5c:6b:6e:10:3b:
         f9:30:7c:fd:f7:71:fe:6c:0c:f8:57:53:6c:ff:e0:8d:9e:48:
         0f:55:79:89:2e:4e:c7:2b:75:3b:ec:96:01:90:89:1c:a3:14:
         01:27:bf:cb:04:56:75:1e:00:4a:9a:53:5b:76:c5:e4:73:47:
         95:a9:21:14:c3:66:63:a6:4d:bb:2f:ad:f2:c3:c0:33:95:5b:
         ce:27:02:02:00:84:11:d2:40:dd:6b:45:76:45:c2:bb:ba:3a:
         73:97:e3:83:1b:28:20:e5:63:ac:62:7c:cd:b4:3b:4a:a7:3a:
         2d:64:78:42:26:96:5f:53:a1:0a:c8:d2:65:af:c0:cd:f1:97:
         b4:f3:2d:14:68:17:48:44:9b:5a:66:d0:c9:7e:5f:e0:4b:4d:
         b9:ac:5b:f8:7f:cf:96:d1:70:15:5c:be:6c:8b:7b:61:6b:e4:
         3f:38:ce:e4:d6:2f:15:26:45:d6:e7:8b:a0:00:19:28:da:3f:
         68:15:36:b4:9a:15:3a:b2:42:52:17:c8:45:2f:4e:c4:df:6a:
         26:26:18:e8:62:5c:8b:c2:49:44:c6:32:01:83:2c:db:da:38:
         aa:89:7c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:21:13 2026 by rpki-client