Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
File:                     cu8y2vToP5AZKWMgh047RFAI7Dk.mft (raw, json)
Hash identifier:          +VAB3n9bw5WiHC/0Z8kv8kdTMVv73rzWHuVlVjpIH6Y=
Subject key identifier:   BF:04:78:82:09:F1:0D:50:CA:47:6F:15:39:4B:86:72:1E:12:18:39
Authority key identifier: 72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
Certificate issuer:       /CN=A919ED93/serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
Certificate serial:       0241
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
Manifest number:          0232
Signing time:             Wed 23 Sep 2026 02:36:15 +0000
Manifest this update:     Wed 23 Sep 2026 02:36:14 +0000
Manifest next update:     Wed 30 Sep 2026 02:36:14 +0000
Files and hashes:         1: cu8y2vToP5AZKWMgh047RFAI7Dk.crl (hash: p1rGfF8iOHtxo0LxUGRnMfy5e/pKqoOwF6GBZ7jKND4=)
                          2: 94A6144A68C711EE8C53A031C4F9AE02.roa (hash: c2JKhfp9s44ucWPUaCMBJfqkty8QtrYxSxQneezFfq8=)
                          3: 9436AC3668C711EE8C53A031C4F9AE02.roa (hash: UKDPjI9WdhK3TxDp03my1LqNHeP49K9ROo6jRcr9k9A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl
                          rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919ED93, serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
        Validity
            Not Before: Sep 23 02:36:14 2026 GMT
            Not After : Sep 30 02:36:14 2026 GMT
        Subject: CN=6ab33b1f-5b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e4:2f:92:71:12:b6:2d:10:b9:71:32:ed:6b:
                    52:79:9c:9e:19:cf:46:fb:af:cc:3d:31:b7:8e:6e:
                    f7:99:45:d0:b4:e2:f1:2d:93:87:95:7f:22:78:92:
                    5f:76:3f:e9:3d:99:c1:f6:22:be:9e:7e:63:8b:16:
                    30:0e:78:60:be:bf:7f:b8:29:56:74:7b:c5:5a:eb:
                    33:7b:17:c7:4e:cc:fa:bb:47:bd:5f:7a:39:39:6a:
                    2e:8d:72:f6:62:51:0d:e7:10:57:94:86:f9:d5:f1:
                    6d:3d:64:90:3a:1f:c7:6c:99:0f:fe:19:ac:c0:8e:
                    3a:04:dd:89:bf:3e:b9:93:83:46:c2:c5:ee:c7:c0:
                    21:02:ef:0e:5d:bf:a3:ff:3c:b9:1e:52:bf:3d:b7:
                    dd:c2:64:db:ac:af:18:75:5b:e9:d7:5a:7d:71:f6:
                    46:2f:32:10:8c:5b:55:f0:52:3d:97:6e:31:7f:73:
                    30:97:f2:ef:29:2b:88:7d:90:ef:2d:4e:3c:62:50:
                    03:6a:bd:e7:5a:2a:8a:a3:49:95:06:3a:27:bb:35:
                    3c:e7:72:8a:e1:58:12:ad:67:e0:f3:fc:4a:0c:25:
                    19:e4:dd:18:31:b8:1e:d7:0f:ae:6e:db:10:ef:43:
                    8c:0b:1d:36:7a:0d:ed:1c:26:fb:5a:b8:55:51:90:
                    f9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:04:78:82:09:F1:0D:50:CA:47:6F:15:39:4B:86:72:1E:12:18:39
            X509v3 Authority Key Identifier:
                keyid:72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ff:9d:7f:86:c5:15:19:4c:25:20:31:df:f4:16:98:6d:29:
         fb:d9:79:69:bc:87:05:89:1d:4b:1c:a7:f3:d3:2f:3b:04:33:
         ed:20:a5:64:1f:e8:2a:de:db:38:f4:8c:10:3f:dc:51:82:5f:
         70:f9:ab:c2:9f:f0:a9:c0:fe:6e:f1:5a:ad:ce:0c:1c:5a:ab:
         c2:31:d6:78:41:87:34:ea:7e:6d:bd:87:6c:30:47:b8:bb:df:
         7a:30:a0:80:c0:46:7d:4b:2c:eb:6d:63:f0:9b:b6:65:8f:f9:
         2f:27:2b:be:9d:c3:b6:c3:6b:7f:f5:19:01:b1:22:8f:97:f1:
         43:a8:6c:56:45:46:ff:8c:65:e9:42:47:85:d9:5e:c5:b4:85:
         98:2b:6b:ea:19:71:18:e5:24:de:93:bf:cd:e2:cc:3d:a2:c7:
         54:ce:d4:b5:63:45:e6:30:d2:ad:e4:1b:91:25:1f:18:33:a1:
         95:e6:74:20:e0:de:2c:e2:99:4a:db:e7:cc:7d:1a:72:16:72:
         f0:1f:90:74:1f:d3:9f:4a:39:84:b2:4e:f3:e2:1c:dd:db:bd:
         ac:24:96:34:fb:ad:d6:14:35:15:11:ad:e9:df:3d:9b:a0:0e:
         38:68:0b:cf:b8:16:33:dc:fb:38:1f:6a:1e:7e:7d:3c:ef:0f:
         a5:58:32:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:59:46 2026 by rpki-client