Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
File:                     SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft (raw, json)
Hash identifier:          yga9tRg1B4Dy+hE+eAKfbbECPO2WkHBAdO78hnVxJp4=
Subject key identifier:   2D:D2:58:6C:CC:A5:64:CA:33:5B:86:72:69:6D:31:1D:DE:1F:44:CA
Authority key identifier: 49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F
Certificate issuer:       /CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
Certificate serial:       017B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
Manifest number:          0175
Signing time:             Fri 25 Sep 2026 04:49:55 +0000
Manifest this update:     Fri 25 Sep 2026 04:49:55 +0000
Manifest next update:     Fri 02 Oct 2026 04:49:55 +0000
Files and hashes:         1: SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl (hash: sz+DtM2V2qN/BjmBawt/IkTBFTgT+kuDiz6zisaE26Y=)
                          2: 35525B92845611EFB053C341C4F9AE02.roa (hash: ZevCcNNQ+Cl/hbcakseWpBDq3A4TOtczE3OSaShrKcE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl
                          rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 04:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC4FF, serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
        Validity
            Not Before: Sep 25 04:49:55 2026 GMT
            Not After : Oct  2 04:49:55 2026 GMT
        Subject: CN=6ab5fd73-63c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3d:20:2e:5d:44:fd:de:af:24:9e:76:ca:5a:
                    1c:fb:de:65:d5:62:7f:66:57:59:9d:e0:ca:25:d9:
                    5b:8e:9e:65:0f:73:f9:62:1c:19:18:c5:88:e0:b8:
                    bb:83:f2:27:6c:5a:0f:99:6b:96:f3:00:34:67:18:
                    31:1d:fd:19:fc:fe:f0:b1:22:d2:9d:fa:2f:ea:dd:
                    fa:e1:ac:58:a7:f0:f8:4d:50:9f:96:3f:bc:83:3e:
                    24:ca:2e:89:dd:9f:3a:2b:3c:b5:d0:79:6a:2d:00:
                    62:3e:32:ef:37:76:d0:46:4d:07:e2:fc:0d:a1:c7:
                    2d:8d:4c:06:8d:4d:b6:6e:56:81:13:23:7f:51:5e:
                    94:6e:c9:3f:40:1b:b2:e7:f5:77:28:16:d8:b6:02:
                    a2:3b:d2:c7:53:5b:89:ae:4e:44:6b:86:16:76:48:
                    a1:51:d9:88:a0:8f:40:a4:2b:2b:4b:04:f4:56:02:
                    6e:42:e1:9d:97:90:59:1d:7d:a0:15:17:9d:a2:93:
                    3d:cd:4b:af:18:93:2f:22:72:d8:d8:ae:a5:5f:4a:
                    4c:f7:cb:15:30:a7:45:75:b5:5a:f6:b6:2c:61:0e:
                    b2:ff:e4:25:f7:b8:90:2c:1d:62:e6:a4:b3:ae:80:
                    ab:18:7b:4f:cb:f1:08:09:df:fb:c6:b5:44:2f:6a:
                    7d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D2:58:6C:CC:A5:64:CA:33:5B:86:72:69:6D:31:1D:DE:1F:44:CA
            X509v3 Authority Key Identifier:
                keyid:49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:86:d9:df:5f:6c:4c:31:1b:10:c6:c6:f8:e1:27:9b:a7:5b:
         a8:9f:c5:89:57:99:7e:30:ba:b5:67:77:d5:5b:ae:8d:67:95:
         78:c6:1b:7d:6f:dc:fc:4a:5f:ef:b2:d2:8f:cf:c9:cc:b6:f2:
         e2:44:db:1f:16:82:6d:78:45:ce:79:89:d5:c2:5a:dc:bd:5e:
         17:11:28:ac:62:ba:ad:c3:9e:22:29:ff:ae:ec:43:0e:61:ca:
         06:72:ee:5a:a7:18:df:3e:bb:ca:47:e0:55:da:73:60:c1:be:
         ca:0f:d5:d1:8e:c9:35:a6:8c:2a:16:be:4a:ad:c1:b4:70:18:
         2d:40:92:82:1b:65:6b:bf:86:47:28:d8:79:67:1a:82:53:8f:
         da:60:20:a2:ee:1f:20:bb:0e:82:a1:99:0e:51:48:8f:8a:85:
         2c:d0:44:20:5a:2c:77:01:c6:dd:1c:09:95:c3:e8:1c:55:1f:
         df:d2:51:7c:ed:17:93:9e:fd:4a:51:08:fb:85:25:8f:92:2e:
         c7:97:02:f5:eb:0f:84:35:fb:ab:62:f5:fa:ee:a7:c5:bd:08:
         ea:90:0f:4c:5b:f4:33:52:3a:dc:77:a1:55:84:c2:82:42:2b:
         65:1f:0a:9c:d0:86:f0:e5:04:a6:a5:0c:1c:a8:67:50:d6:bf:
         11:4c:50:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:50:22 2026 by rpki-client