Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft
File:                     c4TcZntNSaWs1QpYtIkWoVrCYWs.mft (raw, json)
Hash identifier:          BTMr9YeOLDwgkGuwEejJc7YYPvvZdcLNNvNJlyC9MdA=
Subject key identifier:   F7:19:DC:7E:6F:AF:AD:75:CF:5C:D4:6A:5D:F8:F7:4C:E1:E9:68:A6
Authority key identifier: 73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B
Certificate issuer:       /CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B
Certificate serial:       022A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft
Manifest number:          0225
Signing time:             Wed 23 Sep 2026 02:39:15 +0000
Manifest this update:     Wed 23 Sep 2026 02:39:14 +0000
Manifest next update:     Wed 30 Sep 2026 02:39:14 +0000
Files and hashes:         1: c4TcZntNSaWs1QpYtIkWoVrCYWs.crl (hash: rTvWuDQyWqknjgviQbg3qDMFsyhgagsRm0TtPCON6gM=)
                          2: F1E9B236718E11EEAF67DB48C4F9AE02.roa (hash: CKnFh68MZ6vWZLs6HZZnzt3hxWfZ7SKFfyFAeNeD5aI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl
                          rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:39:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8D07, serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B
        Validity
            Not Before: Sep 23 02:39:14 2026 GMT
            Not After : Sep 30 02:39:14 2026 GMT
        Subject: CN=6ab33bd3-c100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b2:da:6c:f2:d4:61:6f:2f:a4:d7:bb:c3:3c:
                    ce:8d:ad:e4:71:7e:82:10:e2:d6:25:8c:35:db:da:
                    4d:c3:2b:bc:ba:06:3c:9f:fb:5d:30:ef:a4:bd:39:
                    15:aa:f1:33:4d:62:ed:83:b0:80:15:35:59:eb:c8:
                    0d:d8:a8:c2:f2:88:40:7a:87:92:50:e0:51:47:d9:
                    68:7c:af:6d:b1:eb:8d:4e:58:21:88:5d:87:f1:da:
                    0a:4a:37:31:7d:ff:bd:d7:b6:fb:bf:f8:28:14:7d:
                    7d:8d:a4:aa:6b:28:cc:58:3a:ee:3d:91:13:73:4c:
                    d7:31:55:a2:96:dc:42:0a:c5:1c:da:c4:06:a9:3d:
                    da:c3:7d:48:f9:7d:cf:4c:d0:0a:92:37:a7:1e:cf:
                    e3:7a:73:e7:59:41:85:6e:64:f8:d3:c3:7a:9c:fc:
                    b9:d2:ad:39:80:a6:0b:34:1a:b4:05:ea:95:65:76:
                    f7:68:f5:9a:88:07:1f:2c:88:ec:67:ac:9a:f6:80:
                    66:5d:35:eb:47:59:49:e9:fb:64:d2:4c:30:ab:31:
                    c9:f9:98:31:5b:5e:82:95:ea:f0:91:11:65:28:0d:
                    2c:11:e6:39:b7:0c:d4:21:01:f5:e3:53:73:86:81:
                    c3:19:70:dd:6d:3a:24:ed:1b:20:0e:a9:7a:7d:31:
                    d0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:19:DC:7E:6F:AF:AD:75:CF:5C:D4:6A:5D:F8:F7:4C:E1:E9:68:A6
            X509v3 Authority Key Identifier:
                keyid:73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:3a:92:e3:00:bd:58:cf:94:03:70:c4:26:6b:c2:5f:e8:43:
         ae:df:15:46:c1:08:af:8c:66:88:2e:ae:18:d4:78:98:ac:3c:
         e1:0a:a9:f3:fa:ea:b4:55:a0:91:d1:3d:f6:9c:cc:35:a4:f3:
         bd:20:0c:10:0e:e0:2c:dd:ca:b7:a7:1e:f5:51:2d:02:49:d2:
         65:b2:7c:ec:28:93:47:f5:99:e3:f5:2c:f1:d4:66:fc:22:3d:
         60:fb:3a:fe:66:dd:e2:8b:c4:ca:19:e7:62:d3:4e:19:f6:df:
         d3:54:38:83:b5:bb:4d:99:d0:3c:5a:49:17:3c:a5:8d:a9:3b:
         33:cc:43:c6:8a:44:be:ba:04:9f:3f:53:e3:c7:0c:d2:dd:e5:
         f8:c1:37:cc:7a:62:cf:a2:68:67:3f:44:11:34:dc:b2:31:b8:
         58:18:1b:a6:6f:48:0c:6e:69:60:d9:e2:ce:2b:ee:a6:75:47:
         8c:19:df:2a:d0:b3:4e:e7:e0:3d:dc:e3:3a:7b:28:2e:cc:17:
         67:81:80:30:12:b2:a5:77:90:bc:e3:14:4e:3f:44:29:f7:b4:
         02:8a:84:df:5b:7c:74:1a:2d:ae:9a:c6:66:6a:d1:1d:28:02:
         e8:a9:55:73:67:49:fa:a5:70:07:6d:7e:11:5a:92:05:5c:fa:
         0e:15:4e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:53:54 2026 by rpki-client