Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
File:                     d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft (raw, json)
Hash identifier:          qkOohOU4VsZHTpm+RW01UbbZDiQaorpWQSZc3SWa/Ew=
Subject key identifier:   2B:20:96:D1:3C:E0:EA:F0:5A:4B:CD:31:A6:D6:8E:D0:F0:50:68:4F
Authority key identifier: 77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52
Certificate issuer:       /CN=A9112320/serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52
Certificate serial:       0213
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
Manifest number:          0207
Signing time:             Tue 22 Sep 2026 22:29:32 +0000
Manifest this update:     Tue 22 Sep 2026 22:29:31 +0000
Manifest next update:     Tue 29 Sep 2026 22:29:31 +0000
Files and hashes:         1: d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl (hash: FdQoap2MnnWg7u9/A+jn4eQ+et4eGDVO6JSW339dJzA=)
                          2: 7EE26732EB2411EEBDA7715FC4F9AE02.roa (hash: CK9QQVOiiB542PQgUfZIdXYNAnS5iyZdXbxdEf+gFCI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl
                          rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112320, serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52
        Validity
            Not Before: Sep 22 22:29:31 2026 GMT
            Not After : Sep 29 22:29:31 2026 GMT
        Subject: CN=6ab3014c-f511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b1:99:57:ce:ed:a4:e6:e0:0b:e3:b4:aa:ff:
                    c8:bd:87:0b:a4:ae:6c:27:f1:1a:9f:4d:73:66:78:
                    ad:b1:21:6e:8c:12:bf:14:00:a8:8a:de:5b:27:3c:
                    25:80:3e:05:c2:50:42:38:c9:d0:5b:51:b6:d0:06:
                    90:7a:a5:bd:21:36:58:dd:f0:71:9a:b4:14:fb:63:
                    05:06:be:b9:d4:13:40:08:6a:96:38:7c:bc:59:cd:
                    c8:7d:4a:36:12:8e:07:0b:d3:4f:82:a8:f0:58:a0:
                    f8:32:74:a4:85:68:cf:4a:eb:85:20:47:93:16:64:
                    ba:3f:2d:2d:9f:10:5e:df:fd:b2:2a:d9:5b:37:8b:
                    65:f4:53:ee:1c:bc:3a:98:8c:30:1f:f1:ea:55:5a:
                    c5:c3:58:46:77:c5:19:74:b5:22:02:15:52:7c:9f:
                    2a:a6:d7:75:ec:46:4b:b2:99:36:05:58:40:f0:1f:
                    8a:d7:3c:28:07:82:53:0b:80:96:28:36:58:19:a3:
                    d6:ed:db:64:70:2c:cb:ea:ec:db:a2:11:b1:1b:53:
                    87:ac:62:ed:72:4e:63:a6:3e:11:1a:ef:32:9e:50:
                    66:0b:c9:9a:ca:8f:4b:b6:5d:8a:9f:69:bf:d8:b7:
                    37:ad:91:e9:13:20:bd:9b:c6:b2:47:1c:5b:ab:88:
                    b2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:20:96:D1:3C:E0:EA:F0:5A:4B:CD:31:A6:D6:8E:D0:F0:50:68:4F
            X509v3 Authority Key Identifier:
                keyid:77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e0:4f:29:46:c6:0e:52:75:eb:36:ab:68:5f:80:ee:77:47:
         8e:59:39:f3:9d:7e:52:f9:7d:e9:fd:6b:ae:1c:0e:b8:41:1a:
         33:bd:8e:e6:e0:fd:c3:da:82:37:93:62:02:3f:c7:22:8c:58:
         0f:ad:e7:3d:e5:3c:e5:77:2e:c3:a9:c6:71:8f:4f:96:97:1b:
         dc:ba:d5:1a:95:88:90:92:d9:1f:14:eb:8f:df:80:7e:b9:27:
         d1:40:b8:92:ee:a0:a1:ea:cb:58:a8:34:83:00:fd:81:db:4d:
         66:8f:04:ef:39:d2:b2:c2:11:83:61:eb:ff:b2:86:0e:d5:ff:
         b0:a8:ac:54:cf:be:ba:66:aa:03:fb:60:50:33:37:ca:4a:20:
         b7:b7:6b:e6:c6:32:03:b6:bf:f3:b6:37:56:9c:45:19:5c:bf:
         79:43:79:1b:23:9e:ae:df:5b:42:b9:09:1d:a0:8a:6a:56:36:
         10:3f:85:14:54:47:04:8c:52:f9:cc:6c:2c:37:15:84:69:49:
         f4:a4:79:34:cc:65:55:1f:b8:7b:11:91:64:36:93:87:a3:d0:
         33:2a:31:39:7a:20:11:99:53:09:0a:5f:13:e4:8f:8f:18:61:
         f1:80:8d:00:81:f9:e3:e2:0a:20:bf:7c:a6:84:bb:37:53:af:
         a7:69:63:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:46:13 2026 by rpki-client