Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft
File:                     rcLQEHTd7bWHQSLy4bisO07c23s.mft (raw, json)
Hash identifier:          iOhtn6eUJScg4coYnxqSFrPQhX85OsjfRhaRvLcak10=
Subject key identifier:   F0:DE:AD:07:63:00:52:52:3C:8F:A4:ED:F8:AD:E1:63:D5:2A:0B:66
Authority key identifier: AD:C2:D0:10:74:DD:ED:B5:87:41:22:F2:E1:B8:AC:3B:4E:DC:DB:7B
Certificate issuer:       /CN=A9114DAE/serialNumber=ADC2D01074DDEDB5874122F2E1B8AC3B4EDCDB7B
Certificate serial:       0897
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rcLQEHTd7bWHQSLy4bisO07c23s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft
Manifest number:          0897
Signing time:             Sun 20 Sep 2026 20:33:26 +0000
Manifest this update:     Sun 20 Sep 2026 20:33:25 +0000
Manifest next update:     Sun 27 Sep 2026 20:33:25 +0000
Files and hashes:         1: rcLQEHTd7bWHQSLy4bisO07c23s.crl (hash: ERNNFInpg4nYv9tSBbZNXF1Sg+BUWvd/TVrlBc9aTa4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.crl
                          rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rcLQEHTd7bWHQSLy4bisO07c23s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 20:33:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2199 (0x897)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114DAE, serialNumber=ADC2D01074DDEDB5874122F2E1B8AC3B4EDCDB7B
        Validity
            Not Before: Sep 20 20:33:25 2026 GMT
            Not After : Sep 27 20:33:25 2026 GMT
        Subject: CN=6ab04316-3231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5c:1e:50:ce:cd:3d:95:c0:56:6c:9a:e2:f6:
                    31:fb:e7:81:42:07:9c:64:ec:c6:c1:e7:2e:b8:6f:
                    61:36:f2:5d:a7:1c:9d:ed:cd:05:0a:48:aa:71:ae:
                    de:43:67:ea:d2:b4:6b:26:43:29:ab:ce:fd:08:57:
                    38:8f:06:91:20:ae:76:05:da:2a:a7:d3:16:a3:b1:
                    21:b9:4a:2d:a8:d4:26:17:25:3f:2a:03:c6:67:29:
                    c1:81:c7:91:55:7c:11:e4:f4:24:d8:dd:f4:70:70:
                    46:9b:5a:1c:fd:a7:f0:cc:b3:9c:1b:51:01:6d:5a:
                    64:bc:fa:01:e7:32:00:a4:7a:81:7e:76:11:03:ed:
                    a9:e8:b4:ac:4a:e2:79:cc:fa:f7:18:9d:d0:98:6c:
                    f5:42:07:51:e5:ec:48:c0:83:0d:31:99:40:ff:62:
                    73:b8:f7:ea:9c:41:af:21:d2:af:8c:88:67:62:4f:
                    dc:82:2d:00:6d:ec:9f:b1:46:12:e5:18:4b:bc:42:
                    69:e5:88:f0:7a:5c:47:4c:d0:5c:aa:5d:6c:5e:e2:
                    3c:20:ad:4a:ad:ed:2e:05:d1:62:9d:11:82:d7:15:
                    ea:d3:70:95:71:fc:d4:dc:a4:0c:fe:22:40:80:f9:
                    13:b6:cd:2b:a6:91:6a:eb:e2:e1:67:48:02:c6:cd:
                    d4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DE:AD:07:63:00:52:52:3C:8F:A4:ED:F8:AD:E1:63:D5:2A:0B:66
            X509v3 Authority Key Identifier:
                keyid:AD:C2:D0:10:74:DD:ED:B5:87:41:22:F2:E1:B8:AC:3B:4E:DC:DB:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rcLQEHTd7bWHQSLy4bisO07c23s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:c5:76:43:d5:05:62:2d:15:2f:44:df:19:08:8a:37:3f:63:
         65:9c:a7:f1:5e:34:71:84:a5:91:f7:91:a1:a0:87:a7:36:40:
         bb:fe:d8:62:48:0a:90:1b:e5:6b:e4:83:d7:56:8d:78:a2:bb:
         3b:47:09:45:cf:90:6c:d6:2a:38:ee:29:0b:51:ab:2e:94:be:
         2d:aa:ea:a7:06:c3:51:77:eb:45:8e:2d:64:fe:03:29:77:c8:
         16:42:19:45:c1:c0:e6:16:4c:fe:80:d4:dd:7c:0b:61:63:44:
         50:90:52:b2:ff:2a:88:51:91:43:72:57:7f:96:ae:0a:46:d0:
         78:aa:ce:a2:be:88:63:81:2b:64:e7:65:fb:0b:29:e7:40:c8:
         a8:5f:4c:7a:63:73:3a:4a:b5:7f:ed:d1:2b:a9:39:4c:a0:bf:
         a9:15:90:67:da:17:f7:d6:d8:42:ab:e4:8d:23:1c:69:b8:79:
         6c:6c:80:1c:02:f7:74:3d:ea:c3:fd:94:1d:69:9d:00:9a:f1:
         b7:c6:bb:c7:ec:5a:78:77:fe:31:46:a7:4e:fe:d8:4d:55:78:
         b2:2b:e4:71:b2:36:f1:39:f2:0e:8e:02:50:af:57:47:3d:24:
         52:c9:10:65:b5:e8:b5:62:81:50:e2:32:ad:29:bd:57:87:17:
         24:51:7f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:55:14 2026 by rpki-client