Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
File:                     pOlXbOhgyP9flyr1k7QFTngj5kI.mft (raw, json)
Hash identifier:          1q+NizpnTC/S49izXWX80nrWL8lQDo0oSax9/DlTHSs=
Subject key identifier:   44:EE:05:1F:E1:EC:3D:B5:5E:87:2A:C1:D6:F7:42:3C:25:D4:22:52
Authority key identifier: A4:E9:57:6C:E8:60:C8:FF:5F:97:2A:F5:93:B4:05:4E:78:23:E6:42
Certificate issuer:       /CN=A9117E4D/serialNumber=A4E9576CE860C8FF5F972AF593B4054E7823E642
Certificate serial:       2D43
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
Manifest number:          2D40
Signing time:             Wed 14 Oct 2026 14:27:14 +0000
Manifest this update:     Wed 14 Oct 2026 14:27:14 +0000
Manifest next update:     Wed 21 Oct 2026 14:27:14 +0000
Files and hashes:         1: pOlXbOhgyP9flyr1k7QFTngj5kI.crl (hash: PhzF4p2fCjvOnN8DfH8YtDXU8/SG4+FWLw/KOlrDSRA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.crl
                          rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 14:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11587 (0x2d43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117E4D, serialNumber=A4E9576CE860C8FF5F972AF593B4054E7823E642
        Validity
            Not Before: Oct 14 14:27:14 2026 GMT
            Not After : Oct 21 14:27:14 2026 GMT
        Subject: CN=6acf9142-6638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:09:4a:14:36:e5:ea:63:29:77:28:14:17:9e:
                    c0:b1:af:c0:f7:ad:5d:bf:d6:7c:73:b5:3c:89:40:
                    d2:59:28:06:45:7c:4c:17:56:1f:3e:50:50:fc:9f:
                    8d:00:ea:f0:11:ee:31:e8:47:f2:78:60:e6:7e:34:
                    a8:fa:a7:80:93:e9:05:80:71:24:e2:9c:a0:f3:b3:
                    f2:39:d9:a3:74:71:ad:b3:ec:00:82:fa:99:f2:ef:
                    5c:71:2e:69:b6:cb:a0:26:e9:19:bc:e8:32:89:ce:
                    68:2c:ae:15:06:ff:13:a2:5c:ba:42:56:ae:35:b7:
                    85:25:f0:0f:b0:6b:0f:d8:ac:27:34:0d:5a:c5:0a:
                    05:6f:d2:f0:11:17:b6:0a:a7:83:64:64:47:86:06:
                    9a:ba:37:d2:1a:df:33:65:bc:be:ec:03:e5:53:1a:
                    82:d2:0b:1e:48:d6:6d:61:5b:f4:5c:ee:b6:e5:18:
                    b9:60:bf:d4:e2:81:cb:d8:af:e5:40:de:f7:3d:74:
                    8e:0b:22:99:ff:c5:9d:47:46:90:c7:3e:0e:f5:70:
                    1f:0e:31:ff:3a:d2:4e:b9:be:b1:6d:9c:86:f5:ae:
                    24:ed:0b:73:35:92:41:95:3d:3f:01:94:2d:e6:e3:
                    a1:4c:9e:81:ea:9f:fc:f6:51:8b:e5:d2:34:8d:4e:
                    ac:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EE:05:1F:E1:EC:3D:B5:5E:87:2A:C1:D6:F7:42:3C:25:D4:22:52
            X509v3 Authority Key Identifier:
                keyid:A4:E9:57:6C:E8:60:C8:FF:5F:97:2A:F5:93:B4:05:4E:78:23:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:44:e3:a2:3d:40:fa:ec:76:16:70:2f:bd:e6:85:75:82:dd:
         54:d5:c3:0e:17:11:97:04:95:7b:2b:79:48:3c:87:79:06:84:
         87:d8:f5:13:2b:2c:c4:1a:a9:4c:f1:bd:fb:19:79:15:ce:77:
         fe:f9:08:8d:23:3f:fc:e1:bc:f5:cb:76:cd:a9:7c:09:94:00:
         c2:af:aa:00:ce:f7:4a:4a:45:60:8c:f2:9a:ce:05:d3:1c:c0:
         61:99:21:ea:9a:88:43:d3:f1:2d:05:70:18:48:68:a3:03:55:
         00:e9:c5:02:a0:22:31:a9:3b:72:20:af:ec:82:16:63:f9:34:
         02:31:dc:2b:7c:42:17:b1:13:f3:e1:70:fa:04:c4:cf:de:87:
         b7:cc:8c:96:5a:ee:34:42:4d:16:ea:aa:90:c8:3a:9d:34:8d:
         27:8f:14:94:61:4b:9e:ff:a7:5e:06:0d:0d:0b:85:c0:0a:2c:
         05:9b:69:4d:01:db:44:fe:e1:9e:7d:84:7d:7d:32:f4:67:64:
         bf:02:de:0f:23:1c:00:0c:65:0d:2a:96:fc:27:dd:75:73:32:
         5a:f3:b9:61:8a:3a:19:24:91:ef:7e:50:32:36:a7:58:cb:fa:
         b2:97:db:9b:d4:a2:e4:b4:4f:cf:59:56:58:05:bb:74:74:9e:
         fe:01:12:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 19:17:00 2026 by rpki-client