Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft
File:                     rN673IrqemETaTGDOGOx454Bfic.mft (raw, json)
Hash identifier:          yM5iFtmD0CQRge7Jqi8IsSTd5gfwzx/Hm80v3PxIOqA=
Subject key identifier:   F5:42:01:55:A0:E3:75:55:30:19:5B:70:AC:68:A8:7C:DC:4C:50:5E
Authority key identifier: AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27
Certificate issuer:       /CN=A911FD55/serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27
Certificate serial:       0C05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft
Manifest number:          0BF5
Signing time:             Sun 20 Sep 2026 18:54:54 +0000
Manifest this update:     Sun 20 Sep 2026 18:54:53 +0000
Manifest next update:     Sun 27 Sep 2026 18:54:53 +0000
Files and hashes:         1: rN673IrqemETaTGDOGOx454Bfic.crl (hash: d4ZBKARRk7nCx3Y1SL0T9jzoOcUBuSwCrnnD2CQ8/kA=)
                          2: C8A09F34F11C11EA83A6D247C4F9AE02.roa (hash: Tt+/ZFDCBvQEpgRT0vX9Jm9igfEF7EehekjpgCR5Fbg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl
                          rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 18:54:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3077 (0xc05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FD55, serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27
        Validity
            Not Before: Sep 20 18:54:53 2026 GMT
            Not After : Sep 27 18:54:53 2026 GMT
        Subject: CN=6ab02bfe-32bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:34:1a:47:cc:64:06:ee:eb:02:5f:78:c9:13:
                    d0:f8:93:57:f0:56:e9:18:67:3d:0c:0b:47:df:b8:
                    d1:18:54:14:72:1f:20:dc:03:ed:0c:7a:b1:9c:9f:
                    18:2d:a8:ba:42:77:f4:fb:22:38:67:0b:b4:b5:b3:
                    2d:07:e6:7d:1f:d2:79:a0:09:7f:ba:ca:28:4c:ae:
                    91:ef:a2:69:7e:41:b5:e7:15:e7:35:dd:ac:80:de:
                    d4:ff:c0:0f:ee:36:f6:76:3f:64:38:38:bb:ce:9c:
                    6a:c5:a7:bb:a1:a0:44:bc:f8:cb:9c:e4:00:a2:5b:
                    4e:63:bf:96:0b:60:5f:94:a1:f6:dd:88:5e:f8:1f:
                    08:7c:bb:47:47:c7:77:a7:84:3f:e1:a8:82:f0:e3:
                    b7:8b:58:eb:d5:5c:d5:46:50:92:58:a1:b7:19:72:
                    6b:80:e8:5d:7a:bf:1b:97:9d:b6:ec:78:c8:7e:05:
                    f5:8a:2d:55:d5:cb:41:ab:b8:8b:b7:d0:5c:e4:0a:
                    c3:d5:42:d0:3f:f9:c2:d6:0f:a8:25:d0:93:c9:4e:
                    c8:cf:8e:4a:63:fc:34:20:9e:c5:20:34:19:ca:30:
                    3e:21:0a:c1:2d:6a:61:12:52:1a:ab:00:cd:9a:3d:
                    b3:14:dc:b9:2b:7b:3a:64:fa:cc:93:e1:4d:fe:c1:
                    df:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:42:01:55:A0:E3:75:55:30:19:5B:70:AC:68:A8:7C:DC:4C:50:5E
            X509v3 Authority Key Identifier:
                keyid:AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:19:a8:37:89:eb:4a:53:cf:7a:6f:1e:31:7e:b2:ca:2a:b2:
         99:8e:94:ed:cd:a8:4a:8e:25:24:f6:f4:1d:25:71:5d:6c:a6:
         c6:1d:f8:0a:e2:ec:1f:9e:80:37:3e:c9:d8:c1:d3:81:cf:cd:
         ed:07:ff:b8:74:ac:e0:52:8c:24:08:86:1e:44:1f:a8:3e:81:
         68:9e:b1:11:f6:7e:94:c0:79:de:98:e8:d2:62:f8:23:ce:a6:
         22:09:f1:41:58:20:b2:0b:11:85:37:54:d8:a9:f6:61:16:5a:
         f3:0f:e5:fd:cf:91:44:4c:ab:83:89:93:7b:0d:a5:7f:f6:e6:
         3a:00:20:88:90:b0:48:84:32:36:01:7e:a0:2b:d4:13:16:c9:
         41:4e:9e:42:c7:8b:21:2d:7c:9a:f7:3d:b1:f5:6c:64:53:f4:
         24:e0:9a:d5:0e:9c:7d:91:3f:e6:a8:e4:c7:65:c8:df:60:5f:
         90:3f:ca:97:66:35:07:91:2e:d0:d9:04:89:3a:25:9d:4f:34:
         f7:16:47:2e:e1:47:ff:63:0e:0d:36:92:28:99:fc:7b:1b:41:
         89:f5:1f:ca:ea:de:1c:c4:b6:2a:11:25:ac:29:de:6d:39:6e:
         4c:de:d3:30:7f:ce:2b:29:1b:3b:52:79:16:b6:72:44:de:b2:
         15:76:19:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:55:03 2026 by rpki-client