Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121335/8B68D5F618BB11F1857DA4650B3D8C67/pllB8WMFBh9DpwC_-igdKHphQ78.mft
File:                     pllB8WMFBh9DpwC_-igdKHphQ78.mft (raw, json)
Hash identifier:          l4mZFxS+KIIjiDpQ/F4pBbN5OnIyMEfgkhYpzoyj+wQ=
Subject key identifier:   33:29:9F:7F:85:7E:5C:21:2B:26:92:C1:73:46:FF:9B:26:65:C0:BA
Authority key identifier: A6:59:41:F1:63:05:06:1F:43:A7:00:BF:FA:28:1D:28:7A:61:43:BF
Certificate issuer:       /CN=A9121335/serialNumber=A65941F16305061F43A700BFFA281D287A6143BF
Certificate serial:       74
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pllB8WMFBh9DpwC_-igdKHphQ78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121335/8B68D5F618BB11F1857DA4650B3D8C67/pllB8WMFBh9DpwC_-igdKHphQ78.mft
Manifest number:          72
Signing time:             Fri 09 Oct 2026 08:38:58 +0000
Manifest this update:     Fri 09 Oct 2026 08:38:57 +0000
Manifest next update:     Fri 16 Oct 2026 08:38:57 +0000
Files and hashes:         1: pllB8WMFBh9DpwC_-igdKHphQ78.crl (hash: K4LpEgO//opCud1U4ymNkamsYddjxYW5CsXWmzIPNQ4=)
                          2: 9B7F0E341D2E11F1B3B77E5B163D8C67.roa (hash: gctkiimCXa+91U4yt9IdyV7V39eHbTMIxNsKTio8Aoo=)
                          3: 75C87EDA3E5511F1A888E862C8833773.roa (hash: QN3IgCqI66NW0YZz1YXqpVBQW/q54ObgBEFvwwk1D5s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121335/8B68D5F618BB11F1857DA4650B3D8C67/pllB8WMFBh9DpwC_-igdKHphQ78.crl
                          rsync://rpki.apnic.net/member_repository/A9121335/8B68D5F618BB11F1857DA4650B3D8C67/pllB8WMFBh9DpwC_-igdKHphQ78.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pllB8WMFBh9DpwC_-igdKHphQ78.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 08:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121335, serialNumber=A65941F16305061F43A700BFFA281D287A6143BF
        Validity
            Not Before: Oct  9 08:38:57 2026 GMT
            Not After : Oct 16 08:38:57 2026 GMT
        Subject: CN=6ac8a822-5322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:91:f5:84:56:95:de:c1:ea:e3:f4:35:73:ad:
                    40:06:05:63:fd:31:29:27:db:c1:67:2e:f1:e5:ee:
                    dd:9c:ad:6d:7d:1d:65:8b:3c:2a:6c:f2:be:ee:4b:
                    10:aa:a5:dd:f1:e8:0b:ef:d7:08:0b:65:20:c7:33:
                    31:9f:67:48:31:87:05:6f:1f:30:04:0b:ab:a1:46:
                    9b:5f:24:17:5b:7a:44:04:b4:33:ce:08:03:1b:49:
                    10:f1:69:8b:e5:65:13:6f:f3:ab:d6:f7:f5:0d:53:
                    13:a1:ed:d0:a2:78:62:c0:83:23:22:69:c7:20:00:
                    63:54:d5:e2:ae:2e:11:a6:d7:61:d3:a6:7f:1f:5b:
                    40:ee:45:46:4b:92:3b:0f:e6:52:84:17:55:81:1a:
                    a8:58:bf:cb:4e:46:93:95:b7:0b:96:70:bd:4c:2f:
                    35:85:85:b6:13:8d:f3:71:44:52:f2:91:5a:06:ca:
                    3a:ac:6a:9a:1d:70:4d:12:83:a2:71:ba:b2:6a:20:
                    23:4b:e8:6e:37:f5:46:8b:aa:35:08:41:14:16:99:
                    fc:31:60:03:fb:75:cc:de:92:11:6b:81:23:18:5a:
                    ff:6a:a5:22:77:ed:02:ca:0f:e5:e5:53:29:e2:d6:
                    b5:f1:a2:5e:4c:aa:ec:70:58:95:04:4c:a3:cd:37:
                    96:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:29:9F:7F:85:7E:5C:21:2B:26:92:C1:73:46:FF:9B:26:65:C0:BA
            X509v3 Authority Key Identifier:
                keyid:A6:59:41:F1:63:05:06:1F:43:A7:00:BF:FA:28:1D:28:7A:61:43:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121335/8B68D5F618BB11F1857DA4650B3D8C67/pllB8WMFBh9DpwC_-igdKHphQ78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pllB8WMFBh9DpwC_-igdKHphQ78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121335/8B68D5F618BB11F1857DA4650B3D8C67/pllB8WMFBh9DpwC_-igdKHphQ78.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d5:2e:6b:8b:0b:81:4a:d6:c1:55:b5:a5:95:06:d2:ae:7b:
         a8:f5:52:17:47:7f:30:53:3f:ce:ed:6b:6f:f3:d1:b3:61:5a:
         b9:ab:54:e8:d8:9c:a9:06:07:12:83:d1:fb:ce:0c:02:d5:59:
         72:65:fc:ee:f1:fb:67:42:12:f7:0c:4a:0d:b3:2d:f2:cc:9f:
         49:43:26:b9:dd:c7:79:db:ad:fe:d5:19:41:7f:05:22:8d:49:
         1d:d6:77:ea:47:03:80:9d:30:d9:2d:47:fe:2c:31:8e:40:2e:
         21:90:d1:76:99:18:ee:42:77:80:b0:62:8d:88:cf:83:a7:03:
         46:2a:eb:3f:15:0d:5e:9e:2c:4b:40:27:68:f9:55:fc:56:40:
         58:0e:d0:c8:e6:a1:a2:1f:d6:74:03:52:00:75:75:75:4b:9c:
         4d:db:f9:65:a1:34:dc:6a:27:ad:bb:9a:a9:bf:b5:ab:fc:13:
         ec:68:dd:50:a8:a0:a2:34:89:00:42:cc:65:cf:ef:55:0a:24:
         78:7b:fa:0a:72:6f:17:f4:32:08:84:54:5b:9e:b2:f1:74:0c:
         60:fd:5f:36:c2:95:d3:e4:e7:f0:87:f8:93:7b:a9:52:fb:81:
         af:a2:cc:a5:83:8e:b7:ed:db:31:78:bc:75:3a:76:23:0e:e7:
         08:43:12:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:40:02 2026 by rpki-client