Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/c-CQ73mbZ1mwPSJR3ES3rANTpr0.mft
File:                     c-CQ73mbZ1mwPSJR3ES3rANTpr0.mft (raw, json)
Hash identifier:          ODiRcNOl59pFaQYaV7UdiNKSYZC0uzWQLT7gG4WRdW8=
Subject key identifier:   12:67:C1:E7:95:18:86:4F:55:12:DA:B8:78:1E:D3:B7:2E:25:C5:CB
Authority key identifier: 73:E0:90:EF:79:9B:67:59:B0:3D:22:51:DC:44:B7:AC:03:53:A6:BD
Certificate issuer:       /CN=A9122796/serialNumber=73E090EF799B6759B03D2251DC44B7AC0353A6BD
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c-CQ73mbZ1mwPSJR3ES3rANTpr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/c-CQ73mbZ1mwPSJR3ES3rANTpr0.mft
Manifest number:          13
Signing time:             Mon 21 Sep 2026 09:04:02 +0000
Manifest this update:     Mon 21 Sep 2026 09:04:02 +0000
Manifest next update:     Mon 28 Sep 2026 09:04:02 +0000
Files and hashes:         1: c-CQ73mbZ1mwPSJR3ES3rANTpr0.crl (hash: rsNFYpx4cPbBuZPvIfF/Y5JQNDRKOr45MwJySvJbHsg=)
                          2: 2AE7F0209E0A11F1A6A4064D4C11F970.roa (hash: Q55ns3qgHzfdd9tA6C9B2IGZDy2kja6eWDaQp3SdxZ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/c-CQ73mbZ1mwPSJR3ES3rANTpr0.crl
                          rsync://rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/c-CQ73mbZ1mwPSJR3ES3rANTpr0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c-CQ73mbZ1mwPSJR3ES3rANTpr0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 09:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122796, serialNumber=73E090EF799B6759B03D2251DC44B7AC0353A6BD
        Validity
            Not Before: Sep 21 09:04:02 2026 GMT
            Not After : Sep 28 09:04:02 2026 GMT
        Subject: CN=6ab0f302-559f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0e:a3:64:9e:21:68:a9:43:db:bd:37:5f:ab:
                    c7:20:c3:34:33:77:f6:13:fc:b4:3a:30:e5:ad:b1:
                    ca:fc:e4:65:5c:54:8d:78:03:c4:15:85:0e:22:2a:
                    79:0e:17:f7:e7:0a:10:df:77:39:1e:e9:5e:f5:cf:
                    f2:c5:19:81:c0:03:7d:ce:0e:9c:0b:f2:cf:5a:2c:
                    36:10:fb:a3:ca:16:cb:76:fe:6d:43:c8:c0:9f:f4:
                    be:5e:7d:f1:ee:63:6d:c7:ad:91:7f:93:96:df:f9:
                    a3:0a:d7:1f:76:c0:0f:83:f3:6b:53:4a:6d:31:59:
                    24:9c:9e:90:d5:40:b8:2b:cf:e3:97:b6:a6:18:42:
                    da:f2:1a:12:51:1d:9f:53:e2:d5:af:55:43:35:dc:
                    33:bb:16:de:b8:75:73:53:45:a0:06:66:3d:ef:d4:
                    4c:f8:60:cf:16:80:a1:69:24:e5:28:a8:eb:f5:63:
                    92:12:78:b7:5a:98:40:4a:9f:85:02:41:9b:aa:e9:
                    0f:13:47:b6:c3:eb:c4:8c:df:0f:a3:45:30:be:4e:
                    f0:10:4e:77:f3:6e:44:3c:f4:e8:e1:d2:43:12:2a:
                    aa:16:92:3a:fe:e7:dd:17:5d:42:84:4c:9c:80:d5:
                    0d:60:bf:d0:5d:19:57:6f:8b:2a:f4:a1:a4:49:88:
                    3b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:67:C1:E7:95:18:86:4F:55:12:DA:B8:78:1E:D3:B7:2E:25:C5:CB
            X509v3 Authority Key Identifier:
                keyid:73:E0:90:EF:79:9B:67:59:B0:3D:22:51:DC:44:B7:AC:03:53:A6:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/c-CQ73mbZ1mwPSJR3ES3rANTpr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c-CQ73mbZ1mwPSJR3ES3rANTpr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/c-CQ73mbZ1mwPSJR3ES3rANTpr0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:0c:2c:7d:b5:52:b6:95:1c:d6:97:48:86:74:a9:16:c1:67:
         5d:eb:4a:83:a8:51:c7:f0:eb:16:6b:0f:99:b8:af:30:12:85:
         8b:02:be:34:7a:cd:8f:a3:30:bb:bf:36:21:79:f9:fb:c6:5a:
         dd:14:e5:69:0e:8a:a2:d9:bc:70:e7:a8:f0:fd:d7:6e:50:89:
         d6:c8:68:3b:25:00:b6:3e:4f:26:d6:1a:47:d7:77:15:e9:68:
         a0:0e:c1:55:8a:27:23:2c:77:49:a0:fd:3f:e8:39:fa:63:bf:
         61:86:d2:35:ae:49:ff:a7:f6:f1:58:a5:18:59:64:d7:bf:9f:
         a9:34:c6:96:bc:10:e7:24:c3:08:5e:db:d2:58:13:8d:bc:83:
         9f:81:21:f9:7e:e8:fe:6f:21:7c:d5:fc:d6:34:90:74:8e:34:
         e7:c8:fa:68:3f:ea:c1:11:89:ec:81:ce:25:46:2f:e6:b7:61:
         e9:89:06:8f:05:b0:be:79:6e:8a:18:59:c2:a7:83:4a:d0:b7:
         25:e4:38:88:02:d1:14:5e:9f:8d:c5:dc:be:27:62:e6:1f:7a:
         74:1b:11:ae:91:71:8a:03:3d:03:f6:cf:09:ac:11:04:37:1a:
         4f:dc:e2:7f:cf:0b:78:68:c6:76:44:f8:0e:70:a8:f4:14:f5:
         03:dc:64:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:53:07 2026 by rpki-client