Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft
File:                     444NefP9KSMew_PjAp05P0MnfLM.mft (raw, json)
Hash identifier:          gHwR/xN6KLIxO9uZmxLEzzPfcC4/4AyFDX4ouVcHppQ=
Subject key identifier:   92:4C:E1:6B:82:9C:17:E7:01:7B:E7:3C:66:82:0D:E2:74:25:3C:97
Authority key identifier: E3:8E:0D:79:F3:FD:29:23:1E:C3:F3:E3:02:9D:39:3F:43:27:7C:B3
Certificate issuer:       /CN=A9128298/serialNumber=E38E0D79F3FD29231EC3F3E3029D393F43277CB3
Certificate serial:       06E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft
Manifest number:          06DC
Signing time:             Sun 20 Sep 2026 22:07:17 +0000
Manifest this update:     Sun 20 Sep 2026 22:07:17 +0000
Manifest next update:     Sun 27 Sep 2026 22:07:17 +0000
Files and hashes:         1: 444NefP9KSMew_PjAp05P0MnfLM.crl (hash: IVnlCtmjNu7ilj18fjT9KkOGEVR2cna1Ji9yrFcqA/M=)
                          2: 832F7D72B20E11EBB73B4E2FC4F9AE02.roa (hash: mCd6hlONgNGbciz+em8hQXTnFQWGe/A1+wDA1rIfHSc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.crl
                          rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1761 (0x6e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128298, serialNumber=E38E0D79F3FD29231EC3F3E3029D393F43277CB3
        Validity
            Not Before: Sep 20 22:07:17 2026 GMT
            Not After : Sep 27 22:07:17 2026 GMT
        Subject: CN=6ab05915-6e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:60:b6:15:96:25:16:2a:97:97:1d:55:2f:d9:
                    dd:1e:6c:68:60:ba:1e:eb:f0:94:d3:5e:0c:8a:67:
                    f0:8e:e2:ac:b6:a9:b9:e6:3a:e7:f6:86:05:33:74:
                    51:4b:b3:6d:0d:68:65:e5:4e:5d:7e:8c:5f:8b:50:
                    d3:60:90:cd:b4:ce:18:58:24:f9:e0:a7:70:9e:6c:
                    e4:e8:19:ed:ec:ae:d1:d2:29:1b:0a:13:84:e3:b7:
                    38:40:dd:39:89:50:e8:15:75:a8:39:30:37:cc:21:
                    7f:77:b7:55:30:46:80:c3:07:13:89:85:64:c1:96:
                    b1:ef:d9:a9:b5:f5:6b:f1:a0:54:82:61:61:17:e4:
                    fe:c2:ef:71:48:15:80:46:fa:59:6b:7d:0b:20:2d:
                    ae:e6:51:01:3f:41:17:74:1e:dd:39:5b:bb:d7:8b:
                    f5:38:eb:d6:60:e7:d1:f1:81:4a:71:2c:28:0b:61:
                    09:6d:4e:a7:1b:a9:6f:9e:c8:39:e8:99:f1:71:9f:
                    ae:b7:b9:b7:a1:85:23:57:61:20:cb:7a:20:4c:99:
                    1d:f7:02:6f:80:2d:f2:ad:54:ef:99:27:45:92:ca:
                    e4:bf:45:23:54:62:74:e8:cd:49:d9:04:74:fe:fc:
                    4b:64:41:5d:d2:92:c9:94:ee:14:6a:65:e8:5d:79:
                    12:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4C:E1:6B:82:9C:17:E7:01:7B:E7:3C:66:82:0D:E2:74:25:3C:97
            X509v3 Authority Key Identifier:
                keyid:E3:8E:0D:79:F3:FD:29:23:1E:C3:F3:E3:02:9D:39:3F:43:27:7C:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:dd:d9:95:b3:a6:c6:52:f8:45:03:6c:fa:51:fa:d9:69:b1:
         40:95:03:ea:63:7f:27:a0:1b:51:e8:d4:36:06:fd:5b:46:1d:
         01:47:b5:a8:d9:c2:55:a0:fb:59:67:eb:8c:02:46:74:d4:bf:
         65:8a:46:01:79:18:f5:ec:a4:79:9d:bb:06:66:5f:00:8e:74:
         2b:f0:9e:18:26:c5:6c:84:5d:cd:ba:fb:42:b1:d3:a6:6e:e9:
         76:22:1a:23:88:54:5b:22:bf:c6:39:54:02:7e:e4:96:9f:e8:
         eb:42:7e:9a:97:ad:a2:a3:5c:63:fa:42:ba:33:58:41:3d:74:
         59:35:7e:8c:b0:96:22:1c:74:c4:fc:0e:c7:84:0b:f2:f0:be:
         42:6f:ab:d9:26:ae:46:ce:d5:4e:60:64:cf:66:9b:9c:22:04:
         d4:4e:56:fb:55:96:31:5c:61:41:de:e9:78:d9:0f:92:ad:10:
         14:31:5d:4b:0c:93:36:1d:14:55:70:72:af:23:80:07:2e:7b:
         6b:5e:af:87:e6:71:8d:d9:06:cd:5f:21:be:c0:38:2a:a0:28:
         df:02:c8:2d:13:56:5e:f7:4d:c2:17:61:65:f6:8c:13:be:7a:
         75:1b:78:e1:b7:34:0c:b7:9c:30:f3:d0:10:e5:25:60:80:c3:
         c5:40:67:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:37:42 2026 by rpki-client