Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
File:                     rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft (raw, json)
Hash identifier:          l71aqmo9PUFeOAHuqV2BZeB0z0S7tmis88l1P4VZj1k=
Subject key identifier:   8E:0D:AC:C3:08:FD:36:02:78:E7:D4:A5:27:6F:92:E7:26:72:E1:1B
Authority key identifier: AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C
Certificate issuer:       /CN=A912D2CE/serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C
Certificate serial:       0D6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
Manifest number:          0D5D
Signing time:             Thu 24 Sep 2026 18:02:01 +0000
Manifest this update:     Thu 24 Sep 2026 18:02:00 +0000
Manifest next update:     Thu 01 Oct 2026 18:02:00 +0000
Files and hashes:         1: rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl (hash: R7DthjjW1z4HgG2ySrwNztmGMs8MJrhSS34SmeN05Ck=)
                          2: 25234272DF4311EDA83C7074C4F9AE02.roa (hash: GvywSj55EV1yzQml0fqNzXzPDZF0ADJSCDwlr5eZm/s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl
                          rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3434 (0xd6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D2CE, serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C
        Validity
            Not Before: Sep 24 18:02:00 2026 GMT
            Not After : Oct  1 18:02:00 2026 GMT
        Subject: CN=6ab56599-3e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:77:44:79:e7:16:d4:86:56:d7:39:27:f0:23:
                    89:bd:ce:1e:72:24:c5:9e:4c:38:b3:dc:12:6a:89:
                    33:87:70:bd:06:15:80:5f:b8:20:8f:aa:0e:ef:a8:
                    2b:e8:44:fd:57:04:c3:2a:63:0b:f8:c5:f6:8a:b5:
                    61:6e:cc:f5:74:d6:59:cd:9c:76:77:94:59:2d:68:
                    e6:0a:0b:ac:25:6b:ce:3b:1e:0a:90:6a:c3:82:ec:
                    7a:8e:6b:b7:5f:18:b5:42:53:fc:03:89:fa:4d:ba:
                    3f:85:b9:ce:19:49:44:0d:4f:53:e0:84:65:2c:0a:
                    98:3a:78:0a:26:0b:87:7c:a9:78:f2:c5:54:4b:b3:
                    5c:1e:26:df:8a:af:76:8a:43:3d:66:e6:ec:ae:bd:
                    d0:21:38:d5:8f:fd:17:0e:c8:51:3d:cc:f1:9e:67:
                    0a:47:49:c6:54:eb:5a:18:0b:30:84:0c:59:e0:65:
                    a6:8b:74:8d:8d:49:43:2b:bc:04:be:8d:fc:17:16:
                    96:b5:81:d7:c0:ec:fd:05:4f:96:51:dd:0c:66:b0:
                    70:28:65:00:7b:ef:2c:a6:9c:3e:f6:37:77:ad:ed:
                    b7:f9:51:6c:a9:e3:ab:78:d9:2a:98:23:fe:1d:df:
                    36:6d:90:79:58:08:47:12:89:02:82:0a:d2:45:f0:
                    5c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0D:AC:C3:08:FD:36:02:78:E7:D4:A5:27:6F:92:E7:26:72:E1:1B
            X509v3 Authority Key Identifier:
                keyid:AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:3c:ee:3b:1e:e4:f2:5e:f2:f8:b7:50:f2:68:35:ef:31:23:
         16:93:a6:08:a5:fe:75:5e:7e:9b:91:d1:09:df:4c:32:81:f1:
         4c:f5:a5:c7:38:17:4c:71:3b:95:24:d8:92:f5:6c:30:8e:9c:
         30:38:40:4c:a7:20:0a:e0:5e:92:6b:f7:55:92:ef:5d:16:d1:
         fc:93:89:16:45:8c:b5:32:05:56:87:58:b8:42:81:5f:91:8b:
         12:c3:f6:cb:ba:79:af:74:c9:4c:58:3f:4c:4f:69:41:06:aa:
         94:1e:3b:f8:90:11:5e:8c:3e:82:95:21:2b:f2:f0:22:c2:a5:
         74:9a:d7:7d:7e:2a:47:58:d5:2a:57:ca:f7:44:85:62:77:d6:
         28:76:e7:ee:0a:89:90:bb:16:24:30:40:4b:c9:46:6c:ea:45:
         af:80:23:ab:ff:be:f3:95:c8:85:5b:b9:93:a9:08:53:88:7c:
         e8:be:ad:6e:bf:59:28:37:05:47:43:28:d5:77:80:ac:42:d7:
         13:95:87:c8:54:94:ab:ad:92:e2:d1:cc:6c:6c:59:b6:ba:a1:
         b9:40:dc:e1:4b:d8:bf:ec:ce:9f:b0:79:4a:f6:f8:4b:49:55:
         af:a9:f4:b3:5b:9b:45:ec:2b:47:13:80:c5:66:b5:80:37:98:
         a6:ca:36:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:33:03 2026 by rpki-client