Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132336/98FEBF1079A411F18D0EC0EF92A30FBC/CPjroqSGttij8nlF1NQ_TaFArYY.mft
File:                     CPjroqSGttij8nlF1NQ_TaFArYY.mft (raw, json)
Hash identifier:          ejpsS6tqBKyXWRIQIJfDIp8//SVi+/sid4fCAnjHlLs=
Subject key identifier:   76:C5:5E:CF:79:19:53:EE:5D:08:51:CE:CC:75:62:B8:B3:D9:FE:E1
Authority key identifier: 08:F8:EB:A2:A4:86:B6:D8:A3:F2:79:45:D4:D4:3F:4D:A1:40:AD:86
Certificate issuer:       /CN=A9132336/serialNumber=08F8EBA2A486B6D8A3F27945D4D43F4DA140AD86
Certificate serial:       2C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CPjroqSGttij8nlF1NQ_TaFArYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132336/98FEBF1079A411F18D0EC0EF92A30FBC/CPjroqSGttij8nlF1NQ_TaFArYY.mft
Manifest number:          2B
Signing time:             Fri 25 Sep 2026 08:52:47 +0000
Manifest this update:     Fri 25 Sep 2026 08:52:46 +0000
Manifest next update:     Fri 02 Oct 2026 08:52:46 +0000
Files and hashes:         1: CPjroqSGttij8nlF1NQ_TaFArYY.crl (hash: geinMmXlxTcPkGn6UOvNGcb1wHZ9uLDu6zkkDY9/HHI=)
                          2: 7355A0E479A911F1B013AE2794A30FBC.roa (hash: sabTo3YOIwQeO/1bHAZgwBZt4098HDK7V0AISW0p8SM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132336/98FEBF1079A411F18D0EC0EF92A30FBC/CPjroqSGttij8nlF1NQ_TaFArYY.crl
                          rsync://rpki.apnic.net/member_repository/A9132336/98FEBF1079A411F18D0EC0EF92A30FBC/CPjroqSGttij8nlF1NQ_TaFArYY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CPjroqSGttij8nlF1NQ_TaFArYY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:52:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132336, serialNumber=08F8EBA2A486B6D8A3F27945D4D43F4DA140AD86
        Validity
            Not Before: Sep 25 08:52:46 2026 GMT
            Not After : Oct  2 08:52:46 2026 GMT
        Subject: CN=6ab6365f-d65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ba:f1:e3:4f:05:d0:bd:61:17:e3:30:28:41:
                    58:4d:58:b5:a0:3a:cf:47:5c:0a:00:8d:60:4b:78:
                    f7:6c:4a:e5:10:f4:a1:9d:3d:6a:63:a1:fe:44:09:
                    9d:b7:05:1c:f5:b5:9c:f2:28:fe:b4:f3:55:37:7f:
                    f4:26:19:48:b0:a4:e2:7e:40:fc:2c:51:da:b9:55:
                    85:19:76:f9:a5:5a:56:2d:6c:81:75:76:a0:26:63:
                    5c:32:45:8d:23:e2:f1:5d:11:fd:80:bc:ad:ac:db:
                    c9:e5:47:d6:15:86:c9:ba:6f:ed:3e:a5:66:7c:80:
                    4c:bc:ba:2f:54:cf:c0:d2:a0:cb:81:96:21:99:9e:
                    36:b0:40:44:08:a5:81:a8:02:56:84:c9:36:c3:48:
                    35:77:22:a7:8e:9d:50:3e:3c:bc:7b:3f:be:95:84:
                    76:45:c2:75:59:c4:7e:ce:9b:b7:9d:b2:e9:9d:5f:
                    85:b4:45:29:ab:fd:7a:2f:cd:06:aa:77:f0:8b:89:
                    ed:6e:87:e6:37:1b:99:5d:c5:5a:46:a2:de:b4:1a:
                    23:d4:44:2c:6a:cb:3d:e3:bc:a9:79:10:08:21:7e:
                    6d:a3:4f:d7:15:b2:35:83:aa:bc:49:ea:df:04:97:
                    12:9c:2e:6b:76:8c:0a:c7:71:ea:a9:d5:0c:96:b6:
                    e8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C5:5E:CF:79:19:53:EE:5D:08:51:CE:CC:75:62:B8:B3:D9:FE:E1
            X509v3 Authority Key Identifier:
                keyid:08:F8:EB:A2:A4:86:B6:D8:A3:F2:79:45:D4:D4:3F:4D:A1:40:AD:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132336/98FEBF1079A411F18D0EC0EF92A30FBC/CPjroqSGttij8nlF1NQ_TaFArYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CPjroqSGttij8nlF1NQ_TaFArYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132336/98FEBF1079A411F18D0EC0EF92A30FBC/CPjroqSGttij8nlF1NQ_TaFArYY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:c4:77:42:f7:cf:a5:22:dd:da:e9:b8:5b:67:d7:55:28:45:
         24:d5:42:51:3a:8b:b1:bf:34:40:2f:94:c9:d3:8f:ab:24:7a:
         cb:b6:d3:b9:31:a3:da:36:09:95:7b:1f:a6:39:45:94:e8:e2:
         ea:cc:c0:e9:4a:34:aa:5c:89:6f:ab:ca:26:3c:64:39:2d:6a:
         3e:45:a8:7d:1a:68:ad:fe:fc:34:e1:3b:a6:1c:dc:66:ae:01:
         ef:d8:b6:2f:ff:2b:9f:b9:fc:b4:76:70:37:ef:cc:37:a5:83:
         ba:30:46:5e:bc:c2:7a:8b:ad:81:cd:9b:22:f5:5a:8b:b8:74:
         90:57:1a:4d:69:d5:d1:c4:81:59:f7:2f:e4:96:34:1a:ce:a1:
         36:5a:db:55:41:e2:2e:7d:57:5a:62:6d:37:15:c9:89:6f:93:
         23:7e:7d:6f:3b:c7:65:a9:f7:f3:4d:50:f3:c0:47:dc:48:5c:
         6a:1e:2f:06:aa:b6:f9:88:4f:2a:e5:bd:37:97:08:27:c9:84:
         49:33:a6:98:83:b2:b7:f5:d8:08:2e:33:2c:ab:0a:f6:43:10:
         9c:8a:42:85:89:fc:d4:eb:05:e8:7a:67:1f:c8:37:a2:cd:ce:
         65:95:29:fb:f0:58:78:8d:a8:3d:b6:25:c1:f8:8d:0a:e3:ae:
         2c:ca:56:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:11:41 2026 by rpki-client