Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft
File:                     D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft (raw, json)
Hash identifier:          RU5m8EbabCE4buaU72Z9wtBRqE2NgFATcDyi9tjm4sc=
Subject key identifier:   8D:14:C8:99:11:24:B6:F3:B9:59:52:D9:E2:45:CF:E2:0D:6C:C8:CF
Authority key identifier: 0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34
Certificate issuer:       /CN=A9139661/serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334
Certificate serial:       FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft
Manifest number:          F2
Signing time:             Sun 27 Sep 2026 06:58:03 +0000
Manifest this update:     Sun 27 Sep 2026 06:58:02 +0000
Manifest next update:     Sun 04 Oct 2026 06:58:02 +0000
Files and hashes:         1: D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl (hash: Qe1l6b2WG38Ct3jX9DVg8ahKXnYhRgqGAef8AF1wJco=)
                          2: C4C4028A5B4C11F0807A3A60C4F9AE02.roa (hash: ki7xh64GIKfwbhwFIwfLQ7ubTp/Y8e6eL9BMSGhKC7E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl
                          rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 06:58:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139661, serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334
        Validity
            Not Before: Sep 27 06:58:02 2026 GMT
            Not After : Oct  4 06:58:02 2026 GMT
        Subject: CN=6ab8be7b-3aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f3:82:76:4c:a7:02:14:aa:13:b7:a7:1d:81:
                    6c:45:36:1c:1d:da:ae:65:d0:52:ca:ba:77:af:e3:
                    63:4b:db:41:92:ee:e9:95:46:92:af:aa:d4:16:6b:
                    82:66:f0:28:13:6c:68:9a:75:fb:b0:03:06:f7:9f:
                    25:ed:78:57:12:e6:99:4d:4d:90:03:c3:21:f5:19:
                    1a:b5:32:50:03:24:30:9b:9a:ab:3f:6a:d1:d2:20:
                    97:0e:b5:c8:12:7b:64:d7:9f:ba:e1:7e:7e:f8:84:
                    6f:40:0c:a0:14:fb:9e:01:fc:ec:e6:f4:60:55:e1:
                    07:ae:f7:49:e5:8c:b7:ab:a1:88:cc:f4:c3:e1:b5:
                    ba:f6:03:76:ea:d7:15:fc:d0:9c:54:cb:38:6b:c2:
                    97:8f:76:65:da:20:7b:1d:85:3c:8d:59:fa:7a:e7:
                    4f:59:a3:ea:fc:47:29:bb:b2:b4:65:43:4e:7a:2f:
                    11:3b:72:4d:2f:94:30:ad:28:48:e5:53:fa:51:5a:
                    63:24:14:36:fe:05:96:f6:ea:1e:da:46:d2:3d:c0:
                    38:74:75:67:e2:0a:39:c6:48:70:dc:8e:ae:f2:33:
                    00:03:42:68:12:22:62:26:1a:6a:a1:4c:69:fe:2d:
                    35:30:8e:23:f4:d3:7f:d6:80:5f:b1:2e:6a:cf:19:
                    fa:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:14:C8:99:11:24:B6:F3:B9:59:52:D9:E2:45:CF:E2:0D:6C:C8:CF
            X509v3 Authority Key Identifier:
                keyid:0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:86:54:60:4c:da:b6:2e:23:43:12:39:6a:39:1e:74:9b:e9:
         f8:be:36:9a:19:6f:4d:c8:50:9e:89:3d:90:59:d6:3c:c3:c7:
         ae:e0:47:0e:a1:7c:1b:65:16:b2:60:37:40:9f:dc:fe:be:d5:
         38:2c:15:48:e4:e0:34:ad:f8:95:fd:b1:d1:85:ef:eb:5d:32:
         2a:e7:d8:66:8c:63:65:c8:bf:e4:e2:dd:57:ed:c8:d2:54:ea:
         71:51:ef:72:d3:e6:95:91:da:24:4e:14:28:57:0b:e4:fb:1b:
         bc:90:1c:eb:f6:10:4e:16:4b:fa:27:b4:4b:c0:82:51:ea:bb:
         e6:12:a8:99:ce:30:bf:d2:ee:83:16:de:76:83:85:18:d2:8f:
         f2:bc:b6:df:fb:d1:43:23:1f:65:a4:2b:28:93:8a:79:59:79:
         7a:60:e9:66:33:33:ac:5e:95:d4:11:a7:29:53:d1:ce:75:52:
         f6:e6:c5:88:7e:ba:57:ab:54:1e:ac:3f:ab:66:f9:e8:76:01:
         d6:51:45:1c:9f:4d:c8:e0:ad:ab:93:9c:42:63:eb:02:11:45:
         a3:45:1a:62:48:d1:a5:a2:36:28:11:60:c6:5a:28:e9:f5:6c:
         18:9a:b2:66:9e:bc:65:9a:b0:be:9f:9d:d7:20:a4:5a:29:b4:
         54:15:8a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:29:20 2026 by rpki-client