Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139ECA/A06FF2A4744B11F1A715B8456CA30FBC/rLt_9DfbXs46q3oR0szOQb_IQJ8.mft
File:                     rLt_9DfbXs46q3oR0szOQb_IQJ8.mft (raw, json)
Hash identifier:          2nBtm5bC6eP09JFoTnPpFJRgtyEUd2lCZn5PFS4qims=
Subject key identifier:   85:E9:78:16:F1:6F:91:83:20:D8:7B:AD:96:09:7B:EB:62:F8:4F:52
Authority key identifier: AC:BB:7F:F4:37:DB:5E:CE:3A:AB:7A:11:D2:CC:CE:41:BF:C8:40:9F
Certificate issuer:       /CN=A9139ECA/serialNumber=ACBB7FF437DB5ECE3AAB7A11D2CCCE41BFC8409F
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLt_9DfbXs46q3oR0szOQb_IQJ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139ECA/A06FF2A4744B11F1A715B8456CA30FBC/rLt_9DfbXs46q3oR0szOQb_IQJ8.mft
Manifest number:          36
Signing time:             Sun 11 Oct 2026 09:15:29 +0000
Manifest this update:     Sun 11 Oct 2026 09:15:29 +0000
Manifest next update:     Sun 18 Oct 2026 09:15:29 +0000
Files and hashes:         1: rLt_9DfbXs46q3oR0szOQb_IQJ8.crl (hash: SstFjw/vpY39lNKEgg+B8/74v7voGB4nvzi3O7ojmtE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139ECA/A06FF2A4744B11F1A715B8456CA30FBC/rLt_9DfbXs46q3oR0szOQb_IQJ8.crl
                          rsync://rpki.apnic.net/member_repository/A9139ECA/A06FF2A4744B11F1A715B8456CA30FBC/rLt_9DfbXs46q3oR0szOQb_IQJ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLt_9DfbXs46q3oR0szOQb_IQJ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 09:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139ECA, serialNumber=ACBB7FF437DB5ECE3AAB7A11D2CCCE41BFC8409F
        Validity
            Not Before: Oct 11 09:15:29 2026 GMT
            Not After : Oct 18 09:15:29 2026 GMT
        Subject: CN=6acb53b1-2051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:48:47:61:1c:19:4c:c6:63:1d:66:af:71:c8:
                    42:20:fa:ed:a8:da:df:57:c9:58:da:07:ce:30:1a:
                    c1:a9:83:9b:ae:3d:7f:a8:a8:c6:45:f0:2f:2e:19:
                    a3:b5:b1:fa:b9:d1:1b:41:2a:9a:40:17:79:11:ab:
                    8c:5f:00:82:2d:cc:1f:d3:33:c0:ed:4d:1e:20:8d:
                    d7:1b:b9:75:8b:a0:d9:d8:0e:d6:72:fb:c9:34:a9:
                    e4:23:be:d6:85:f8:87:4f:5f:a0:fc:5e:5a:fe:5c:
                    c4:d0:bb:93:45:ea:e1:6e:a3:d9:8f:5b:c9:08:a8:
                    23:49:f0:67:4f:88:97:89:39:9b:e7:4b:b8:f1:80:
                    59:ac:ba:0d:2a:14:24:09:ce:67:28:c1:c2:8f:7b:
                    f1:d1:6b:68:5d:db:7a:31:d2:87:5c:58:9a:ea:53:
                    06:76:0e:2d:00:92:56:98:19:a2:2c:5f:f1:66:cd:
                    2b:03:4e:f0:65:70:17:40:a6:0d:0d:19:09:36:e0:
                    59:26:a5:34:91:f0:32:31:b4:ef:dd:e6:b7:c6:e5:
                    46:ec:bc:3e:c1:3a:9c:b6:c5:96:b2:d7:77:f1:ef:
                    20:d5:f3:6b:9c:5f:28:23:7c:0b:1c:cb:c3:c6:85:
                    87:4c:01:c7:ea:8d:8d:7c:8e:5f:04:93:ef:ed:ab:
                    c5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E9:78:16:F1:6F:91:83:20:D8:7B:AD:96:09:7B:EB:62:F8:4F:52
            X509v3 Authority Key Identifier:
                keyid:AC:BB:7F:F4:37:DB:5E:CE:3A:AB:7A:11:D2:CC:CE:41:BF:C8:40:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139ECA/A06FF2A4744B11F1A715B8456CA30FBC/rLt_9DfbXs46q3oR0szOQb_IQJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLt_9DfbXs46q3oR0szOQb_IQJ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139ECA/A06FF2A4744B11F1A715B8456CA30FBC/rLt_9DfbXs46q3oR0szOQb_IQJ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:61:5e:75:ce:ef:8c:3e:44:1d:d7:a0:bd:98:23:2d:fd:f3:
         3a:66:7f:13:41:c7:ed:7a:a0:ed:99:3a:0c:75:4c:81:a1:05:
         22:c1:2a:13:33:76:3d:be:16:5c:eb:32:b9:fd:60:1d:d4:c0:
         79:b6:f1:5b:f5:7d:5e:45:07:dd:15:9f:eb:b5:93:e4:81:72:
         97:e0:47:e8:e5:6c:c9:7e:21:15:cd:58:6d:39:a8:c3:77:0f:
         57:9a:dd:fe:fa:16:de:37:47:bc:4d:0a:f6:5d:7e:d3:79:12:
         be:0b:20:52:53:8a:3f:a8:6a:01:a7:23:3f:f2:5f:1f:9f:03:
         ef:bc:bc:bb:0d:39:19:a1:db:8f:f3:48:fe:a8:43:b6:c1:18:
         e6:e3:93:c1:a3:8e:a8:86:95:d4:cc:f1:c1:89:93:a4:fc:60:
         f8:d1:e4:3f:c4:ae:6c:27:84:ba:36:7c:6d:bc:b1:46:14:8f:
         ba:ea:a7:a2:56:9b:a2:b9:a3:23:73:66:96:8d:39:79:aa:05:
         0d:2b:ad:85:b8:ef:23:f9:82:ac:47:b7:7c:68:6c:b0:cc:53:
         be:5a:79:b8:d8:c9:46:be:f5:1f:b0:4b:ae:05:49:9a:8e:f6:
         69:30:c3:69:ba:8b:89:df:37:17:4f:21:0b:5f:08:ba:23:c3:
         6d:cf:31:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:41:05 2026 by rpki-client