Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
File:                     T4QeODPgrG_hvu69ABI10VKOzno.mft (raw, json)
Hash identifier:          dCSTCZyi9uIqa+RiJfwXUJsQiA3f9XUzpNeNZMARzts=
Subject key identifier:   AA:7C:40:D7:2F:F1:FD:F9:78:E7:1F:FF:DF:3E:E5:58:72:EE:03:F2
Authority key identifier: 4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
Certificate issuer:       /CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Certificate serial:       0209
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
Manifest number:          01FF
Signing time:             Mon 21 Sep 2026 03:12:44 +0000
Manifest this update:     Mon 21 Sep 2026 03:12:43 +0000
Manifest next update:     Mon 28 Sep 2026 03:12:43 +0000
Files and hashes:         1: T4QeODPgrG_hvu69ABI10VKOzno.crl (hash: Ng15sOIDkU3umXN3inLtoMXWN0yxIyxjjFP5/6RYv6Y=)
                          2: 2546725EA92811F0A138DF72C4F9AE02.roa (hash: ccOvd6OCJeS5Mo5TD4UA7bVIYTSRvb313FpwtTK7ruw=)
                          3: D2FF8C06A92711F08CEB6934C4F9AE02.roa (hash: KRsNH66T+IbVfJVXh4HXcfnfG/XP7iz+CZYJM0ybrSQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
                          rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 521 (0x209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AF6A, serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
        Validity
            Not Before: Sep 21 03:12:43 2026 GMT
            Not After : Sep 28 03:12:43 2026 GMT
        Subject: CN=6ab0a0ac-324d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2e:84:47:cc:cf:c0:00:30:a2:48:52:0e:6d:
                    da:a5:a0:8e:32:6a:59:cc:8f:a4:e4:a8:83:38:db:
                    7c:70:7c:5e:1b:b1:2b:06:b0:c6:a1:54:ff:f0:52:
                    ab:ff:fd:92:30:d7:5b:16:fd:d1:88:c4:e4:6f:b3:
                    ae:e1:d5:89:4e:ba:d1:aa:e9:e3:07:15:4e:bb:9b:
                    43:e9:eb:7e:47:95:2f:2b:f5:9f:bb:3d:37:10:6d:
                    fb:ae:ec:5f:af:88:dd:6a:14:53:c6:21:b5:22:ed:
                    4f:43:70:e2:bf:55:0f:9b:04:ae:d0:ce:0f:82:10:
                    cf:cf:5e:40:2d:2e:f2:3a:d0:c9:5f:59:a1:03:83:
                    9e:7e:07:f6:e2:1a:b8:04:13:84:4f:8d:13:c7:5a:
                    92:2a:33:20:19:4b:e9:fb:29:a1:b3:33:f5:06:dc:
                    8d:1c:85:4c:6f:69:49:f9:1c:87:59:18:58:47:86:
                    57:66:34:ee:dc:41:29:b8:28:7d:4a:e0:34:fe:75:
                    b1:ea:fb:99:58:bf:26:b0:e9:b7:aa:e5:9f:03:19:
                    10:f1:99:5d:23:4a:a1:28:e5:06:29:c5:dd:64:cb:
                    7a:27:4c:70:11:c0:38:6e:e6:a5:4d:29:d1:b0:64:
                    52:0f:76:b6:24:93:3e:38:8c:1f:f2:4c:d3:db:0e:
                    3e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7C:40:D7:2F:F1:FD:F9:78:E7:1F:FF:DF:3E:E5:58:72:EE:03:F2
            X509v3 Authority Key Identifier:
                keyid:4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:60:db:f1:38:af:63:33:9f:71:36:22:01:0e:95:ca:7e:1a:
         26:fa:2b:f4:b0:0f:a7:c5:1c:80:2e:d0:44:bc:26:c9:29:e5:
         6b:a0:9b:93:e6:c5:cb:ff:ea:4d:7e:75:99:38:08:95:f2:b8:
         34:8c:77:03:9a:62:f4:eb:c0:92:b5:0f:44:b3:5a:0f:b8:82:
         35:72:8c:77:f0:91:b6:7e:e8:6d:cb:39:30:c8:74:89:40:7c:
         76:9e:48:7b:c7:7b:31:c1:50:99:5e:8b:1d:8e:72:07:a0:4e:
         25:39:fe:b3:98:50:52:4f:7c:d4:4d:29:78:b8:fe:74:92:45:
         60:04:42:44:cf:59:5c:74:c7:4d:9d:d7:0e:ab:d1:2d:b6:6e:
         da:ac:b5:85:ad:6c:3a:2f:13:23:0f:4b:4b:f0:7e:79:47:90:
         a0:15:96:e2:bb:0a:3f:b0:76:15:9b:ee:7b:bc:89:68:5f:c6:
         12:9c:8b:03:3c:7d:f2:45:3f:a5:19:b0:99:26:a5:6c:e9:e6:
         1e:3b:dc:5f:f8:79:22:3d:45:d3:96:2e:33:d3:c7:99:91:5c:
         7f:74:67:0b:a2:d1:a4:0c:37:7f:17:66:a9:3f:8c:59:01:7c:
         5c:c6:a2:83:80:e3:7f:19:50:70:24:38:29:62:37:57:d4:7e:
         4b:50:75:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:14:35 2026 by rpki-client