Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft
File:                     276b_H-KPTvgW7W2Ah91Rb6YG_A.mft (raw, json)
Hash identifier:          AkjXbL3Fxt3q1v9Da5g7Oi7s/z+w+f9RzusXa9gujRo=
Subject key identifier:   63:EF:19:2F:17:DF:E7:AA:DC:4D:37:9A:19:5C:64:72:DA:48:AC:84
Authority key identifier: DB:BE:9B:FC:7F:8A:3D:3B:E0:5B:B5:B6:02:1F:75:45:BE:98:1B:F0
Certificate issuer:       /CN=A913D03A/serialNumber=DBBE9BFC7F8A3D3BE05BB5B6021F7545BE981BF0
Certificate serial:       0867
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft
Manifest number:          085C
Signing time:             Sat 26 Sep 2026 21:04:11 +0000
Manifest this update:     Sat 26 Sep 2026 21:04:11 +0000
Manifest next update:     Sat 03 Oct 2026 21:04:11 +0000
Files and hashes:         1: 276b_H-KPTvgW7W2Ah91Rb6YG_A.crl (hash: 2hhUl5IRGdfLRqNCZSki/BSAhAftidYlVdAPSRTY6bQ=)
                          2: 3A9F3ADC234A11EBA0C40C2FC4F9AE02.roa (hash: YpOKenviWFcP9vOYsOSlrfDGErLXP8DjYkNlKiqazJU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.crl
                          rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 21:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2151 (0x867)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D03A, serialNumber=DBBE9BFC7F8A3D3BE05BB5B6021F7545BE981BF0
        Validity
            Not Before: Sep 26 21:04:11 2026 GMT
            Not After : Oct  3 21:04:11 2026 GMT
        Subject: CN=6ab8334b-0c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:eb:55:08:df:cf:ff:32:b9:cc:5e:bb:32:22:
                    b5:8d:97:d6:c2:c4:c6:df:20:78:e4:ad:6d:be:ce:
                    80:be:1b:2a:ef:3d:f5:25:11:f7:2c:56:03:3c:95:
                    c6:c4:18:10:b4:55:b7:33:12:3f:bb:0d:3b:a6:3a:
                    a8:1d:9b:19:20:b0:59:9c:cf:99:2b:2a:99:c2:83:
                    fe:33:f0:71:aa:67:b3:37:26:89:78:b7:5f:05:9e:
                    eb:7d:64:4e:e1:4f:9e:32:46:9e:51:44:fd:78:1a:
                    dd:36:eb:ad:26:ce:c6:c4:d3:45:91:e8:e4:b4:6a:
                    5e:7a:7b:0e:f8:d3:a7:bb:10:22:46:1d:7e:51:5c:
                    4d:66:64:a7:cb:2f:7c:72:92:47:1f:ae:4d:7b:15:
                    08:19:ea:55:0e:34:0d:85:4e:82:67:de:83:d6:5e:
                    76:4b:4f:78:22:85:02:24:d9:5c:9f:9e:03:37:bc:
                    f6:1f:63:39:4b:a6:d3:8b:d5:7a:4f:c2:02:5a:d1:
                    b9:4f:7e:83:fb:7c:ed:4c:3d:ff:17:01:fc:4e:21:
                    2f:b9:5a:38:4f:8c:a6:88:90:5f:b3:97:c9:60:43:
                    60:13:a1:c0:98:a4:7f:d3:2e:c5:15:00:e2:c6:db:
                    df:d2:5a:e5:64:34:7c:ab:29:d8:fe:bb:14:8f:a7:
                    e6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EF:19:2F:17:DF:E7:AA:DC:4D:37:9A:19:5C:64:72:DA:48:AC:84
            X509v3 Authority Key Identifier:
                keyid:DB:BE:9B:FC:7F:8A:3D:3B:E0:5B:B5:B6:02:1F:75:45:BE:98:1B:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:2b:3a:7b:54:f4:71:38:bc:35:92:80:e6:31:60:dd:8d:82:
         42:02:bf:30:9f:dd:2b:02:fc:c5:04:78:15:3b:f3:aa:db:6e:
         e5:f9:12:26:b1:d9:ba:1a:8e:31:5f:9b:dc:a2:c0:8c:2c:bd:
         bf:f9:9e:ca:c6:1b:20:06:5d:57:f0:7a:fd:df:26:42:1e:38:
         95:2e:98:e0:e1:a6:59:26:a9:b3:83:a4:0f:2c:5b:c9:e5:4b:
         0c:df:23:47:23:66:2e:7e:56:75:ef:d6:12:43:be:d8:71:58:
         4f:8b:61:a9:e7:ba:dd:d4:b5:84:bb:a0:fe:20:e5:a8:61:6e:
         47:b6:85:49:07:ff:bd:2d:3c:c8:77:4b:59:46:b9:d9:d7:ef:
         d8:19:86:8c:7d:8e:25:32:bd:7c:11:b5:46:ab:c3:0a:a0:96:
         df:34:eb:e1:53:79:68:2e:e0:bb:23:65:78:e9:64:ed:8b:cf:
         a9:ba:33:9d:6d:32:1b:11:5a:b6:4e:07:6d:63:2a:d4:c3:88:
         d9:37:d3:83:26:fd:2d:37:ef:df:d7:c3:a5:4c:f1:ef:cc:16:
         80:aa:69:53:28:94:dd:bb:9d:b1:98:13:ba:b8:a2:54:85:28:
         a3:cd:70:5f:09:3a:9b:2b:bf:c3:ea:69:8d:80:92:51:82:35:
         70:39:84:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:04:23 2026 by rpki-client