Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft
File:                     u51dUPdVgZcvw68cbOavz1fPuT8.mft (raw, json)
Hash identifier:          Rv/eaGhXR4zlbLzFjpswk54PU/F13pAFp0wPSXJlIQs=
Subject key identifier:   FE:EC:18:58:FC:83:6C:C3:32:63:34:CA:C2:C5:F3:70:0F:0F:3E:4F
Authority key identifier: BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F
Certificate issuer:       /CN=A913DD6A/serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F
Certificate serial:       0922
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft
Manifest number:          08CA
Signing time:             Sun 20 Sep 2026 20:33:13 +0000
Manifest this update:     Sun 20 Sep 2026 20:33:13 +0000
Manifest next update:     Sun 27 Sep 2026 20:33:13 +0000
Files and hashes:         1: u51dUPdVgZcvw68cbOavz1fPuT8.crl (hash: 5aKWygx7R1k2SVDJ+fOkI3+xb3Y67Lje48E6H869zt0=)
                          2: 862720F4031611EB9086351AC4F9AE02.roa (hash: YvqKvx4cjRnhlZaI1S3sScE7QoTWubRxZZoRYNXtv9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl
                          rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 20:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2338 (0x922)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DD6A, serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F
        Validity
            Not Before: Sep 20 20:33:13 2026 GMT
            Not After : Sep 27 20:33:13 2026 GMT
        Subject: CN=6ab04309-ef33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:e3:ea:49:ed:ac:1b:ec:54:47:fa:4b:2f:
                    95:17:5b:aa:87:a5:a8:23:1d:56:ac:0f:91:7e:1e:
                    b1:0d:b0:77:ed:a2:68:5d:26:fe:30:f3:79:53:50:
                    e4:fa:e5:97:c5:8f:d9:f3:ff:0b:96:02:54:f2:41:
                    ce:89:e2:9a:be:64:98:0b:ef:3f:c3:16:34:8c:6c:
                    d0:2a:af:b5:c2:72:63:62:c8:e8:20:2c:f6:45:83:
                    14:a8:79:d1:40:f7:9a:63:d5:4e:99:88:6e:ac:9f:
                    79:1c:ea:63:2d:82:0f:4d:fe:4a:33:fa:72:d9:80:
                    0a:c4:04:11:78:6c:92:50:cf:a7:d0:2d:0a:f7:e1:
                    0c:8d:f7:81:74:d5:ea:8f:fd:63:c2:7d:50:77:ce:
                    37:f8:c6:6c:ca:47:08:c4:7b:d9:9d:d0:6a:c6:16:
                    88:6a:03:b6:4c:af:05:61:ad:6c:02:5f:24:3a:8e:
                    ad:f1:7e:52:4a:ef:fb:05:2f:12:ea:bd:6c:12:98:
                    8d:23:c5:da:79:98:7b:0e:88:af:21:80:cb:69:d9:
                    1c:ea:82:17:45:a1:67:cf:1b:f5:a4:58:1e:16:70:
                    55:b4:8b:55:e8:42:33:bc:a6:ce:1e:98:86:dd:55:
                    04:40:a4:de:e8:29:57:39:00:57:28:79:c9:f1:d7:
                    9b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EC:18:58:FC:83:6C:C3:32:63:34:CA:C2:C5:F3:70:0F:0F:3E:4F
            X509v3 Authority Key Identifier:
                keyid:BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:db:f3:87:fe:98:00:63:9b:4b:08:e2:f9:ea:59:08:2a:b8:
         16:c4:2e:f0:43:91:bc:4a:80:56:28:c5:61:10:87:32:6a:97:
         11:18:c8:2d:6f:e1:40:5e:8f:37:62:23:b9:f5:0b:3f:48:4f:
         11:76:7f:17:f8:64:8d:6c:7a:08:51:1a:71:d4:16:e8:a8:9d:
         ae:71:8a:a7:5b:bc:89:a0:b6:7c:81:da:c4:13:34:09:11:eb:
         b7:c2:c4:88:33:ef:c7:27:d9:1d:2e:84:d7:75:ab:a2:be:68:
         f6:fc:d6:20:bd:99:2e:b2:41:1b:fc:2f:15:2d:7c:4a:63:39:
         61:f7:b7:47:09:04:fd:c1:a2:1c:fd:89:61:5f:46:b7:aa:c1:
         11:4c:0d:e7:ac:12:f5:3f:8a:ca:31:d1:12:91:f7:3a:42:47:
         9e:6b:7f:e5:24:47:99:55:7f:92:8c:85:93:3a:9a:45:f0:15:
         c2:d8:86:a7:df:31:54:79:3b:17:35:5e:32:13:b3:21:1b:22:
         14:5f:88:69:c5:32:ba:76:7f:4d:0a:0c:55:92:68:33:ab:4c:
         62:dd:ee:fa:8d:8b:24:19:ab:41:6a:d8:69:f7:ce:5f:25:9d:
         0e:f6:2c:0d:7c:32:30:2b:5d:1d:4c:dc:27:1f:50:b3:1b:af:
         02:52:b6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:10:43 2026 by rpki-client