Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft
File:                     pZmI7E1t1bpqMPhmUatWLBimo04.mft (raw, json)
Hash identifier:          nATgJtGhFhFDaoe1mDDrD4UWa6YywVuButdZVQot+94=
Subject key identifier:   46:DE:0E:B4:9B:29:8D:7A:96:F6:15:33:D2:D2:11:CB:70:5F:A2:23
Authority key identifier: A5:99:88:EC:4D:6D:D5:BA:6A:30:F8:66:51:AB:56:2C:18:A6:A3:4E
Certificate issuer:       /CN=A9143FF5/serialNumber=A59988EC4D6DD5BA6A30F86651AB562C18A6A34E
Certificate serial:       05D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZmI7E1t1bpqMPhmUatWLBimo04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft
Manifest number:          05CC
Signing time:             Tue 22 Sep 2026 22:43:21 +0000
Manifest this update:     Tue 22 Sep 2026 22:43:20 +0000
Manifest next update:     Tue 29 Sep 2026 22:43:20 +0000
Files and hashes:         1: pZmI7E1t1bpqMPhmUatWLBimo04.crl (hash: ILWVKk0JuiSgKngDEJE8C2R5bxG7LjMOwatM+314su0=)
                          2: A027E062300911ECAE581534C4F9AE02.roa (hash: XCRNe+IjMfdiRFsViU2603VxuIrA3a9k3c/heY8WZhA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.crl
                          rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZmI7E1t1bpqMPhmUatWLBimo04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:43:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1492 (0x5d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143FF5, serialNumber=A59988EC4D6DD5BA6A30F86651AB562C18A6A34E
        Validity
            Not Before: Sep 22 22:43:20 2026 GMT
            Not After : Sep 29 22:43:20 2026 GMT
        Subject: CN=6ab30488-2029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:72:86:23:f6:a2:7c:c7:92:2b:51:37:f6:50:
                    2b:ed:ac:a0:7e:aa:65:c5:76:56:ff:15:25:0f:c3:
                    7a:0a:f3:c2:7f:46:17:30:4e:3b:63:73:72:7b:a9:
                    5b:fe:53:a4:41:50:de:86:28:b1:14:31:c5:b6:bc:
                    6e:58:78:7f:0a:a8:39:ec:f0:ef:57:77:06:0e:89:
                    b4:42:3e:2b:d9:12:12:2c:c4:15:3a:1c:30:5a:ec:
                    1f:8b:f5:86:57:59:12:f6:d9:49:76:c9:af:a6:19:
                    60:f4:8d:e5:2e:ca:7d:f9:91:ac:c5:3e:cb:3e:38:
                    93:72:a2:48:46:00:84:50:1a:d2:a8:d5:85:c0:3b:
                    2a:f7:91:04:d2:8d:4b:2d:bb:37:8b:8a:41:ca:3a:
                    06:80:9f:f7:36:67:26:a4:d8:88:cb:87:a7:83:61:
                    05:ed:52:e3:75:c8:05:ab:a6:50:d2:ef:3a:ff:e5:
                    5f:a6:60:97:bf:09:53:b7:97:6a:c7:38:56:e9:61:
                    f2:0d:a2:fa:74:cf:5d:65:d5:af:25:f0:e8:db:40:
                    06:c3:f0:1e:2b:af:ad:5b:b7:42:08:d1:c7:c3:c1:
                    ed:17:ff:ef:d0:22:c7:97:9b:cc:ba:89:08:a0:21:
                    62:2e:ae:cf:15:3d:6e:2b:ba:e7:4d:04:e3:94:69:
                    6c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DE:0E:B4:9B:29:8D:7A:96:F6:15:33:D2:D2:11:CB:70:5F:A2:23
            X509v3 Authority Key Identifier:
                keyid:A5:99:88:EC:4D:6D:D5:BA:6A:30:F8:66:51:AB:56:2C:18:A6:A3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZmI7E1t1bpqMPhmUatWLBimo04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:e9:9f:a5:bb:22:e8:a3:53:48:55:fa:8d:ff:15:fe:a7:b3:
         9d:68:0e:c9:c6:f5:27:6b:0b:53:73:16:bc:40:56:85:3f:c6:
         18:e4:7b:49:fc:75:88:56:02:2e:94:32:9e:aa:c8:f4:ae:3a:
         91:9f:9d:84:5e:26:cc:fc:c6:dd:63:9d:90:80:ba:e4:97:16:
         83:15:72:94:a7:d7:40:de:ff:39:89:95:fd:56:7d:9c:9b:78:
         bf:f2:76:9a:77:d1:69:1a:73:66:9b:fe:20:02:e0:60:af:16:
         af:b7:fd:38:a4:6d:bf:52:a0:69:b7:07:1b:d8:07:68:66:5a:
         93:23:0f:a2:33:78:67:31:2b:2b:b1:92:58:ae:35:a8:10:32:
         49:48:f5:fa:17:87:cc:2c:28:db:14:e4:69:6d:09:d3:26:a4:
         96:02:63:b3:7a:3d:88:5f:35:03:b6:c6:77:49:a1:05:94:05:
         1a:e9:18:bb:15:64:e4:1e:0c:c9:ea:86:48:4c:21:43:8e:76:
         15:28:59:2f:e6:38:ad:79:f8:5c:7d:de:41:e3:5c:07:d9:60:
         d1:8a:41:34:aa:96:d4:37:a6:51:66:34:76:7d:94:68:6c:7b:
         2a:4a:62:90:28:df:f9:8b:f3:ac:ba:3b:74:b3:ea:70:d1:41:
         8a:1b:bd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:55:58 2026 by rpki-client