Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft
File:                     89pR_oC82pcIdSXiBGIeqfVXQZk.mft (raw, json)
Hash identifier:          3VxxFB7FeIScMhwXvnRyCvFd7/5P/SuEsl7jG9sSSqU=
Subject key identifier:   57:A2:E4:D0:0D:31:15:87:09:C5:F4:04:37:D3:E5:16:72:74:51:5A
Authority key identifier: F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99
Certificate issuer:       /CN=A9147CDA/serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199
Certificate serial:       02B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft
Manifest number:          0298
Signing time:             Mon 21 Sep 2026 02:06:22 +0000
Manifest this update:     Mon 21 Sep 2026 02:06:21 +0000
Manifest next update:     Mon 28 Sep 2026 02:06:21 +0000
Files and hashes:         1: 89pR_oC82pcIdSXiBGIeqfVXQZk.crl (hash: wB7uZ0LL6Pz4fL3aH/UkWuAJTNHqJzmk4LIFGzldce4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl
                          rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:06:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 692 (0x2b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147CDA, serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199
        Validity
            Not Before: Sep 21 02:06:21 2026 GMT
            Not After : Sep 28 02:06:21 2026 GMT
        Subject: CN=6ab0911d-f1da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a1:d6:7f:de:9c:cc:07:78:02:87:b9:c7:16:
                    79:e3:5e:e3:4b:77:f2:6e:cc:51:49:b4:e5:29:64:
                    44:1b:65:4f:05:7d:a6:2b:46:4d:b4:5d:24:63:2f:
                    47:9a:69:dd:7e:67:14:ce:63:f9:db:fe:1c:0d:e6:
                    92:6c:fb:f4:90:18:02:1d:2d:1b:1a:0a:22:e8:7c:
                    97:05:c8:56:16:e7:76:2f:e6:ec:b9:27:c0:2c:31:
                    25:4a:bb:87:a6:a5:33:0c:40:db:b2:46:e2:5f:24:
                    79:2b:b4:8d:76:b0:a1:03:8d:e4:81:98:2c:c8:c6:
                    79:82:22:3c:3a:59:81:96:f5:5f:54:4e:fd:8d:14:
                    49:90:1a:5b:54:a7:f0:ab:3b:c5:64:86:04:10:e6:
                    55:04:39:8e:94:87:2e:a3:7f:97:5e:06:13:53:ea:
                    e3:f8:e6:3a:d0:99:5f:a4:14:32:8d:5b:1c:f2:6f:
                    43:4b:30:52:5e:95:24:f6:6d:a1:d1:5d:41:a9:47:
                    62:30:4f:50:52:c6:47:a1:8c:90:dd:96:7c:c2:59:
                    10:b3:2d:5d:08:94:35:a2:d9:f2:2a:b9:eb:57:8b:
                    85:9d:3a:8f:d6:60:87:a5:6d:fd:a1:91:10:49:d8:
                    44:e5:91:6b:61:0e:29:7c:5f:60:70:58:8a:86:99:
                    a7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A2:E4:D0:0D:31:15:87:09:C5:F4:04:37:D3:E5:16:72:74:51:5A
            X509v3 Authority Key Identifier:
                keyid:F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ce:f1:80:5f:e7:be:77:f4:b5:db:5f:8f:33:52:d1:7e:10:
         0b:e3:33:d5:8a:94:ae:c8:4e:1a:fd:40:40:27:87:ac:02:26:
         b7:e8:79:70:be:81:a5:e8:ef:5b:e3:74:7f:eb:64:f5:d1:32:
         3c:74:55:a1:4d:c4:c3:58:a1:3a:ef:ff:77:3e:00:71:d9:84:
         ef:ff:7b:94:68:04:09:92:86:b5:e9:c5:bb:63:a0:9e:cc:97:
         fd:23:ab:d1:9b:61:de:8d:d8:b3:b1:27:e8:4a:9b:e7:7e:f4:
         3b:0c:fa:e9:8a:b5:df:d8:23:a7:2e:02:da:96:20:6e:2e:76:
         98:15:83:de:3f:f4:23:ab:75:f3:b8:11:ba:1e:33:df:52:23:
         44:4d:d1:61:47:bb:e2:7d:20:32:e0:3b:a2:84:ea:0e:33:aa:
         8f:8e:58:bc:1a:8b:2b:8c:17:2f:06:ef:24:4a:58:89:b7:4f:
         be:69:0e:aa:7c:fa:a6:47:54:43:24:68:aa:b3:88:7a:ca:50:
         69:0d:05:e3:03:97:89:ef:f7:55:b5:6d:fe:38:88:86:c6:19:
         cf:b9:49:9e:e1:aa:e9:b2:de:6e:5b:2a:d8:fb:1e:53:05:7a:
         89:b7:5c:f7:fa:f7:68:49:c9:56:8f:de:3e:8e:95:53:ee:bf:
         83:f5:ce:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:24:46 2026 by rpki-client