Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148434/D4A296E2662411F183922A2D9E47A888/i4f5EN4ow-1DtwrIyFVDfpSlFN8.mft
File:                     i4f5EN4ow-1DtwrIyFVDfpSlFN8.mft (raw, json)
Hash identifier:          FmBwWfaH8Cel2g/dnzn1l+CzveraO8UTy17vTPsbi7I=
Subject key identifier:   93:A0:9B:6C:02:FB:6E:2B:53:60:03:B1:0E:3A:4E:73:2E:ED:C7:CC
Authority key identifier: 8B:87:F9:10:DE:28:C3:ED:43:B7:0A:C8:C8:55:43:7E:94:A5:14:DF
Certificate issuer:       /CN=A9148434/serialNumber=8B87F910DE28C3ED43B70AC8C855437E94A514DF
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4f5EN4ow-1DtwrIyFVDfpSlFN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148434/D4A296E2662411F183922A2D9E47A888/i4f5EN4ow-1DtwrIyFVDfpSlFN8.mft
Manifest number:          37
Signing time:             Wed 23 Sep 2026 08:21:37 +0000
Manifest this update:     Wed 23 Sep 2026 08:21:36 +0000
Manifest next update:     Wed 30 Sep 2026 08:21:36 +0000
Files and hashes:         1: i4f5EN4ow-1DtwrIyFVDfpSlFN8.crl (hash: 05hprUsJ/PyqR1PCUu+qVvKdbHSPM5oconq1C8x6YFc=)
                          2: C94BF19E662911F1B3091723A147A888.roa (hash: HtOAVYCqkE3fGkuw5gCvQcRd0jozLG+SV+vxhR2Bdhg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148434/D4A296E2662411F183922A2D9E47A888/i4f5EN4ow-1DtwrIyFVDfpSlFN8.crl
                          rsync://rpki.apnic.net/member_repository/A9148434/D4A296E2662411F183922A2D9E47A888/i4f5EN4ow-1DtwrIyFVDfpSlFN8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4f5EN4ow-1DtwrIyFVDfpSlFN8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:21:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148434, serialNumber=8B87F910DE28C3ED43B70AC8C855437E94A514DF
        Validity
            Not Before: Sep 23 08:21:36 2026 GMT
            Not After : Sep 30 08:21:36 2026 GMT
        Subject: CN=6ab38c10-5eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:17:93:99:3e:27:28:c9:2e:d9:ff:88:99:f1:
                    9b:ba:2b:cf:52:2e:e9:9f:5c:3d:6e:38:09:1c:26:
                    92:0d:3c:41:06:b3:30:94:36:54:df:66:38:b8:53:
                    32:0a:68:95:8f:68:c7:a0:a7:bc:3a:25:a3:d5:bd:
                    70:bd:95:66:37:dc:7e:bd:cf:e7:4f:92:01:b7:c3:
                    65:ac:12:0d:40:93:70:02:e3:b3:ef:eb:4d:1a:27:
                    e5:d8:b4:01:4c:7b:5d:c7:62:e6:35:e5:4d:f8:68:
                    8e:ab:d3:ff:59:d0:66:68:4f:b9:5d:2d:cd:43:50:
                    36:9c:72:09:e4:83:73:3c:77:a8:1c:76:2b:9f:65:
                    84:06:38:09:57:3e:2c:fc:18:e2:c1:c5:4b:ef:35:
                    fd:a6:fe:77:ef:05:1c:63:0d:62:d4:9b:89:e6:aa:
                    ba:a1:3a:1c:e0:1a:86:53:9a:fc:68:8b:93:4e:a9:
                    97:ab:a9:1d:db:bd:93:ab:58:67:42:97:91:4b:e3:
                    95:74:c3:f5:25:b8:52:96:06:49:5f:ca:b5:e3:3e:
                    44:b8:d2:a1:3e:54:53:ab:f7:4d:e0:47:ee:6f:93:
                    2d:0d:9b:24:98:e7:95:bf:58:e9:61:fc:fe:4f:15:
                    d0:bb:22:76:6a:5b:92:06:51:c9:fb:72:12:85:c9:
                    25:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A0:9B:6C:02:FB:6E:2B:53:60:03:B1:0E:3A:4E:73:2E:ED:C7:CC
            X509v3 Authority Key Identifier:
                keyid:8B:87:F9:10:DE:28:C3:ED:43:B7:0A:C8:C8:55:43:7E:94:A5:14:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148434/D4A296E2662411F183922A2D9E47A888/i4f5EN4ow-1DtwrIyFVDfpSlFN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4f5EN4ow-1DtwrIyFVDfpSlFN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148434/D4A296E2662411F183922A2D9E47A888/i4f5EN4ow-1DtwrIyFVDfpSlFN8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:5e:48:10:19:1e:f6:28:0b:f9:1e:c6:1e:94:1d:eb:ec:a5:
         73:49:4b:0b:34:b8:96:4e:c4:f3:0a:c4:d1:b5:88:ea:42:77:
         53:df:27:ba:ad:e3:c8:22:3b:34:ec:f6:29:78:4f:4c:a4:c3:
         2b:94:a1:5f:f0:4e:6c:c2:24:81:73:d7:b3:67:c4:a4:69:89:
         1a:8d:eb:e3:cd:b9:75:6b:c4:60:68:51:e0:9b:69:c8:3e:ae:
         8d:0a:be:26:1c:9d:9f:f4:2d:6c:7e:4e:28:8a:71:86:a8:82:
         4d:c7:ed:f9:a6:ff:84:e3:d7:42:3c:ec:f8:d0:a9:33:0c:f5:
         9f:a9:9a:8c:10:5e:01:b1:a4:19:1a:56:48:9f:9a:47:f2:4c:
         58:37:3b:9c:07:3c:ce:f4:62:83:2e:98:e1:cf:c8:c1:89:1d:
         be:32:2f:bb:a3:d7:b6:79:ce:15:f7:90:54:86:48:a5:05:4f:
         fe:f1:5d:cc:19:de:61:70:ac:ec:6e:02:2b:4e:f1:4b:06:2f:
         59:17:a4:d9:58:fc:f7:0c:1b:51:91:ca:a6:28:ad:54:8c:e6:
         a7:56:63:c1:a2:3d:5a:9f:16:a1:d5:15:29:57:d3:7f:96:8c:
         f2:27:65:08:2b:5f:0c:1f:68:fd:b6:1a:c0:3d:83:2c:cb:2e:
         79:c0:55:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:58:22 2026 by rpki-client