Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
File:                     T191psKYj1i2AwEqjbRFofN9XXI.mft (raw, json)
Hash identifier:          gAvaNFwKzjl3BYoS8VIce2whV/vDdY0LOMq+npkwURw=
Subject key identifier:   C9:ED:9B:BE:C0:CB:B4:71:CE:3B:9C:74:49:2D:50:38:2C:9E:E0:8C
Authority key identifier: 4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
Certificate issuer:       /CN=A914C3FB/serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Certificate serial:       0182
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
Manifest number:          014B
Signing time:             Mon 21 Sep 2026 05:56:39 +0000
Manifest this update:     Mon 21 Sep 2026 05:56:38 +0000
Manifest next update:     Mon 28 Sep 2026 05:56:38 +0000
Files and hashes:         1: T191psKYj1i2AwEqjbRFofN9XXI.crl (hash: I8NJ6GuNyZ+iMat2WYqIqSZhQzhPWHoQKcf/6fUxu7Q=)
                          2: 32332AD83C8B11F1B51BFC899C833773.roa (hash: SqSvzXIRIVpELXR4zfaIkWV4fICk8+OR6AsXIXWCiYc=)
                          3: 296AC8B4A5D811F1A738BF2F3611F970.roa (hash: CQnCoRFdfoOMZ69yJprZvbmvvCNKoIKIobem+EKkuls=)
                          4: 52040BECDCBF11F0B2EC67DA4A6F56BC.roa (hash: Wc1DoOxBicG+sk0xmxn0G7rVUatGjhMhpQRJFhbrHSQ=)
                          5: 502C3A08DFBA11F0A83E81424B6F56BC.roa (hash: 6xHuo0DnepEGRmB08a/9C8nmjyPvfstg4avyUEG2ltc=)
                          6: 7B38FA86A5D711F18B57491F3611F970.roa (hash: Qu1AHu1CC+TqDNyF3QGCgiURM+F5fmgCxLQCL8tZhCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
                          rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:56:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C3FB, serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
        Validity
            Not Before: Sep 21 05:56:38 2026 GMT
            Not After : Sep 28 05:56:38 2026 GMT
        Subject: CN=6ab0c717-f3f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ed:24:d8:52:bb:43:46:87:9b:d8:01:f8:38:
                    02:21:d3:cf:e4:fd:04:67:c3:75:41:52:9a:05:b9:
                    cd:d8:f2:5a:23:ba:d6:45:75:2a:49:a5:76:c5:63:
                    8d:87:99:fa:a6:31:0e:21:7c:d8:18:b4:57:e1:78:
                    0d:64:a8:99:06:fb:ba:84:76:96:b2:fd:46:3e:ec:
                    38:67:ad:97:dc:d3:69:0e:97:2d:55:cd:20:47:c5:
                    b8:0b:eb:08:b8:ab:01:0a:ca:7e:45:77:68:24:20:
                    6e:9b:b1:59:b3:de:19:99:3c:2c:20:5b:65:f7:d3:
                    2b:c1:89:d4:d6:df:d3:bd:ee:8f:42:5a:0e:f7:7e:
                    88:4b:b8:e4:0a:f2:67:01:46:69:d0:4c:ef:07:7c:
                    16:05:29:e2:e4:de:f0:a1:ab:65:84:56:0b:ad:af:
                    22:ac:91:c0:82:9a:88:12:58:bb:76:69:e3:a8:d3:
                    b9:53:35:3f:e2:fb:1c:57:72:14:b8:33:68:92:55:
                    69:b2:76:7b:cc:93:bf:bf:88:84:ec:87:4f:ff:79:
                    32:94:71:18:29:53:f2:46:2b:7d:53:cc:a3:e5:70:
                    61:6f:97:81:11:55:ee:1a:8c:d8:fb:aa:64:60:21:
                    38:97:a0:9f:77:c1:c4:fc:fc:1f:18:5e:3e:2a:3c:
                    fd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:ED:9B:BE:C0:CB:B4:71:CE:3B:9C:74:49:2D:50:38:2C:9E:E0:8C
            X509v3 Authority Key Identifier:
                keyid:4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:ae:47:21:9b:0d:3d:05:60:74:ec:a2:4a:46:a7:d6:01:b1:
         07:1c:64:00:ec:eb:79:f5:6e:ce:65:3e:2a:ff:3e:43:36:b4:
         a6:18:b5:33:fb:71:ab:b2:67:22:90:3a:29:b6:db:7a:a9:67:
         e1:9d:e6:66:4a:ac:e1:7f:76:c5:54:41:35:d2:b9:93:92:12:
         ea:7e:82:c6:fa:1d:0f:47:eb:3d:11:24:72:9f:63:02:2e:bd:
         62:d2:08:e8:ce:85:f2:ae:25:42:ea:24:5b:d1:d0:4a:7d:b9:
         10:fa:a3:e0:8a:11:65:54:ed:9d:cb:78:11:68:ee:27:2a:79:
         6d:e3:fb:c3:23:8b:54:ca:c5:04:92:00:a0:f3:fe:3d:18:ac:
         d1:f0:a7:78:38:36:c7:43:82:ad:cb:e1:54:63:7b:74:93:59:
         35:23:19:eb:ef:5a:cf:2c:ed:56:77:1b:95:3f:ff:ce:ca:8e:
         1e:08:74:3c:2f:f0:e3:b4:31:a1:ac:19:b0:55:98:eb:c6:3b:
         d4:f9:da:42:46:d1:28:de:27:ed:66:fc:9c:08:6b:72:98:c4:
         2f:b7:53:1c:ed:7c:7c:a8:0f:6d:80:1b:35:57:1c:b5:e1:c3:
         38:95:1f:e1:b8:2f:0e:04:96:16:a8:36:14:00:dd:4d:34:a9:
         2a:ce:a0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:05:01 2026 by rpki-client