Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft
File:                     R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft (raw, json)
Hash identifier:          9tHCO5YFn1NUoGCTwdzh8OoJXzDFyQghViiQX+r0ZQQ=
Subject key identifier:   05:C2:19:FA:8E:62:A5:0E:31:48:2B:52:A4:D8:DB:6F:BB:E9:E5:AC
Authority key identifier: 47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7
Certificate issuer:       /CN=A9158DC6/serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7
Certificate serial:       0377
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft
Manifest number:          036C
Signing time:             Sat 19 Sep 2026 00:44:44 +0000
Manifest this update:     Sat 19 Sep 2026 00:44:43 +0000
Manifest next update:     Sat 26 Sep 2026 00:44:43 +0000
Files and hashes:         1: R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl (hash: jNOaMB3SeIt7NWem4xcnrvFs1EGga7+fejCKMHGQb/w=)
                          2: F80BF07C107B11ED9B3C5410C4F9AE02.roa (hash: xwuBUsXePKpvMYj/ZZ+LZ8VttYRBb2/xivwKeGbI3bE=)
                          3: 05D86F1058D411F198F2A881A5833773.roa (hash: khtXuRN2/6rEPemqebTu2pFMVWjbyHDtvqkyXHj0hmY=)
                          4: E961050E58D311F18E39767BA5833773.roa (hash: SGyrZgoOyY3v7LefvD/KwjXbi3mtFgtFoBnUddJJDfk=)
                          5: EA83E6F458D311F18E39767BA5833773.roa (hash: 7aqLjxsVl/1/yFN4z+qOSpO/mBLZpSJYB4XFpd0ZCI4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl
                          rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887 (0x377)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158DC6, serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7
        Validity
            Not Before: Sep 19 00:44:43 2026 GMT
            Not After : Sep 26 00:44:43 2026 GMT
        Subject: CN=6aaddafc-dfeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bd:5d:dc:9f:47:27:63:62:c4:7f:f3:37:1c:
                    86:3f:62:88:24:08:6b:cf:a8:6a:9c:31:34:56:71:
                    fe:ed:e2:30:66:ea:71:e3:fb:ed:7a:e6:3b:c2:63:
                    e2:63:c6:d7:4e:2e:1d:6f:f5:e4:81:d2:e7:f9:c6:
                    1d:36:68:92:c5:db:8b:a2:ec:39:4a:e5:27:1c:a9:
                    81:60:83:8b:59:f0:39:55:33:47:7d:b6:0f:ac:eb:
                    d4:2e:50:20:d0:bb:4f:3f:ed:b1:b4:be:26:d1:96:
                    3b:fa:96:3d:52:fd:e1:7e:47:de:5e:7c:ba:dd:3c:
                    2e:ea:1e:4b:e5:14:0f:ac:7c:a8:aa:67:e7:33:2e:
                    3b:47:59:6e:49:a0:36:2a:cf:c8:85:21:9d:83:d3:
                    be:2a:bd:ca:bb:ec:37:fb:75:ff:44:1d:cb:5c:00:
                    bc:bd:12:00:c3:95:b5:74:51:d9:99:cb:c4:b8:80:
                    c0:e7:0a:1e:3c:5a:35:be:58:07:73:0a:77:b5:46:
                    e3:d8:32:b5:f1:48:1f:a3:0e:bc:30:98:b9:d4:e0:
                    c1:3b:61:66:b2:f1:35:a8:83:dd:6c:2f:b8:98:a5:
                    43:28:87:79:27:c2:dd:6c:65:eb:ee:59:d2:b8:28:
                    6d:d8:5b:ff:e2:06:ac:cc:f7:07:38:de:78:76:9d:
                    5d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C2:19:FA:8E:62:A5:0E:31:48:2B:52:A4:D8:DB:6F:BB:E9:E5:AC
            X509v3 Authority Key Identifier:
                keyid:47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:ac:d0:b2:42:e9:0e:fa:d1:f4:2a:7d:59:86:1d:29:d8:62:
         f7:8d:42:58:f7:61:3e:a1:2e:54:6a:d5:70:ff:37:79:a0:3d:
         00:d3:2d:0f:e2:67:af:b7:62:60:ec:80:cd:f6:5d:ee:90:1f:
         52:06:8d:e5:b5:2a:4b:b8:08:a6:2f:f1:4b:29:54:7a:54:f0:
         7e:e7:9c:31:72:a6:8d:3e:e9:e1:61:f3:c5:80:e6:03:6d:e8:
         61:ef:f4:a6:71:21:27:a9:14:e2:cf:fd:92:b6:49:79:1b:01:
         fe:b9:7e:b6:1f:f3:c0:65:90:5a:48:38:55:c7:ba:5f:11:f3:
         af:84:c4:07:5a:5b:89:26:10:2e:af:94:c4:89:0c:73:05:57:
         78:5a:14:f1:1e:e0:87:5a:39:d0:a5:53:36:b0:55:23:cb:c7:
         b4:28:98:0f:b0:db:68:c1:7b:f5:a9:81:10:70:ea:49:f5:d1:
         18:6d:c2:66:43:2a:86:24:1f:eb:07:31:9f:b8:cd:5e:6e:6a:
         b3:df:c7:a7:2d:f0:bd:63:41:79:89:56:47:87:93:75:bb:3d:
         8a:62:e6:09:d0:b6:ad:94:72:a3:0a:57:4c:16:1f:bc:e9:de:
         dc:88:94:01:ca:fa:f2:65:32:72:24:d3:af:40:ee:c6:44:4f:
         9c:a5:fd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:35:17 2026 by rpki-client