Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
File:                     MsAhMRti_kUAvI5OD0hSxkvF2ss.mft (raw, json)
Hash identifier:          cj6yR1gCeht6HHUm+O1AwFMVIB/eXy9ZUoM8mNb6WHU=
Subject key identifier:   C1:52:BE:FC:96:3C:37:3A:4D:DC:76:88:C7:38:5E:93:52:26:B2:6F
Authority key identifier: 32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB
Certificate issuer:       /CN=A915D8F3/serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB
Certificate serial:       016B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
Manifest number:          0166
Signing time:             Mon 21 Sep 2026 03:37:23 +0000
Manifest this update:     Mon 21 Sep 2026 03:37:22 +0000
Manifest next update:     Mon 28 Sep 2026 03:37:22 +0000
Files and hashes:         1: MsAhMRti_kUAvI5OD0hSxkvF2ss.crl (hash: yBRQlk1eOZW6tQvu3uKTHlUAy7aRa39fDQvi1qeIE28=)
                          2: 37DEC83C9DEC11EFB004850FC4F9AE02.roa (hash: FNB/Vhah+1KKF+D8+8ZX+5xp4x5bxuKgnMy6uZOCSaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl
                          rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D8F3, serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB
        Validity
            Not Before: Sep 21 03:37:22 2026 GMT
            Not After : Sep 28 03:37:22 2026 GMT
        Subject: CN=6ab0a673-6c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:56:be:d6:fc:1c:2c:62:f4:e3:e1:0a:15:3b:
                    ad:d7:17:74:ee:88:b9:11:2c:b9:53:a4:7e:5a:91:
                    2b:d7:17:8e:be:b6:be:66:24:00:9b:c0:06:4e:2e:
                    1a:54:0c:16:66:63:b3:41:c9:4f:1c:d1:47:9d:5c:
                    b4:83:ac:f4:ec:2d:4d:ce:be:c9:e1:80:5d:ef:4d:
                    81:c7:d8:94:bc:ef:f8:ec:80:af:5f:b9:4d:31:c8:
                    10:83:7a:50:74:fa:68:d7:dc:ea:88:aa:1e:c1:32:
                    e3:75:86:39:88:4e:19:b7:c5:02:91:df:3e:c7:1e:
                    67:65:a3:06:a4:51:fd:37:c5:6b:a2:bb:44:e2:77:
                    30:b9:bc:6a:a8:06:ee:b8:69:f3:59:f5:0c:05:49:
                    13:da:17:ad:28:0f:75:09:b0:9e:32:2c:42:c2:a0:
                    c3:2e:38:68:a8:49:3c:91:17:6c:42:b1:68:47:30:
                    17:de:96:6d:a7:3c:81:d3:14:7f:60:8a:d9:7e:3a:
                    53:c4:46:b1:b2:47:5c:f0:10:34:0c:84:fd:5f:b4:
                    60:f8:ac:72:3a:74:29:36:cb:64:cc:c9:dc:93:d8:
                    9e:99:db:8a:5a:b1:09:46:e5:de:e7:17:94:a5:bd:
                    63:b0:9d:2b:5b:ab:c4:0a:8b:1f:62:fc:c2:be:ae:
                    27:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:52:BE:FC:96:3C:37:3A:4D:DC:76:88:C7:38:5E:93:52:26:B2:6F
            X509v3 Authority Key Identifier:
                keyid:32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:cb:1f:4a:84:bb:22:21:a0:78:bd:9d:ab:54:63:d1:98:42:
         3e:12:9a:fc:f4:66:7c:0c:a1:4b:51:a2:dc:2c:62:b4:99:cc:
         43:9e:c5:e1:b6:cd:a7:72:ba:65:9a:8b:4f:df:45:8c:03:21:
         10:e8:7e:48:1a:0e:a2:64:0f:da:1d:e7:10:76:2f:15:64:6b:
         82:aa:b9:0a:d5:63:25:60:54:24:49:ac:05:44:a8:a2:fb:ee:
         cf:8f:74:45:6f:a6:27:7e:dd:be:65:d0:de:05:72:62:e4:ef:
         1d:fa:f4:69:ba:5b:39:0c:31:f7:cd:bd:cf:a0:1d:b7:52:34:
         06:f1:eb:af:4e:e5:e2:a4:13:0f:b7:05:2d:54:6a:06:6d:02:
         22:4c:2c:57:42:10:45:1d:a1:01:c1:cc:55:bc:ff:be:72:51:
         d2:eb:e5:9c:c4:34:84:f5:a8:ee:57:80:94:f1:5b:f5:59:84:
         db:69:b1:22:bc:01:0e:93:7e:83:0c:f2:a3:53:a8:46:e7:23:
         8b:c8:3e:cf:a8:57:03:a2:d2:7f:e6:f4:f3:d0:df:ce:ba:24:
         89:0f:bc:43:34:29:1d:47:fb:b4:f7:ed:c0:5a:e2:00:61:d7:
         8a:d7:87:4b:ce:7e:7d:5b:ac:2d:54:45:40:8e:5f:78:23:63:
         db:8a:67:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:58:09 2026 by rpki-client