Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
File:                     D6nlM-haGDwUUwAIqLliP4VtXes.mft (raw, json)
Hash identifier:          D/D54wOoy6wPWtmS292VnREaIQvgh8SgD4iqLO8du2A=
Subject key identifier:   13:2B:5F:DA:59:CA:4B:A2:20:1F:0E:CA:3F:B5:2E:AD:13:68:8A:8C
Authority key identifier: 0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB
Certificate issuer:       /CN=A9160455/serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
Certificate serial:       0D31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
Manifest number:          0D0C
Signing time:             Sun 20 Sep 2026 18:21:58 +0000
Manifest this update:     Sun 20 Sep 2026 18:21:57 +0000
Manifest next update:     Sun 27 Sep 2026 18:21:57 +0000
Files and hashes:         1: D6nlM-haGDwUUwAIqLliP4VtXes.crl (hash: L5lJXL+ivjRn1KdPCErjKJp+DG24r897bBd0NHmsQ2g=)
                          2: 49E515C2C0F211EEA14E0122C4F9AE02.roa (hash: p394FBhliDkNgoB99ryNw/y0SY40oLYwgw+ljbC9OLc=)
                          3: AADE9E9C5B9511EEA8190143C4F9AE02.roa (hash: ZfQ6vCvmZcjNcIncHT507Vz1iEI/7E5CygjpXRzzNSI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl
                          rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 18:21:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3377 (0xd31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160455, serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
        Validity
            Not Before: Sep 20 18:21:57 2026 GMT
            Not After : Sep 27 18:21:57 2026 GMT
        Subject: CN=6ab02445-9cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3d:4e:10:e0:dc:f1:63:81:53:88:a4:cd:e8:
                    ea:ab:f1:20:d7:2a:6d:18:d0:7a:4f:40:8e:41:2a:
                    35:0a:13:50:51:e2:49:55:40:b3:b2:0e:ec:cf:29:
                    ce:9c:06:13:d4:88:3a:99:cf:32:bd:e1:80:aa:0f:
                    44:1b:2d:36:0c:61:c1:2f:43:39:29:37:7e:0b:49:
                    66:b5:67:4f:71:3b:03:de:3f:95:cf:18:5f:be:01:
                    cc:92:c9:3f:f8:c4:e1:f6:f5:7e:24:38:64:84:9e:
                    b9:85:c9:19:78:7c:9d:9d:c5:4e:00:d0:b4:68:e4:
                    45:33:fa:68:45:f3:3b:e4:cd:89:de:af:ae:35:a0:
                    b0:53:31:c2:89:52:75:4f:96:7b:6a:ec:36:ee:1b:
                    a2:39:4a:b4:00:ca:cf:97:de:65:5c:39:c2:eb:d1:
                    9a:9a:17:67:ca:1f:1c:b0:8c:ee:fe:52:21:5f:fb:
                    cb:ef:d8:4d:4d:49:1a:ad:bf:41:9d:27:6e:4c:a1:
                    a9:40:30:3d:2a:75:39:16:54:7a:d1:73:e5:23:70:
                    ea:eb:38:37:c6:eb:39:b3:cb:a2:f6:3a:77:75:c3:
                    dd:0e:51:ca:04:a5:a5:85:98:5a:04:23:5b:d9:21:
                    23:3f:13:6a:11:19:1c:20:e5:2b:35:bd:a5:0f:a8:
                    a5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2B:5F:DA:59:CA:4B:A2:20:1F:0E:CA:3F:B5:2E:AD:13:68:8A:8C
            X509v3 Authority Key Identifier:
                keyid:0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:cd:b8:9a:b1:75:5c:2d:1d:73:57:97:28:b8:3d:7a:0a:6d:
         63:85:86:cc:c9:55:70:5e:ce:1e:d8:0f:a6:74:5b:58:32:bc:
         e4:66:2d:40:b5:b8:4f:27:07:ef:5e:12:00:2b:c6:d3:79:46:
         e8:63:37:82:69:cf:8a:e1:cf:80:ed:4e:c0:45:69:d0:fd:4e:
         c9:89:63:6c:28:d6:6f:ad:28:38:ce:94:80:63:b2:e4:92:15:
         49:d6:0e:b4:3e:2c:9f:7a:2a:fe:a9:dc:31:9c:2b:34:6b:46:
         07:d7:1c:5e:40:fd:71:7f:0a:13:f8:68:6a:9a:7c:28:b5:53:
         3e:e2:7c:1d:22:a1:d3:0f:f2:d4:d6:ea:3e:d3:02:03:06:42:
         e9:11:c0:18:60:c6:be:25:94:d5:38:cd:6d:4f:8f:b7:03:eb:
         90:f8:15:c8:00:fa:7f:72:dd:94:aa:7b:68:ad:59:63:1a:14:
         cd:16:f8:72:b6:dd:b3:44:05:a2:ac:03:a9:51:a3:23:cd:ee:
         32:70:e3:33:e7:39:00:90:4c:89:64:28:02:09:b5:97:f5:0e:
         53:4a:c1:e0:49:99:49:a9:9a:14:17:c2:7c:17:aa:6b:c0:f5:
         13:e3:44:1d:5f:b4:ce:40:52:b2:e1:b1:7a:22:38:0f:b7:d7:
         ec:10:6c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:46:13 2026 by rpki-client