Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
File:                     CfwHfzPjrWe_FHdVFno61OrLHnw.mft (raw, json)
Hash identifier:          AHmNPYwkq4scELGsXS/z3OfYE49rvIudTbhGJQeBbhY=
Subject key identifier:   AB:C9:51:E3:24:23:EE:52:79:1F:9D:A1:8B:9E:34:02:3A:4B:AA:55
Authority key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
Certificate issuer:       /CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Certificate serial:       077D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
Manifest number:          06E5
Signing time:             Fri 02 Oct 2026 22:55:19 +0000
Manifest this update:     Fri 02 Oct 2026 22:55:18 +0000
Manifest next update:     Fri 09 Oct 2026 22:55:18 +0000
Files and hashes:         1: CfwHfzPjrWe_FHdVFno61OrLHnw.crl (hash: UYVtF1goih3RZMHeYnRqOZVQDcXogoOG835j8tG2wh8=)
                          2: 32A0AE9A487111F1B156B37CA7833773.roa (hash: DKe9Z65ECDEnGziuZbJ9KLM7gjdSljl8GxgLXc635yg=)
                          3: 8D664A16A25C11F19D382E926011F970.roa (hash: LWyLS10UuV6wfy1JeOA6UNLZZwSP/rMl0ubgGjKS/Ww=)
                          4: AEEA30A444C911F0B1847067C4F9AE02.roa (hash: dH0ygpV7vVR6WPP93i2YDDYSIOB5Zm2w4tTvZ0XAWas=)
                          5: ACDC465C7AEF11EFA321CE80C4F9AE02.roa (hash: 68nTBOCU/1/3H8N2zjrctZPWLd9ya5LsGa6lIGjMhkc=)
                          6: 30904BA8329711EE8EC1E923C4F9AE02.roa (hash: 0d8bbf6HjJPorzi+T4Hyc8LZ4syqGpJzbgTNxkLreXg=)
                          7: 80AD3A9AE53E11EB9E429C44C4F9AE02.roa (hash: X+spXolOWWwuHY9Z83c9dy9Vthj0rRVggTg5yRTJYB0=)
                          8: 639394F4B05611EF95B2931BC4F9AE02.roa (hash: QT8qZMQxmuuDteCOnOSOp3NwZ0+//1IQE1zDb3G1+qs=)
                          9: 81618D88E53E11EB9E429C44C4F9AE02.roa (hash: 5OgF+X2LoxN0P+i647U0hTdD4GO+IWC1F/YvG+N71mY=)
                          10: 167A6086BBD211EEABCC0D23C4F9AE02.roa (hash: 39GHxxx7Fn5zKnCQd2JJT99uUGGd/APAhehkZtN8lrM=)
                          11: 7F2A4208E53E11EB9E429C44C4F9AE02.roa (hash: Xo9SbW0hHxgSfQuZO4oC/bgXuLNqUVMBniXjZSkvX0c=)
                          12: 8023B518E53E11EB9E429C44C4F9AE02.roa (hash: PmZWdw64LAwMI3NXzeEum/iMQ1lGbZaRPEZVFE8w0Kc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl
                          rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 22:55:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1917 (0x77d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161613, serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
        Validity
            Not Before: Oct  2 22:55:18 2026 GMT
            Not After : Oct  9 22:55:18 2026 GMT
        Subject: CN=6ac03657-b3d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a0:28:fa:4b:80:6c:73:c0:2d:62:a4:53:52:
                    9d:66:93:bb:b6:22:66:18:be:64:5a:12:1c:82:0f:
                    75:ae:07:15:78:d1:bf:ec:62:c4:1f:a3:9a:6d:80:
                    99:34:61:f7:06:bd:ad:f0:99:a7:4b:24:87:03:e6:
                    2f:e1:b5:39:1e:0d:ac:e0:84:9d:a2:72:70:3a:0f:
                    1e:6c:91:be:14:2c:ba:ba:f4:8b:55:ed:13:57:77:
                    e6:05:2c:4c:ba:55:f7:b1:63:f8:f8:bb:77:64:46:
                    a4:f4:2c:97:57:b0:d0:00:39:72:6d:4a:f9:33:af:
                    17:7b:d9:7b:76:f3:58:75:78:99:30:d3:10:73:81:
                    14:16:d0:be:f7:95:cf:8f:74:41:59:6e:ef:f0:e5:
                    ea:59:8f:5e:13:d8:a0:12:af:08:d8:7c:32:7f:59:
                    b0:07:70:9c:8d:a1:07:83:5a:61:09:32:aa:23:93:
                    c4:c0:8f:63:62:bf:9d:70:22:5e:5e:af:d4:21:0a:
                    7a:26:86:24:d1:a3:45:81:2c:7f:a3:c1:b3:3c:36:
                    38:1a:5f:93:45:0c:52:74:5c:4b:6c:b5:88:aa:92:
                    a4:a3:49:aa:09:58:ec:74:1b:ec:3b:8e:a9:50:37:
                    4f:5b:78:ac:73:a0:d0:4e:01:a4:aa:a4:c6:a1:eb:
                    d3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C9:51:E3:24:23:EE:52:79:1F:9D:A1:8B:9E:34:02:3A:4B:AA:55
            X509v3 Authority Key Identifier:
                keyid:09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:13:6d:02:c5:d4:66:fd:35:cc:bf:f0:71:7e:9d:0e:5e:29:
         e4:e2:c2:eb:32:19:47:94:df:5a:27:79:09:2e:9d:c1:68:4d:
         9f:66:54:2e:e8:48:18:24:d5:0f:59:5b:c7:46:9a:6f:0e:26:
         4e:56:1b:dc:6f:e3:07:e9:65:e0:43:4a:01:95:ca:aa:0b:3f:
         20:15:06:a3:2f:c4:be:16:67:24:aa:75:41:99:e0:d5:97:93:
         f3:d5:64:4e:1f:fe:12:0f:c8:a6:ba:27:2e:5a:00:85:a8:f8:
         65:01:52:29:71:ae:cf:c7:4e:22:0b:b4:97:b3:bb:f5:d4:2a:
         d4:c9:e3:3e:ae:74:64:18:3f:de:0f:02:dc:85:12:cf:ff:75:
         49:26:98:a1:20:7b:7a:f5:b1:11:f1:f0:e3:9c:c5:2e:d4:02:
         2e:2f:de:b3:69:da:f3:0b:f0:a9:ca:eb:55:e1:46:ba:a2:6c:
         04:12:f4:59:ee:d4:16:59:14:11:d7:16:b8:bd:fb:50:68:a0:
         11:13:d0:eb:df:cf:ad:1d:d0:6d:0f:5e:be:92:8b:cb:d8:79:
         8b:99:4a:ca:03:bc:45:be:4b:1f:99:d3:cb:3e:38:47:87:6d:
         5f:d2:e9:4c:32:71:d5:b1:e1:bf:60:8a:38:1c:b3:74:7e:d4:
         6d:3b:0c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:08:12 2026 by rpki-client