Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
File:                     mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft (raw, json)
Hash identifier:          ZmRQR663tbAPN5KeQd6kqMcnyyTYTuJYdshk1TlTSgY=
Subject key identifier:   A9:D3:E9:54:6B:7B:15:62:48:20:D7:18:FC:5D:FF:02:4D:EC:EE:67
Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A
Certificate issuer:       /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
Certificate serial:       3611
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
Manifest number:          35C7
Signing time:             Mon 28 Sep 2026 14:41:12 +0000
Manifest this update:     Mon 28 Sep 2026 14:41:12 +0000
Manifest next update:     Mon 05 Oct 2026 14:41:12 +0000
Files and hashes:         1: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl (hash: oppkI6DyFoqt68Ky854AY1xhB8LmUwwHiq3qZOInp1k=)
                          2: 925D8646772A11EBAE8A8181C4F9AE02.roa (hash: GHAiy1U9rxwuTHVrOO4W5yr6dZrHk1J4DMJnsgMqY/I=)
                          3: B35C646A52E211EAAF44AE23C4F9AE02.roa (hash: Pbz8SUu4Fa6QitdUmbJG9+WkFTgMMNMW+GHyYn+iC2M=)
                          4: 31745126CD1811EC917CB819C4F9AE02.roa (hash: G8AuTu7DkmkKWVjhwU/vCSBI+wvMCkDDSTrsyLfGoH0=)
                          5: 9322B46CAEB111EA8EFC2878C4F9AE02.roa (hash: yTJcTl5edJ4kNv98CPAK/m1H2g/dq/a73IywMpJw5X0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl
                          rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 14:41:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13841 (0x3611)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167B50, serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
        Validity
            Not Before: Sep 28 14:41:12 2026 GMT
            Not After : Oct  5 14:41:12 2026 GMT
        Subject: CN=6aba7c88-4994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:30:4f:cd:12:ec:17:02:cc:52:cc:db:49:50:
                    ce:aa:c0:39:85:fc:69:80:36:fc:93:21:a4:7e:9f:
                    17:99:cc:e2:ea:f9:35:89:41:2b:91:45:1e:a1:12:
                    ca:8a:26:7d:db:eb:e9:4f:2f:53:80:ba:0a:10:0b:
                    2a:76:02:a5:13:3b:31:fc:ed:4e:00:5b:13:2c:0b:
                    a3:1c:88:3e:d0:a5:cd:93:3e:71:82:25:60:4d:3f:
                    89:ac:40:76:14:d0:68:61:19:83:26:69:d3:55:60:
                    5d:9e:bb:e2:b2:0d:bc:4d:6c:ef:ec:88:a8:6d:d6:
                    60:3b:2e:3c:6e:a6:34:29:8b:77:f0:50:34:4b:1f:
                    13:4f:21:21:20:78:a6:66:3f:f0:55:0a:a2:b9:a2:
                    34:30:d7:41:a4:ad:c4:9b:33:36:ff:77:35:23:6a:
                    70:1a:0a:7e:49:1c:2f:c1:80:e1:93:ae:bd:7d:b9:
                    8e:27:60:12:2e:2f:7c:53:0a:2d:19:ee:70:5b:32:
                    a5:80:6c:d8:ec:c7:a8:b3:18:0a:a6:01:fa:cd:5f:
                    cf:33:fc:be:f8:49:34:3d:d4:0d:68:47:8c:30:0d:
                    f5:4a:f5:2e:36:88:e0:5f:15:f0:e1:77:63:dd:4e:
                    a8:c8:9d:d5:8e:9f:55:ce:13:3b:ac:7e:57:3e:d6:
                    64:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D3:E9:54:6B:7B:15:62:48:20:D7:18:FC:5D:FF:02:4D:EC:EE:67
            X509v3 Authority Key Identifier:
                keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:09:5f:1c:15:5b:de:b4:45:26:a9:78:00:a7:db:f0:aa:99:
         5c:d7:87:d4:2c:de:07:2f:ff:dc:62:e5:64:81:50:b4:f0:29:
         84:77:fc:05:f5:ca:dc:b8:cb:03:03:59:f8:70:95:5e:fd:a1:
         2f:62:e4:71:4f:c0:7f:93:3e:2e:81:45:68:68:86:2d:47:39:
         0a:99:d0:12:68:c6:50:dc:46:99:2b:0a:73:b6:ce:a0:94:40:
         01:a6:e4:f5:e9:93:a8:c0:29:cd:47:cb:1d:dd:98:91:87:6c:
         0b:73:c7:2d:b6:cc:aa:fc:6b:38:f2:53:43:74:63:81:5e:46:
         1f:cb:59:2c:0a:4b:21:b6:8c:ed:00:31:9a:7c:e2:7f:2e:9e:
         b8:f8:e4:8e:a8:46:62:dc:3e:60:60:f3:cb:e5:d6:6b:e9:44:
         4a:b2:d6:55:3c:8f:c1:cf:80:75:d6:8d:41:62:9d:01:3b:34:
         30:35:58:7e:6d:b4:1e:57:54:2c:e6:c3:24:c4:2f:df:bb:72:
         2c:f8:81:cc:f6:3e:0c:5a:7a:e2:b3:f9:00:a7:a2:28:39:a8:
         b7:79:ef:9b:55:de:f4:8f:f1:79:fe:01:29:70:3d:5d:09:b4:
         05:43:37:f4:8d:85:ea:93:45:8d:de:46:1f:f4:33:5e:50:1f:
         7a:f2:b5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:55:27 2026 by rpki-client