Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft
File:                     CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft (raw, json)
Hash identifier:          YyExwWDVKvcSYjfnyCW/VYHjbONjF2Xxxx96vDH3nhg=
Subject key identifier:   6D:F7:2B:57:3F:D0:F3:4A:28:68:3A:DD:A0:DE:F0:43:85:F7:4A:3D
Authority key identifier: 0A:61:52:83:4E:12:99:C1:1C:F6:E0:78:65:F7:65:B2:38:65:63:89
Certificate issuer:       /CN=A9168C73/serialNumber=0A6152834E1299C11CF6E07865F765B238656389
Certificate serial:       02A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmFSg04SmcEc9uB4ZfdlsjhlY4k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft
Manifest number:          029A
Signing time:             Wed 23 Sep 2026 01:33:22 +0000
Manifest this update:     Wed 23 Sep 2026 01:33:21 +0000
Manifest next update:     Wed 30 Sep 2026 01:33:21 +0000
Files and hashes:         1: CmFSg04SmcEc9uB4ZfdlsjhlY4k.crl (hash: PIRL5NxOLH3RvY5BrZEaZLKnAnPjtaCHVloAE5YPOcY=)
                          2: 63789A466F6311F1806CB0D05CA30FBC.roa (hash: T0VRJUqSDGXNXNzgzt6t13n6DnE9IjtHXKIHKZXv3Ns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.crl
                          rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmFSg04SmcEc9uB4ZfdlsjhlY4k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673 (0x2a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168C73, serialNumber=0A6152834E1299C11CF6E07865F765B238656389
        Validity
            Not Before: Sep 23 01:33:21 2026 GMT
            Not After : Sep 30 01:33:21 2026 GMT
        Subject: CN=6ab32c61-3743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:93:2c:21:d8:2e:23:00:b7:86:93:a9:99:0f:
                    e4:b6:df:d9:e9:08:36:84:7c:5d:aa:ac:7a:b9:43:
                    c9:b5:d4:ff:6d:25:59:60:0e:d5:22:aa:b7:2a:2b:
                    76:7d:ce:09:72:50:73:c3:79:43:78:f7:d9:4a:f2:
                    f2:c2:fe:0e:83:f3:1f:63:37:53:4d:41:1a:ab:ef:
                    a4:72:b4:2c:5f:bc:29:e5:28:c6:49:27:f7:0e:9a:
                    c9:4a:b3:0b:dd:e8:e7:1c:6e:49:2c:f2:80:18:69:
                    45:19:15:c1:54:a4:8b:06:9c:4c:25:b4:10:cd:76:
                    73:7f:ba:6a:0b:a3:c5:20:0f:6b:dc:41:e5:92:e7:
                    1e:20:31:00:5d:c4:43:63:91:ff:11:4a:7c:de:3c:
                    77:b1:56:c9:bb:7b:aa:88:b9:7b:27:4b:4b:d8:0c:
                    9d:25:b2:3f:fc:2f:9f:16:1c:39:63:bf:2a:5c:57:
                    7d:bd:23:cb:3c:f7:ac:d7:9e:3b:d1:53:be:ea:f2:
                    68:df:5e:94:e9:80:21:a2:d6:27:94:df:e8:3a:87:
                    14:c6:d1:49:ac:db:6f:d5:78:f8:cc:a7:9f:12:a7:
                    06:8a:1e:d6:21:0f:b6:41:7a:e7:f1:a1:77:ea:52:
                    fb:a2:30:c2:46:11:74:94:1d:6f:59:b8:3f:65:2f:
                    eb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F7:2B:57:3F:D0:F3:4A:28:68:3A:DD:A0:DE:F0:43:85:F7:4A:3D
            X509v3 Authority Key Identifier:
                keyid:0A:61:52:83:4E:12:99:C1:1C:F6:E0:78:65:F7:65:B2:38:65:63:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmFSg04SmcEc9uB4ZfdlsjhlY4k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ef:64:70:5f:62:86:fd:0b:8c:d0:93:4b:92:9a:7c:76:ba:
         35:7a:22:35:7a:1b:6e:2a:4e:85:f9:e2:43:64:d4:a9:d2:28:
         95:45:f2:93:c1:06:e9:61:d7:f9:38:73:9b:50:f3:ec:bd:00:
         32:c1:f7:86:5c:fe:83:e5:03:46:b9:14:fe:30:24:16:a9:e8:
         a1:39:0c:20:19:5e:7f:b9:44:1f:eb:6b:71:9d:a7:10:df:28:
         14:dc:11:76:92:04:2c:f0:54:f3:17:ec:a6:e0:d7:bc:ae:ae:
         94:2e:2a:af:f8:2a:bb:6d:b4:9b:75:9d:ca:f6:eb:73:66:18:
         70:49:8d:8c:97:83:0d:74:49:17:22:77:ed:3f:2a:2f:53:1d:
         1f:4e:ce:68:e7:c5:83:c9:7a:6e:20:4c:68:02:8c:f0:ca:88:
         7c:06:d7:77:41:ed:0f:0a:4d:6e:2e:5d:2e:9d:34:73:ff:ef:
         4f:5d:31:ff:a1:df:4e:ab:84:70:0b:c1:8f:2a:aa:f0:62:15:
         ec:48:b0:e2:5b:98:ab:5a:4e:57:82:38:ed:fe:44:41:7e:bb:
         e6:1c:e1:df:66:f3:95:1c:12:59:c3:c1:2b:ef:6f:d3:c5:cc:
         e9:d6:d9:30:29:13:6f:01:ca:d0:77:9a:c1:6c:35:2d:e8:ac:
         0c:55:fe:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:18:56 2026 by rpki-client