Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft
File:                     P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft (raw, json)
Hash identifier:          7twGjRCCmLwMoB2PGxz//9ypT9fBpjPjxBy91g+lI2o=
Subject key identifier:   B6:9F:A4:1F:BD:19:7B:CA:15:13:C9:85:E2:55:0D:80:49:A3:75:55
Authority key identifier: 3F:48:AC:A1:2A:59:27:A7:02:EC:EE:24:41:51:89:19:4E:D4:AA:80
Certificate issuer:       /CN=A916A2FB/serialNumber=3F48ACA12A5927A702ECEE24415189194ED4AA80
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0isoSpZJ6cC7O4kQVGJGU7UqoA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft
Manifest number:          F3
Signing time:             Wed 23 Sep 2026 06:08:11 +0000
Manifest this update:     Wed 23 Sep 2026 06:08:11 +0000
Manifest next update:     Wed 30 Sep 2026 06:08:11 +0000
Files and hashes:         1: P0isoSpZJ6cC7O4kQVGJGU7UqoA.crl (hash: gWf9znovPUUpTyAPd2s6VJkxUlZZHUFwIFauEOvsdv4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.crl
                          rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0isoSpZJ6cC7O4kQVGJGU7UqoA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:08:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A2FB, serialNumber=3F48ACA12A5927A702ECEE24415189194ED4AA80
        Validity
            Not Before: Sep 23 06:08:11 2026 GMT
            Not After : Sep 30 06:08:11 2026 GMT
        Subject: CN=6ab36ccb-0ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:10:65:4d:54:fc:61:aa:3f:c2:f8:9b:2b:63:
                    7f:58:fd:c2:01:e2:f5:db:df:e2:93:b4:24:33:db:
                    ca:fd:e7:92:2a:6e:62:a3:a6:ea:37:23:5f:b1:9a:
                    97:74:d7:f6:1e:5f:b3:a4:18:8d:75:af:37:aa:cd:
                    2a:9d:25:ac:b5:34:65:1f:7a:a9:5a:08:76:b1:8b:
                    3e:6a:be:a5:d4:61:2f:b8:0b:9c:d5:f6:bc:72:a0:
                    59:a5:bb:28:dd:e9:1d:2a:af:c4:c0:e0:43:f6:02:
                    91:30:6f:c2:8c:97:fb:b7:77:95:a6:a9:8b:bb:3b:
                    a6:ab:8f:2d:8d:3f:03:a0:da:0f:75:44:4a:75:be:
                    81:48:36:03:71:6b:ec:af:d5:2a:b0:41:93:97:1a:
                    ad:61:74:58:81:7e:cc:73:e1:68:04:40:ba:87:85:
                    4e:e5:37:3c:00:43:6e:89:72:b3:73:98:c6:ab:52:
                    bb:b9:89:d7:f3:24:a5:6a:97:77:e7:44:52:85:90:
                    55:49:9b:a7:a6:b6:92:48:b0:82:69:e3:fb:8c:3a:
                    49:d5:11:ec:1a:bb:81:3e:cb:05:52:64:13:a5:f8:
                    80:91:36:84:b0:2e:df:16:be:34:43:b0:7b:54:e7:
                    bf:6b:8f:4d:8b:71:81:7e:d3:12:17:e9:83:77:91:
                    c3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9F:A4:1F:BD:19:7B:CA:15:13:C9:85:E2:55:0D:80:49:A3:75:55
            X509v3 Authority Key Identifier:
                keyid:3F:48:AC:A1:2A:59:27:A7:02:EC:EE:24:41:51:89:19:4E:D4:AA:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0isoSpZJ6cC7O4kQVGJGU7UqoA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:15:2c:a8:01:a7:12:0b:69:59:07:ae:2f:ab:16:03:8c:6a:
         a7:51:5b:cb:47:56:a9:01:e1:a2:5d:26:6d:3c:e2:62:c8:8c:
         b0:d3:36:59:f0:52:65:74:15:49:35:a3:c7:3b:95:97:15:73:
         d9:c1:6a:ab:fa:54:d3:ff:c5:f3:31:6c:03:07:f4:b8:88:f6:
         64:8a:dc:57:34:8f:50:8b:54:e8:7a:64:67:7e:2a:67:b0:d0:
         6f:c4:f9:06:1e:5c:b8:b5:b7:01:9d:d7:b2:ce:c6:6b:25:df:
         8e:4e:8e:b8:4a:9d:88:66:58:8c:94:ca:84:4c:1c:95:fa:26:
         c4:70:56:f4:79:b3:0a:24:84:87:a6:69:7b:1c:49:64:7a:c3:
         5f:99:30:90:2f:5c:a2:e4:a0:52:62:33:49:1c:04:5b:dc:de:
         4c:53:78:5f:b0:ab:ab:20:e2:8e:87:02:7b:f9:05:a0:37:5b:
         f8:8e:c9:c0:f2:df:2e:59:66:38:21:11:91:08:90:0f:15:ff:
         09:a3:1a:ca:a8:04:10:e8:41:27:26:14:2d:5b:5d:12:ac:cc:
         1e:d8:15:70:0e:af:ca:99:3e:13:f0:73:2d:53:ad:37:78:2e:
         65:5a:20:02:b0:78:76:a6:c9:ec:21:7f:19:fb:fc:da:a0:94:
         de:dc:b4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:34:17 2026 by rpki-client