Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
File:                     9bzqkIXorbqorCGgTlPb_sMgvOI.mft (raw, json)
Hash identifier:          GaTwrT+xnChq1eX3q0suBaYC4Z+ceqzZxeM+hhTfQqA=
Subject key identifier:   47:86:6E:6F:E7:6A:64:0C:DF:79:0F:B2:1F:49:D8:7D:4C:F5:B3:01
Authority key identifier: F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2
Certificate issuer:       /CN=A916B6AA/serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2
Certificate serial:       024D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
Manifest number:          024D
Signing time:             Sat 26 Sep 2026 15:46:43 +0000
Manifest this update:     Sat 26 Sep 2026 15:46:42 +0000
Manifest next update:     Sat 03 Oct 2026 15:46:42 +0000
Files and hashes:         1: 9bzqkIXorbqorCGgTlPb_sMgvOI.crl (hash: eXffBhMow/m1A9K6NjPpozgJCXdXmAsZ69d6Wgk8ia0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl
                          rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 15:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 589 (0x24d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B6AA, serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2
        Validity
            Not Before: Sep 26 15:46:42 2026 GMT
            Not After : Oct  3 15:46:42 2026 GMT
        Subject: CN=6ab7e8e3-f86d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:db:86:af:80:ed:0f:3f:b4:6c:0b:f9:01:
                    6a:35:0b:7c:5a:66:62:99:50:81:ce:1a:73:44:89:
                    cf:35:48:43:9d:e1:d4:f7:12:c2:41:3c:e3:e5:83:
                    ef:15:bd:c1:69:28:29:3b:52:1b:e9:a9:7f:90:0f:
                    bd:c1:0d:85:f2:62:43:12:13:ab:e9:ca:38:7e:c3:
                    84:da:bf:04:7a:cc:94:0e:07:85:f2:bf:29:8e:ca:
                    e8:2a:1c:c4:5d:c4:90:6e:b4:1b:89:cd:ee:39:76:
                    43:08:a6:37:6d:fa:17:ce:25:b2:37:19:38:3f:d0:
                    73:4c:73:c7:a3:6e:be:48:08:83:44:be:03:f4:8f:
                    a0:6c:76:bb:a0:cc:a8:0b:73:70:1e:4f:7e:3a:73:
                    93:24:25:7f:07:e9:30:20:b1:b4:dd:f9:09:d3:d9:
                    88:80:85:47:44:8e:c3:0d:67:f9:f3:d9:34:9d:21:
                    4d:53:f4:05:23:0c:df:96:93:40:dd:87:0c:11:ee:
                    ef:4a:f9:0c:25:e9:a6:0f:e7:2c:89:27:a5:5e:1f:
                    99:c0:a4:e6:f2:3f:ef:90:9f:2c:29:90:57:13:48:
                    bb:ad:28:78:fc:09:ea:b8:8a:d0:0d:b3:14:61:31:
                    48:4d:72:6f:7d:39:bf:6c:14:26:89:81:3c:5a:f8:
                    f7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:86:6E:6F:E7:6A:64:0C:DF:79:0F:B2:1F:49:D8:7D:4C:F5:B3:01
            X509v3 Authority Key Identifier:
                keyid:F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:00:80:81:9f:47:8e:4e:4d:24:cd:bc:da:47:cd:8d:45:9b:
         7a:ff:ec:25:5f:c7:65:d4:24:f2:53:4d:44:26:5f:3f:be:6a:
         13:3d:59:6e:7d:d5:4c:b6:e9:41:42:f4:dc:90:22:cf:ae:67:
         2c:92:db:7c:54:7e:2d:20:26:8f:a2:c7:e6:d6:92:69:9f:d0:
         71:a5:b6:86:f2:ba:b0:25:19:68:62:73:d4:4a:9e:fc:4b:5a:
         58:d4:dd:6f:70:d2:5c:f2:c1:a0:95:ae:1b:a9:2f:f8:4c:6b:
         9e:63:b9:cd:05:6c:cd:9b:8a:bc:4c:76:cb:bc:b8:86:0e:2c:
         71:3a:9a:79:e6:ad:54:8a:43:18:5a:bc:af:e6:91:62:61:d0:
         02:e1:d9:e0:d6:93:a1:10:74:8a:67:0b:fc:52:ca:85:7a:c9:
         c1:8f:55:c9:42:b6:c8:78:91:74:9f:a9:ec:90:08:96:a1:b9:
         dd:d9:e7:be:44:23:72:fc:a5:be:7d:67:5c:8c:35:6d:39:89:
         75:ef:37:f7:2f:64:cd:78:51:aa:d2:a7:f6:86:94:77:76:1b:
         00:e9:c2:14:d1:3f:b4:cf:af:b7:41:96:7a:2b:59:30:d9:fe:
         18:4d:ce:84:b5:9b:81:3d:cd:4c:5c:d3:26:37:5f:ca:1b:76:
         ff:d5:2d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:44:04 2026 by rpki-client