Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft
File:                     agzMvwk_8QNvugMspR3gE6ZLS4s.mft (raw, json)
Hash identifier:          q0a3d24shKGHU+uKUUKXdfzaWAYxc76Sa2cYVnJFgzk=
Subject key identifier:   47:60:C0:E8:10:8B:02:6D:BC:CE:06:49:67:EB:84:82:84:2B:4E:6C
Authority key identifier: 6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B
Certificate issuer:       /CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B
Certificate serial:       0459
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft
Manifest number:          0451
Signing time:             Sun 20 Sep 2026 23:59:21 +0000
Manifest this update:     Sun 20 Sep 2026 23:59:21 +0000
Manifest next update:     Sun 27 Sep 2026 23:59:21 +0000
Files and hashes:         1: agzMvwk_8QNvugMspR3gE6ZLS4s.crl (hash: ONg4gt0/RqLyoMPuZjX84ZLHf15+FjOqYyFyB0znUfg=)
                          2: 9CAFFE72B58F11ECBCF10934C4F9AE02.roa (hash: lAdm3PajVfH/BvXzc6EjbVcxH1i9/ea4wQd516Yt3/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl
                          rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1113 (0x459)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917275D, serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B
        Validity
            Not Before: Sep 20 23:59:21 2026 GMT
            Not After : Sep 27 23:59:21 2026 GMT
        Subject: CN=6ab07359-d0ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8a:d4:37:a0:59:59:4b:b3:3a:4d:da:2d:df:
                    b1:38:4a:99:79:90:70:1d:3f:09:c2:54:ea:df:a5:
                    8b:e9:06:64:ba:62:4d:2d:25:0b:a0:bb:59:84:bc:
                    de:e2:f6:0d:87:76:6f:08:30:2f:ca:16:7f:77:30:
                    c9:79:ac:92:d9:ce:49:f2:83:b2:00:65:42:73:92:
                    72:bb:bf:ed:1c:2d:69:9a:10:e0:51:3a:37:6c:38:
                    13:52:81:62:bc:2b:61:2d:32:bf:8a:c4:f1:3a:dc:
                    7a:e9:9f:97:42:bb:2f:67:d5:bf:31:c4:e4:ac:d6:
                    e8:01:0c:7c:62:71:0b:d6:76:5c:d6:b5:d5:2f:f3:
                    fe:70:a0:b8:f0:ea:2a:49:fc:48:de:9a:84:c9:c0:
                    73:5b:05:34:ef:f5:2f:c4:3a:44:d3:b9:9c:fb:02:
                    dc:1a:6a:3a:35:96:2f:22:d2:0a:2f:08:1d:24:e1:
                    1f:a0:0a:cd:10:0a:b3:39:0f:fe:b2:59:e3:7a:3a:
                    f5:da:a7:3c:e6:f6:78:12:a5:24:76:18:e1:31:96:
                    02:c8:6a:39:cb:46:71:e3:8e:eb:f3:ea:82:cd:bd:
                    19:e6:bf:07:ad:20:2a:e5:ed:1c:76:78:15:9a:c6:
                    5f:06:6b:ec:16:a9:7e:ed:e9:88:36:7a:d8:ae:a1:
                    32:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:60:C0:E8:10:8B:02:6D:BC:CE:06:49:67:EB:84:82:84:2B:4E:6C
            X509v3 Authority Key Identifier:
                keyid:6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e1:8d:3d:c2:b0:f9:41:1e:b9:30:3a:fa:19:74:90:a2:5a:
         f6:4f:b3:fa:df:68:23:91:e4:cf:90:31:f1:a1:46:0c:0c:f6:
         14:d0:76:6a:19:8a:b1:3a:3a:b4:82:3c:49:ff:1e:cc:79:3f:
         56:b1:4a:14:0e:d0:89:86:3d:a1:ad:3f:07:d1:71:1d:f5:ba:
         f9:70:4c:2e:c1:6e:40:1d:de:c9:b4:24:44:aa:53:80:80:55:
         6a:de:16:5e:57:8d:58:36:13:db:17:85:50:06:06:93:ff:bf:
         6e:0a:42:18:b0:b0:b6:90:79:a9:40:42:b8:64:e8:eb:28:10:
         3b:76:d0:c4:91:77:19:9f:9d:5a:57:27:e9:76:32:60:e7:3f:
         12:66:f0:1a:33:63:ef:72:06:d1:b4:91:9c:7a:07:2f:49:9a:
         5f:cf:e0:d6:0e:7b:d1:fe:66:83:47:0a:30:0f:f2:40:e9:4d:
         a3:32:db:41:1e:b4:ca:07:41:93:2b:41:c3:11:88:78:6a:3e:
         29:f0:63:97:dd:7f:a6:93:af:0c:56:36:f2:cf:bc:59:db:01:
         dd:bf:f2:4e:ef:90:ce:d9:2b:57:95:f3:14:25:12:de:3c:00:
         18:c5:14:2f:a5:a7:11:e0:45:88:32:95:4b:67:79:fe:03:1f:
         fc:96:02:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:29:56 2026 by rpki-client