Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
File:                     CkIqY5fY62yzV3UpfOtVpeGP4eI.mft (raw, json)
Hash identifier:          c8XPAgPSnOdfmRicz49G+hvP4GDwp8AUMLZ/L4yd7VE=
Subject key identifier:   9E:67:14:90:56:7A:4D:EE:BD:03:66:CE:44:5D:56:D1:C9:E2:94:FF
Authority key identifier: 0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2
Certificate issuer:       /CN=A9176AFD/serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
Certificate serial:       19D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
Manifest number:          19BC
Signing time:             Tue 22 Sep 2026 16:19:56 +0000
Manifest this update:     Tue 22 Sep 2026 16:19:56 +0000
Manifest next update:     Tue 29 Sep 2026 16:19:56 +0000
Files and hashes:         1: CkIqY5fY62yzV3UpfOtVpeGP4eI.crl (hash: +79c656+Sd8DOo+7BtfRcrzWEdHezkEyVsgdCjNHG14=)
                          2: D6D99A3EBE3711EDA6617C5DC4F9AE02.roa (hash: yEvt1EWswbQO/Y1nNlXzDVEHUkJrE0Bdp2ONLKPwkEA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl
                          rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 16:19:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6609 (0x19d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176AFD, serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
        Validity
            Not Before: Sep 22 16:19:56 2026 GMT
            Not After : Sep 29 16:19:56 2026 GMT
        Subject: CN=6ab2aaac-69de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:25:33:8c:5f:63:67:1d:5f:ce:5d:ef:88:58:
                    2e:6f:15:e6:d7:df:ab:5c:61:50:87:46:03:09:b7:
                    10:f3:23:c9:fd:d9:24:87:71:5b:d6:f4:ba:fe:87:
                    60:b8:3a:16:5c:dc:7e:f4:14:8a:00:e9:14:9c:92:
                    d3:57:de:f3:60:bb:0d:d0:01:e4:71:9e:cb:85:a9:
                    0b:e0:50:ca:e6:39:66:1b:4b:74:6b:99:1a:93:c8:
                    00:78:a5:be:3f:8a:6e:2b:a7:0a:0d:08:8d:1e:30:
                    2f:10:4a:2b:16:75:d8:82:23:46:ac:44:e7:6b:4d:
                    72:a1:cb:3f:c1:93:4f:4c:6d:b1:c4:30:34:47:d1:
                    2d:4b:f3:a1:b7:e8:f8:45:83:09:00:9c:21:9e:e9:
                    c9:38:7d:68:46:16:27:17:ca:0b:9e:0e:98:68:63:
                    ef:ca:45:28:d2:a1:17:31:a3:71:dc:7e:87:bc:09:
                    6c:8f:f8:cd:2c:cb:97:48:de:76:f9:7e:51:4a:4e:
                    42:a9:b1:a6:c4:56:ca:b4:72:4c:b4:e2:44:5d:a3:
                    54:51:59:b8:7d:0e:d8:6e:77:ac:31:0e:4b:98:2c:
                    71:a4:6a:c1:9e:cd:66:22:20:21:73:2a:d8:11:82:
                    8c:eb:e6:c9:c0:2d:45:c9:1f:a3:85:1d:89:5b:e0:
                    50:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:67:14:90:56:7A:4D:EE:BD:03:66:CE:44:5D:56:D1:C9:E2:94:FF
            X509v3 Authority Key Identifier:
                keyid:0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:88:c6:a0:00:fe:c9:62:8e:a0:21:a4:ce:07:4c:37:89:86:
         64:cd:40:3a:cf:97:9a:19:ad:7e:ed:39:96:5e:bd:d0:91:0f:
         c0:ff:75:9b:78:01:83:10:5f:16:a4:56:68:68:08:67:94:56:
         b5:05:16:0d:92:72:e6:ea:cc:72:92:d6:7a:87:a7:c5:7a:b5:
         00:ce:36:e7:e1:3a:ae:25:c8:20:18:dc:0b:c5:d3:52:2b:d4:
         2f:48:76:96:c7:71:c2:a9:99:98:2a:bc:b6:0a:ec:5e:54:7f:
         b1:19:5d:f6:22:1d:75:32:c6:4c:9e:1e:9e:1f:16:6d:94:b0:
         ba:42:e1:b5:bc:c7:32:47:75:82:49:37:da:18:a7:8f:11:6c:
         98:35:86:73:8b:04:ce:f2:41:5d:ec:fc:c3:4c:ee:8b:60:60:
         ca:9f:31:2d:94:bd:a4:3e:4c:19:62:90:14:df:c3:c7:31:c0:
         81:01:09:f3:7b:1a:be:19:72:33:3a:7e:53:95:b3:31:f8:2c:
         34:f0:24:0b:2e:a7:ee:7e:5b:1e:f9:8c:6c:5b:27:25:4a:65:
         17:33:aa:40:24:da:5c:36:ed:5e:18:c8:5a:30:dd:4d:c9:22:
         62:b7:b1:71:18:0c:42:0c:c5:60:ff:ae:a0:80:7b:70:c3:12:
         07:b6:22:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:35:52 2026 by rpki-client