Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft
File:                     cDXbQxmt4s_Ooig68PFrYgkCbao.mft (raw, json)
Hash identifier:          kbfJSiSp8bjafF1YL3ZSOL4OU6HVrgpF+RMQ9qXlnq8=
Subject key identifier:   49:8F:BA:4B:04:F4:E5:3C:E3:5D:7E:DD:CF:2B:F8:9D:95:0F:C6:8A
Authority key identifier: 70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA
Certificate issuer:       /CN=A918387F/serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA
Certificate serial:       072C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft
Manifest number:          072B
Signing time:             Tue 22 Sep 2026 21:42:16 +0000
Manifest this update:     Tue 22 Sep 2026 21:42:15 +0000
Manifest next update:     Tue 29 Sep 2026 21:42:15 +0000
Files and hashes:         1: cDXbQxmt4s_Ooig68PFrYgkCbao.crl (hash: /UKLyykzscWmUpbz36NbtO3KH0kiiFQzeoOBRCrQjE4=)
                          2: 4D68EEE09CCC11F1A0F68A096A11F970.roa (hash: 78Ue177aOQY/fg3cacS4P1AV+t8L3f0X9tzxKiCSKf8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl
                          rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:42:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1836 (0x72c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918387F, serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA
        Validity
            Not Before: Sep 22 21:42:15 2026 GMT
            Not After : Sep 29 21:42:15 2026 GMT
        Subject: CN=6ab2f638-a250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6c:c2:cb:be:22:7d:57:3f:3a:71:7f:50:03:
                    c7:18:fc:66:96:f3:09:f3:79:b0:9b:20:d4:50:73:
                    5e:91:7b:19:79:f8:8a:c5:4b:73:82:84:e1:4e:3d:
                    4b:8e:3e:71:d6:67:c3:e0:43:87:cd:e1:e6:67:6e:
                    dd:0b:37:ff:13:cd:92:97:2f:42:65:b6:cb:57:2a:
                    15:1e:44:b7:d4:b8:f2:2c:38:9f:69:f3:34:15:f4:
                    06:68:32:45:21:eb:15:89:5b:76:62:29:4a:85:c0:
                    58:8b:79:b4:11:9c:6a:dc:6d:df:a7:78:9b:f3:0e:
                    30:d8:84:28:b6:df:d4:e5:e4:a8:d7:f9:cf:1a:86:
                    60:94:24:d3:d9:82:76:02:ef:e5:5f:18:c5:88:4b:
                    e0:b8:b5:ea:78:27:94:00:4e:cd:83:ec:21:18:4a:
                    df:ab:e9:30:56:35:a0:81:cd:b8:75:16:60:58:23:
                    b2:4d:2c:12:c3:f0:5f:3c:8a:c1:9e:2f:38:78:b8:
                    49:ce:83:93:c7:95:40:05:98:29:99:03:55:f4:af:
                    06:2b:75:38:8d:2a:8f:73:30:67:f2:ca:0f:8a:86:
                    bd:9a:bf:46:0c:98:ff:43:f4:c0:9e:f7:3b:67:b3:
                    4e:dc:e8:78:d5:e5:3a:5d:39:c8:26:cd:57:49:2e:
                    36:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8F:BA:4B:04:F4:E5:3C:E3:5D:7E:DD:CF:2B:F8:9D:95:0F:C6:8A
            X509v3 Authority Key Identifier:
                keyid:70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:26:9c:48:95:86:a9:32:41:1a:52:af:19:cf:d1:18:56:18:
         2e:ac:a4:54:cc:04:b2:8f:1f:d7:59:c2:df:ba:d3:fd:2d:a7:
         27:2e:3e:7c:0f:95:81:76:a6:53:dd:e5:83:29:e9:66:75:98:
         27:54:0a:a0:2f:1b:b6:14:c0:1b:81:0a:dc:89:47:fd:18:0c:
         ff:df:4d:fa:67:cd:ce:a8:6b:1c:49:c4:7f:cd:1b:ab:71:c9:
         f6:6d:a1:eb:34:dc:68:43:c0:3d:ad:e6:91:5e:23:57:9e:49:
         d4:7c:85:29:92:25:5c:2a:00:91:5b:7e:4e:ad:00:96:f4:91:
         c6:c1:1d:79:2a:6f:96:60:18:77:eb:5e:06:ec:3c:6d:94:26:
         c6:33:4f:8b:cc:80:5c:38:b5:fa:4a:d2:00:9a:98:5e:2d:6a:
         d1:e3:37:a9:3f:08:1c:02:ae:02:a0:e0:f7:0b:15:70:9e:eb:
         71:53:99:ec:15:d1:d8:5b:85:b4:df:34:07:aa:93:a6:88:21:
         70:67:25:fd:66:86:a1:6c:26:43:8a:7f:44:12:aa:09:98:40:
         4a:bf:45:24:ab:ee:dc:fe:3e:4b:e1:99:80:9f:32:02:df:69:
         40:37:05:13:83:3a:d7:dc:d3:f7:07:0d:e3:31:da:3c:09:f4:
         30:b4:77:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:23:19 2026 by rpki-client