Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft
File:                     pS-PmFnKxH1oVCcjTSYW655TljQ.mft (raw, json)
Hash identifier:          sUJhwPPHl34gADF2HJJqBFnJYo6k4Xht3ioRRYCwrm4=
Subject key identifier:   D2:6F:C4:6D:50:3B:80:2D:01:A6:93:D2:6C:AB:A1:D3:24:2C:56:88
Authority key identifier: A5:2F:8F:98:59:CA:C4:7D:68:54:27:23:4D:26:16:EB:9E:53:96:34
Certificate issuer:       /CN=A9188D8F/serialNumber=A52F8F9859CAC47D685427234D2616EB9E539634
Certificate serial:       0C05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft
Manifest number:          0BFC
Signing time:             Sun 20 Sep 2026 18:52:26 +0000
Manifest this update:     Sun 20 Sep 2026 18:52:26 +0000
Manifest next update:     Sun 27 Sep 2026 18:52:26 +0000
Files and hashes:         1: pS-PmFnKxH1oVCcjTSYW655TljQ.crl (hash: RCCHOG/V8gmy8sECSlIJ3VgxFjYGWjCJWjY3fDSB4nU=)
                          2: A84F7CEE432711EA87CB0E53C4F9AE02.roa (hash: DuaXg8ErIllO7PDms4lKRxOCOp64K0AXe/FcoVLC2mE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.crl
                          rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 18:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3077 (0xc05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188D8F, serialNumber=A52F8F9859CAC47D685427234D2616EB9E539634
        Validity
            Not Before: Sep 20 18:52:26 2026 GMT
            Not After : Sep 27 18:52:26 2026 GMT
        Subject: CN=6ab02b6a-65bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:df:f6:2b:f7:48:d7:22:58:d7:22:35:53:6b:
                    2d:ae:46:38:76:39:ad:64:0f:30:10:5b:10:a3:63:
                    e7:4e:08:66:fd:f1:b0:a7:02:9e:9c:39:b6:88:a8:
                    8c:88:37:d5:54:69:9e:aa:2c:e9:fc:ab:f9:40:fb:
                    f1:6c:9e:73:82:4c:3b:41:ac:a4:01:6b:66:a6:b1:
                    28:c0:21:73:eb:1d:08:aa:83:62:a3:7e:bd:1e:05:
                    d0:82:f3:6b:a6:4b:c9:dc:91:00:78:6f:90:c6:a8:
                    98:6e:fd:4e:3a:12:16:4d:df:fa:ac:ce:76:db:42:
                    fb:67:2f:a7:a4:c1:57:4e:ba:29:42:d6:5a:eb:7e:
                    b2:da:c4:bb:fb:25:cb:14:9a:8e:73:7f:be:0a:50:
                    f6:74:98:b8:94:42:3e:ae:fa:b2:9f:bc:02:6e:67:
                    66:84:ca:22:b8:cf:a1:1b:52:51:de:d7:4e:6f:13:
                    f1:2a:61:64:43:e8:ad:5e:89:ec:ed:33:76:05:c3:
                    37:1b:ff:ca:ad:78:29:70:2f:9b:bc:d8:f2:1c:48:
                    d0:37:a2:25:63:91:1b:95:23:9b:8d:20:6a:b0:2f:
                    99:26:89:5c:16:e4:63:ec:6d:31:9c:60:5b:64:42:
                    4a:6d:79:78:2a:f5:7f:a6:53:ab:e7:53:0e:df:43:
                    65:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6F:C4:6D:50:3B:80:2D:01:A6:93:D2:6C:AB:A1:D3:24:2C:56:88
            X509v3 Authority Key Identifier:
                keyid:A5:2F:8F:98:59:CA:C4:7D:68:54:27:23:4D:26:16:EB:9E:53:96:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:8e:80:1c:e4:ee:23:9d:15:78:77:38:97:ac:4e:38:0e:07:
         50:dd:94:96:35:75:67:c3:e8:ad:90:41:34:21:16:98:ca:5b:
         17:98:a1:b5:36:74:40:00:bd:fa:cf:af:5c:bd:b4:d7:f4:30:
         75:d4:0a:a7:26:48:4e:1a:36:3a:e3:af:24:5e:d4:90:f9:61:
         cc:4b:b5:cf:73:6d:d6:7d:c3:b4:5c:ff:49:ac:68:87:e7:cf:
         e1:d1:12:e2:90:8c:2e:2f:af:50:c9:a8:82:63:b0:5e:c8:ff:
         e1:28:37:6b:b4:97:e0:6d:8e:72:ef:09:de:96:af:2e:d5:a2:
         4d:30:f3:87:85:e2:e5:58:14:d6:72:2e:55:86:9a:2c:ea:72:
         8a:a8:f7:b6:54:9f:63:a3:e6:a3:72:ac:4e:73:69:85:6e:38:
         00:3a:56:de:83:9a:a8:26:aa:a9:e2:ac:3b:60:c5:c5:91:d6:
         9c:95:95:ff:b8:19:89:e5:62:a4:22:d7:f2:98:e7:c5:45:d8:
         b4:a9:92:ba:94:d2:4c:30:28:e1:de:21:38:30:24:2c:02:89:
         91:99:56:60:a5:1b:86:1d:ae:a2:aa:9d:b9:19:c2:75:8a:67:
         02:b7:06:e0:64:f2:d6:fc:b4:9b:08:55:7a:06:dc:33:79:95:
         ed:d7:a1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:42:02 2026 by rpki-client