Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft
File:                     4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft (raw, json)
Hash identifier:          escDxjvzkb0KVtbpUpFOI7v1gQNzQPO9F+nNI3EM1f4=
Subject key identifier:   0E:D5:23:D7:75:B6:34:7C:D0:28:D7:3E:84:63:2B:B7:40:63:1B:3E
Authority key identifier: E0:EE:5F:5B:4C:CE:72:C0:2C:B1:B1:65:DD:8D:6D:03:E1:18:15:C7
Certificate issuer:       /CN=A9189D79/serialNumber=E0EE5F5B4CCE72C02CB1B165DD8D6D03E11815C7
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft
Manifest number:          65
Signing time:             Sat 19 Sep 2026 08:10:52 +0000
Manifest this update:     Sat 19 Sep 2026 08:10:52 +0000
Manifest next update:     Sat 26 Sep 2026 08:10:52 +0000
Files and hashes:         1: 4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl (hash: 9iFa98UIjeYB3DdFsB4/BhSDf0G3IAkmzkAM9+aUY6k=)
                          2: 192C64F2252311F18B88524DC4833773.roa (hash: 7vrnXHB3qUyKbQqkedi+hisuqsIblcG1yBKlH+P3Y3U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl
                          rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 08:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189D79, serialNumber=E0EE5F5B4CCE72C02CB1B165DD8D6D03E11815C7
        Validity
            Not Before: Sep 19 08:10:52 2026 GMT
            Not After : Sep 26 08:10:52 2026 GMT
        Subject: CN=6aae438c-3175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:df:9a:75:6e:10:7e:b9:2d:62:86:07:f9:12:
                    6f:82:92:83:63:d5:41:38:b8:07:3f:cf:46:f4:7b:
                    e2:d5:4d:99:48:66:ad:97:62:d7:76:fb:df:ee:66:
                    86:5a:e8:8f:36:d3:74:42:a2:04:c1:3d:22:03:ed:
                    da:75:77:ed:d0:8a:28:4a:db:4d:25:ee:77:8c:c1:
                    f0:01:fe:78:3f:93:1b:e0:24:48:7f:5a:de:5a:5f:
                    b9:2c:b4:31:bc:64:70:0d:8f:23:67:12:77:19:3d:
                    e1:49:f9:b6:24:34:d3:69:dc:63:e1:5f:98:95:9f:
                    02:9a:24:38:4b:14:8b:e8:58:1a:0c:16:56:2b:ba:
                    ce:81:e3:8e:ec:74:d0:41:ef:81:9e:10:25:c0:d9:
                    2f:45:8d:b3:16:03:6f:1c:37:10:60:80:52:fe:3e:
                    96:95:01:e9:f9:d4:f2:88:55:1b:ab:c5:41:68:83:
                    c8:38:99:10:4c:ac:83:00:a8:50:e9:20:ea:1b:d1:
                    28:bd:e1:a7:e8:95:c9:73:73:97:64:8b:37:9a:b3:
                    50:25:da:f7:db:ce:e5:fb:b5:b3:09:6b:b8:6a:f7:
                    df:87:4f:ff:a0:13:b8:2e:2a:e5:83:50:95:a3:15:
                    b0:9b:12:72:8c:79:a2:a2:15:3b:2f:92:3b:0d:85:
                    af:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D5:23:D7:75:B6:34:7C:D0:28:D7:3E:84:63:2B:B7:40:63:1B:3E
            X509v3 Authority Key Identifier:
                keyid:E0:EE:5F:5B:4C:CE:72:C0:2C:B1:B1:65:DD:8D:6D:03:E1:18:15:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:23:b2:45:bb:64:0b:33:d7:0b:2f:0b:f1:60:10:b5:11:6a:
         6b:e5:7f:8b:e6:c1:c5:c8:90:f6:c9:af:ba:6d:97:2c:b7:70:
         99:8e:ee:3c:65:16:d5:ba:69:54:d9:b2:33:df:92:83:ad:e8:
         d5:08:33:19:1e:39:c1:59:71:43:54:75:73:a8:18:14:5d:3e:
         c6:4b:1b:43:fa:44:25:19:b6:f0:e1:95:88:22:4c:e1:fd:e2:
         79:da:89:07:e0:4c:5c:3b:72:6a:39:18:05:1b:31:99:89:71:
         5f:de:fa:43:1a:b9:99:40:49:1b:cb:b9:83:fc:a2:e6:4b:9f:
         f1:5e:83:6b:de:e3:8c:0f:84:7f:64:32:cb:91:44:c9:04:c1:
         18:57:81:93:34:c5:50:3b:00:dc:0e:31:b5:d2:b3:41:b1:f7:
         b9:f2:c8:44:db:a3:45:26:1f:fe:56:58:9c:ad:24:b0:df:37:
         56:3c:26:40:59:42:cd:03:8d:d2:ab:80:28:16:11:04:c2:aa:
         7e:c4:d1:65:f1:51:9f:d2:35:7a:9a:2f:7f:33:56:85:04:d8:
         9e:11:b0:83:1d:8f:92:b3:b6:d1:94:af:c9:2f:ba:0c:bd:cc:
         4a:90:83:f2:80:d5:19:53:cd:de:c8:3b:75:81:0c:a0:47:4a:
         14:c3:35:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:11:19 2026 by rpki-client