Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
File:                     Cc_-Rn87CcPQbySRnPrH4APku3U.mft (raw, json)
Hash identifier:          PxwXbxzZ4dNqudnTgMkC1xUkuBvj8KfYn0t6AkbEm6E=
Subject key identifier:   70:C6:B9:F1:9F:27:68:7F:41:56:26:9F:B8:01:12:68:96:3F:D6:D9
Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
Certificate issuer:       /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Certificate serial:       1D13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
Manifest number:          1CD8
Signing time:             Sun 20 Sep 2026 16:08:44 +0000
Manifest this update:     Sun 20 Sep 2026 16:08:44 +0000
Manifest next update:     Sun 27 Sep 2026 16:08:44 +0000
Files and hashes:         1: Cc_-Rn87CcPQbySRnPrH4APku3U.crl (hash: OzBhy6i2pqFuYq9mt0IymcNlwskxvdXyMem9xHM5kJU=)
                          2: A61100A4C0AF11F0BCC2CE7FC4F9AE02.roa (hash: j6kB/znry1d2/Ft1aG3hJw5izTeR4sJCRF3C0LvwT/M=)
                          3: AE916370292511F198604A079E833773.roa (hash: tgUzFdlOQSWXXogjU4/dQwzUeee/8JuUMUF1DhKD6aQ=)
                          4: F7CC52C45DF611EC8F523217C4F9AE02.roa (hash: xteJ79wHyuR0rixXXMGsUbkm0SbKtGms9qzJTlI8DjA=)
                          5: DB9D2EDA8B6311F1BE3015DD5011F970.roa (hash: PxR/0RyR6Js/JI8WBCRgtBu0jrNkQBg+FdIwvgRcULc=)
                          6: 6996CEB84E7011EFA4A32D5CC4F9AE02.roa (hash: 7MyVSleZnWfkmq0xHUwH+VcMTyYARFBA5ijsZwrRfPo=)
                          7: B0069018292511F198604A079E833773.roa (hash: rvCiCw6odmw242yWKwXeXkCvn0sxoVd8NeC7DqhgIPo=)
                          8: AF2687DE292511F198604A079E833773.roa (hash: tFLq8+CNxLhCxJRm+42b8Upze1btSlBQf6Y4qxRs7Xw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
                          rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 16:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7443 (0x1d13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
        Validity
            Not Before: Sep 20 16:08:44 2026 GMT
            Not After : Sep 27 16:08:44 2026 GMT
        Subject: CN=6ab0050c-31b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:36:6c:c9:93:34:09:f7:28:6d:46:14:46:
                    75:9e:a7:db:82:4c:96:54:19:cd:01:5a:a2:f4:43:
                    e8:ce:70:ad:aa:4f:d0:8f:74:b4:b2:0a:75:fb:cb:
                    2b:98:1d:b0:85:9a:c9:68:34:1b:d2:68:4d:74:4c:
                    40:b4:e6:51:07:2d:fb:5b:91:85:aa:08:06:29:0b:
                    d1:9a:85:b0:06:8a:c0:3c:bb:91:0f:aa:12:52:cc:
                    8b:b4:23:5f:1b:0a:4e:ef:2b:97:ab:f3:b8:3e:30:
                    b7:3a:ae:18:59:83:e0:b5:9e:68:58:be:be:03:02:
                    21:23:16:53:72:05:87:ec:91:17:49:76:48:85:d9:
                    2f:43:29:bb:95:22:ab:02:6b:52:15:54:92:b2:d5:
                    07:7f:96:63:c0:1c:ce:1c:95:84:54:91:5d:3d:0a:
                    f8:11:00:81:83:cc:33:b5:72:24:a5:dd:44:71:7c:
                    f7:a0:7a:e0:33:d3:67:90:82:a0:0d:d4:8f:48:19:
                    03:97:e7:1b:e3:b2:c2:6a:e3:b3:07:2a:f8:3c:2e:
                    15:5e:45:af:fc:14:e5:a0:02:b5:87:e0:25:e6:93:
                    58:ea:47:e9:40:a6:aa:be:09:df:d2:8e:c0:1f:6b:
                    0c:d4:91:44:2d:6f:6f:dd:ee:90:79:62:0c:6b:e1:
                    af:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C6:B9:F1:9F:27:68:7F:41:56:26:9F:B8:01:12:68:96:3F:D6:D9
            X509v3 Authority Key Identifier:
                keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:94:2e:16:b0:58:fe:88:f6:14:09:73:39:bc:f8:65:4f:c9:
         48:cf:22:fe:b8:e3:5d:a8:50:10:bc:d5:97:68:9b:4c:b8:97:
         25:81:07:a6:cd:52:9d:5e:50:49:9a:f8:32:8e:8a:cb:ec:21:
         12:46:58:e5:dd:83:e1:84:cd:15:69:70:b3:0d:a8:a5:c1:83:
         f9:73:84:38:ce:56:a7:7c:a8:20:ed:47:74:f5:67:90:95:4f:
         8d:c1:64:f1:ab:8b:b8:bf:8b:12:ab:f4:f0:96:f7:8a:cd:1e:
         de:9e:e2:08:e1:26:dd:b0:a9:e4:9a:d6:fa:df:93:73:2f:b4:
         80:04:44:4e:bc:93:ff:4d:bb:08:e2:25:2b:04:7c:41:9e:5a:
         30:4d:b8:8c:d3:fd:80:ce:cb:0e:59:bb:fb:ed:ac:9c:d3:eb:
         3e:82:42:ac:a9:f3:d3:f2:56:02:05:bf:b1:8f:90:07:ed:dd:
         18:45:bb:dd:8c:51:d2:de:4b:fa:90:91:fb:5f:1e:61:4b:f3:
         25:18:e4:57:15:e0:f5:05:30:0e:53:04:21:c3:a9:70:e7:32:
         b3:ca:53:b0:fb:61:0a:b9:5b:d8:89:2e:6e:ba:5a:ae:ca:c7:
         c9:8e:66:23:e3:f4:b2:99:46:73:87:bc:dd:71:3b:7b:4c:60:
         de:43:26:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:43:41 2026 by rpki-client