Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
File:                     pN7tlZPlkTA6mwOYBh_o71GGZco.mft (raw, json)
Hash identifier:          3GQvblt8YZCa2ZYxstu9EOp4dzN4KYk5vphLcVDu5ZQ=
Subject key identifier:   4D:D8:4E:04:96:0E:70:4C:DA:80:6C:FB:29:73:B5:EE:A8:F6:17:6C
Authority key identifier: A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA
Certificate issuer:       /CN=A918CABF/serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA
Certificate serial:       0236
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
Manifest number:          0230
Signing time:             Sun 20 Sep 2026 18:51:34 +0000
Manifest this update:     Sun 20 Sep 2026 18:51:34 +0000
Manifest next update:     Sun 27 Sep 2026 18:51:34 +0000
Files and hashes:         1: pN7tlZPlkTA6mwOYBh_o71GGZco.crl (hash: w8+5sMh/JgRAMHkU5+DdaJp5gk4SoSbncqEwMSsTjR4=)
                          2: E12607CE6F0411EEA5298939C4F9AE02.roa (hash: IZDaa3RvwLLyBno3E88edLLqf6N/YltnYG0ukbjvIk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl
                          rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 18:51:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566 (0x236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CABF, serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA
        Validity
            Not Before: Sep 20 18:51:34 2026 GMT
            Not After : Sep 27 18:51:34 2026 GMT
        Subject: CN=6ab02b36-a00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e6:62:27:05:36:d6:2d:20:73:ef:39:88:32:
                    1b:6a:07:5c:66:d0:25:d1:e2:01:22:3f:d9:b8:33:
                    06:23:75:3b:49:c0:dc:05:66:cb:af:88:fb:84:b3:
                    d4:e7:34:0f:6f:f7:14:d8:24:47:90:06:5b:6d:d4:
                    e4:ac:1e:8e:57:88:1c:3f:47:65:36:4b:6d:a1:21:
                    91:4d:f4:f0:d5:66:2f:d2:12:f7:33:8e:a3:24:d0:
                    f8:3a:78:c7:f2:58:21:59:be:7b:fb:bf:cf:ff:13:
                    f0:b4:39:19:3f:2b:ab:95:54:a6:a2:97:c2:36:d0:
                    2e:a5:bb:99:f1:0e:e6:5f:f0:7a:70:34:c5:89:6f:
                    6c:7c:18:cb:a4:2b:d5:bb:62:4a:a3:8b:e8:b5:4a:
                    49:24:88:f4:da:2d:d7:b2:8e:6b:1c:56:01:d6:77:
                    68:f5:f5:0b:48:94:97:09:3b:c3:71:1c:aa:ce:76:
                    67:17:1c:fe:96:3f:b3:48:dc:d2:13:6e:f4:2d:02:
                    86:07:77:86:40:fa:69:6a:fd:16:45:6c:30:84:4b:
                    07:c1:37:27:6d:b2:f2:5c:68:27:cf:42:91:f9:20:
                    42:54:55:4b:e1:90:bb:74:b7:a3:ad:71:89:4c:9b:
                    2e:e1:ce:55:08:d5:5a:81:7c:4e:c6:fd:27:7c:87:
                    a5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D8:4E:04:96:0E:70:4C:DA:80:6C:FB:29:73:B5:EE:A8:F6:17:6C
            X509v3 Authority Key Identifier:
                keyid:A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:00:32:24:a7:1b:34:53:86:f4:77:48:d5:d5:6a:5e:77:e1:
         48:70:62:0f:94:44:5a:1c:49:8b:78:1a:89:3e:ec:dd:88:fb:
         64:c3:65:61:1e:0b:26:d4:87:6b:92:37:39:13:82:b6:84:0d:
         d0:b2:60:24:80:37:0e:0c:93:67:38:2a:d1:cb:7b:bf:99:ad:
         53:22:b4:11:7a:0c:85:40:68:ba:d8:c4:cd:f6:dc:a7:da:c0:
         c9:70:2c:31:8f:38:2c:e2:38:98:18:cf:ad:5f:0b:77:6b:07:
         a8:93:fd:38:da:4e:65:df:bb:56:46:10:36:0b:d8:a9:e7:9f:
         5a:99:07:21:ed:e0:ef:b0:cd:b1:04:44:4e:00:37:71:39:60:
         bd:6d:a8:6a:d7:42:6d:fe:1d:4e:1f:cb:fd:fc:d7:c6:d6:c5:
         16:84:68:6d:d8:2a:e8:0a:1b:64:54:26:29:de:d1:fa:02:99:
         9a:1f:b5:1d:10:8a:c7:d3:07:4b:1a:e6:2e:7c:45:b2:8b:ce:
         98:e1:44:12:45:c5:70:b8:18:01:50:5d:6d:c2:d2:24:40:66:
         99:55:7b:66:01:2d:a9:96:87:49:52:ac:73:8c:3d:1a:dd:d9:
         1e:6c:00:0c:5e:8c:dc:e6:26:f7:f7:6b:a0:05:ee:7e:c2:f3:
         48:a1:54:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:42:16 2026 by rpki-client