Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
File:                     2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft (raw, json)
Hash identifier:          bkxznGcTUXRxg9E/nQGoS3CPLScWP64MwSs8WeTi9OA=
Subject key identifier:   3F:91:74:CC:6E:2B:AD:B1:61:3C:6C:F5:A5:96:44:7A:39:B8:5C:D6
Authority key identifier: DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40
Certificate issuer:       /CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
Certificate serial:       025A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
Manifest number:          0243
Signing time:             Fri 25 Sep 2026 02:40:47 +0000
Manifest this update:     Fri 25 Sep 2026 02:40:46 +0000
Manifest next update:     Fri 02 Oct 2026 02:40:46 +0000
Files and hashes:         1: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl (hash: 4hCaOuLdcKt2f5wMpuycqhIFQhdvjOzXlKNBM+97Iio=)
                          2: C1FEA2F0154E11F19AE5B8A5313D8C67.roa (hash: cgOd9gJGT0Mu3EgoMhtTnhZe/DtNsKvS05s/KcGa/qY=)
                          3: A5C854D2154E11F194E301A5313D8C67.roa (hash: Sh69RjuVo5isx3bFpRX54pmtFrJuRKlGXyX1OLOXytg=)
                          4: DAB789C65B6D11EEA95BF025C4F9AE02.roa (hash: ad6aaRvQBIRwUadg53cIGK3wdCZz0dymJ6fgvrLDsYU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl
                          rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190753, serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
        Validity
            Not Before: Sep 25 02:40:46 2026 GMT
            Not After : Oct  2 02:40:46 2026 GMT
        Subject: CN=6ab5df2f-d84f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6c:c2:a6:ee:72:da:f9:14:ce:f4:93:65:d8:
                    c6:3a:a3:c9:ca:44:92:c0:69:bc:21:94:03:32:d8:
                    7e:c8:4d:f6:5a:90:d9:74:de:81:72:b1:6c:71:d5:
                    70:02:db:95:60:c8:56:7c:4d:c7:a5:ba:14:7e:48:
                    d7:b2:af:40:cc:47:ac:16:0e:45:4f:f3:ca:55:9a:
                    ca:99:bc:09:c5:76:bc:8e:2e:9f:b9:1a:98:22:2e:
                    fb:a6:3b:7f:a4:08:ef:af:04:be:94:d9:40:fa:32:
                    e6:cc:3f:cc:20:1b:30:9c:21:48:5a:51:5a:56:f0:
                    d6:38:17:02:34:d6:a1:3b:78:4d:eb:6f:82:4a:ad:
                    84:74:6a:d7:fe:79:b5:a9:ac:60:0d:2f:12:ed:47:
                    e2:cd:a0:89:03:1b:9b:d6:d5:21:98:db:ef:9d:e3:
                    f5:05:17:34:aa:66:c2:63:7a:b4:f5:48:d9:7c:0c:
                    35:df:e6:a6:0e:4a:1e:4b:bf:06:0e:0b:3d:e0:db:
                    73:b3:22:da:25:7f:1a:54:2a:0a:a1:de:1e:da:3b:
                    d9:ba:98:99:50:a9:45:8c:c5:c9:47:e2:df:f1:c5:
                    57:43:c0:60:7f:c0:bf:a1:fa:d6:cd:30:dd:51:4b:
                    95:5f:81:05:ee:8c:60:cc:b3:0d:3d:b2:5d:06:5f:
                    03:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:91:74:CC:6E:2B:AD:B1:61:3C:6C:F5:A5:96:44:7A:39:B8:5C:D6
            X509v3 Authority Key Identifier:
                keyid:DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:6b:c2:8b:dc:6e:fd:29:82:cf:8f:8a:8d:0d:61:1b:47:75:
         a9:f7:40:7a:db:23:42:29:17:e1:ca:3e:8f:5b:9d:f6:2d:93:
         51:47:af:21:4e:ae:6a:25:33:a7:8a:7a:74:a5:4b:91:85:0a:
         3e:f6:8b:af:f1:93:a0:1f:d3:e2:2b:49:97:83:06:1f:9e:de:
         da:cf:52:9d:d4:92:3c:ee:e4:e3:5e:e5:3d:d7:0e:fc:3d:31:
         aa:cc:33:97:3d:e1:ba:79:10:33:49:6d:b8:01:e0:df:96:58:
         c4:18:88:16:26:e0:41:ff:11:6b:88:c7:4b:05:ba:b9:1f:65:
         fb:7b:a8:f9:db:ac:03:1b:c0:66:2c:31:42:51:fb:a8:2e:6d:
         8f:4e:1d:06:f8:ca:cf:be:54:c9:1b:b7:8b:e1:fc:e8:71:36:
         39:05:66:e7:a1:ec:9d:c5:ca:a8:7d:5f:de:a3:d4:b0:af:25:
         7d:59:42:01:1d:16:d3:25:1b:bf:6e:d3:1b:cb:8d:11:5e:58:
         43:17:cc:9f:3f:d2:73:98:5d:71:a7:12:8e:89:83:66:9b:43:
         ee:f9:ef:ff:69:c9:aa:72:22:35:83:f7:58:43:e8:86:e4:61:
         13:98:df:24:b1:ca:2c:fb:f2:a9:86:93:d4:39:77:33:4a:d0:
         cf:5b:16:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:43:59 2026 by rpki-client