Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
File:                     hF2I4KIVFF82fZMEvz9xrujrTC0.mft (raw, json)
Hash identifier:          1P4/3WJSUK6SXxAryCpT3U3Hx5X/aCNuy8k01BzIwJE=
Subject key identifier:   22:3A:D7:27:6E:CA:D4:28:A1:BC:A9:C5:C7:86:4E:9A:90:28:1A:E0
Authority key identifier: 84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D
Certificate issuer:       /CN=A9194AE2/serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D
Certificate serial:       01BF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
Manifest number:          01A7
Signing time:             Mon 21 Sep 2026 04:13:23 +0000
Manifest this update:     Mon 21 Sep 2026 04:13:23 +0000
Manifest next update:     Mon 28 Sep 2026 04:13:23 +0000
Files and hashes:         1: hF2I4KIVFF82fZMEvz9xrujrTC0.crl (hash: 6zO6/4dg46v9E89OVGceRt3dL0/l/yvK9XtqjEdp2Vk=)
                          2: 2042987C6C4411EF9B263275C4F9AE02.roa (hash: j16LuDv13C+xPwm2QZb9CGFB7DnHm32KOWNgy88gmoU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl
                          rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194AE2, serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D
        Validity
            Not Before: Sep 21 04:13:23 2026 GMT
            Not After : Sep 28 04:13:23 2026 GMT
        Subject: CN=6ab0aee3-9872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ac:61:4c:68:8d:05:80:0e:2f:e1:6c:cc:7e:
                    10:00:4f:20:b4:e3:de:20:9f:4d:13:27:dd:96:0f:
                    b0:8f:d5:cf:df:fb:fd:ea:81:bc:b6:1c:b0:cd:d5:
                    e6:34:68:c5:42:20:2b:d2:f1:09:d2:f9:f1:a9:f4:
                    63:0e:b5:0a:55:44:ed:9b:09:0a:b9:b5:b7:da:83:
                    1e:cf:36:e1:f2:da:ba:1a:3c:ad:2d:fa:88:6a:d8:
                    f5:7c:8e:84:f8:f6:92:db:8a:9e:59:dd:41:3a:23:
                    6c:1d:de:f6:fe:9f:f1:96:7e:65:d4:cf:74:9a:0a:
                    e6:ab:fc:3a:96:02:2f:31:01:eb:2d:9b:2d:9b:b7:
                    de:37:92:6d:9c:c4:40:60:03:b3:f7:be:e3:8b:00:
                    b7:f8:08:8e:f5:55:61:97:6f:ef:31:f6:3f:bc:fa:
                    df:a5:38:81:34:bc:c8:c8:3c:04:bf:1a:55:a2:7b:
                    04:aa:0f:fb:dd:15:47:0d:58:7a:6c:1d:24:0f:c1:
                    25:e1:c2:a0:4a:72:e4:b8:de:bf:81:07:a9:51:e9:
                    76:d7:fb:1f:38:0e:ed:a1:15:f8:a5:9c:5f:63:3e:
                    c7:35:00:0a:32:2b:8d:ab:50:63:1c:28:d7:1a:c6:
                    40:38:ae:98:71:48:88:31:8e:ca:4e:f0:81:86:da:
                    da:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:3A:D7:27:6E:CA:D4:28:A1:BC:A9:C5:C7:86:4E:9A:90:28:1A:E0
            X509v3 Authority Key Identifier:
                keyid:84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ed:60:e2:c9:05:3d:a3:6c:54:8b:58:43:cd:4c:cd:74:76:
         0a:49:d9:b1:70:38:34:84:df:e1:a7:57:7f:ed:d1:0a:50:8f:
         fc:f1:05:ca:f3:6f:62:77:00:38:62:0d:5c:66:22:57:ba:58:
         60:f3:e5:30:81:3a:1b:34:09:52:7e:05:e4:03:1d:29:2f:df:
         64:f0:fa:f9:1f:99:9b:5d:16:7b:97:8e:8e:05:d9:3e:aa:ce:
         3e:39:ed:37:65:4b:8c:98:1f:02:05:d6:79:6d:a9:5e:1d:47:
         6a:65:b6:15:e9:d8:62:ad:bc:ab:40:51:7b:0c:06:1a:d8:da:
         8f:52:b7:32:55:93:c6:b7:a1:33:b2:9f:ce:33:19:44:f3:3a:
         f5:fb:2b:03:2e:7b:76:d1:a4:44:08:7f:61:9f:30:7e:c3:75:
         aa:f5:8b:08:e1:fe:34:20:c6:da:dc:81:24:a8:c1:d8:43:8e:
         50:9a:a3:44:49:2a:42:40:c8:cc:64:2c:f0:e4:5a:6d:f3:71:
         0e:cb:d4:42:7f:bf:06:47:35:cc:96:2b:27:8e:1e:4d:77:c7:
         af:5a:69:fd:6d:9f:24:f8:0b:38:56:9b:ed:93:92:18:af:d0:
         7f:95:1f:bc:00:ab:67:0d:33:24:8a:89:21:d0:1b:84:8d:e8:
         1c:7a:ae:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:11:26 2026 by rpki-client