Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft
File:                     PS2TrIsQhlgX2adMyBoDDX010HQ.mft (raw, json)
Hash identifier:          BzArrAs1x0/BMFuXvPs7dCbAi2Shd3zrFox9pCGUh0c=
Subject key identifier:   53:2F:C0:C5:FF:3F:46:7E:88:E6:F1:04:8F:EE:AA:8E:09:79:19:DB
Authority key identifier: 3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74
Certificate issuer:       /CN=A9196D9E/serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074
Certificate serial:       021D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft
Manifest number:          0219
Signing time:             Mon 21 Sep 2026 02:54:12 +0000
Manifest this update:     Mon 21 Sep 2026 02:54:11 +0000
Manifest next update:     Mon 28 Sep 2026 02:54:11 +0000
Files and hashes:         1: PS2TrIsQhlgX2adMyBoDDX010HQ.crl (hash: Z57N8LWYRjm+RQO+s5jF+JgaapnxUVtw4eS16UY0x1E=)
                          2: C8BDA37CF68A11EFB7F91E24C4F9AE02.roa (hash: zfGF7KOCQQRDY2l23rBtYS3NirQreMdPDlzYfVapP6o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.crl
                          rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196D9E, serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074
        Validity
            Not Before: Sep 21 02:54:11 2026 GMT
            Not After : Sep 28 02:54:11 2026 GMT
        Subject: CN=6ab09c53-1361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5f:5f:63:5a:83:8d:c2:42:50:db:ea:b6:1a:
                    a8:b1:c1:67:c9:7e:20:1f:c5:7f:ac:af:f4:47:df:
                    05:90:95:02:d6:bc:b2:2b:b4:17:69:32:73:1d:04:
                    ae:17:fa:18:91:d6:60:c8:4f:54:f5:5e:f0:5c:db:
                    84:2c:26:b7:eb:5f:c4:35:b5:ea:c1:c1:20:53:41:
                    79:a4:04:fa:d9:03:bd:da:09:93:9c:5b:7f:f7:ee:
                    b5:36:cd:ba:fb:08:6e:56:4e:c3:85:b9:a1:e3:73:
                    61:8e:cd:18:09:77:b2:06:12:2c:f3:99:93:f7:05:
                    2d:52:11:77:79:cc:fe:66:07:ab:45:f3:b5:86:e7:
                    01:da:4e:e7:7d:79:99:1a:3e:13:54:3e:bd:f2:c7:
                    cd:f1:b2:25:4c:ad:14:0e:69:e3:cf:9a:2e:06:e0:
                    e1:84:6d:3c:0b:04:52:b1:b9:80:db:bb:64:ea:55:
                    80:33:b3:ad:6f:f6:34:09:52:d2:8f:87:77:c9:3a:
                    e6:40:0a:24:c7:b6:bb:6b:d6:04:55:da:88:49:de:
                    d4:89:82:e4:e4:92:bd:31:a2:5d:7e:60:5f:fc:c3:
                    44:8f:c3:a4:1d:31:b6:45:8b:6e:40:c0:91:bc:36:
                    e7:9e:be:c8:49:23:5b:a6:a6:13:a7:0f:04:13:17:
                    26:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2F:C0:C5:FF:3F:46:7E:88:E6:F1:04:8F:EE:AA:8E:09:79:19:DB
            X509v3 Authority Key Identifier:
                keyid:3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:fb:dd:d5:ed:9b:ff:fc:5c:ab:c5:2b:28:8a:bd:4e:0a:57:
         f3:52:a8:b7:32:68:92:30:85:69:9c:c7:c9:66:dd:2a:b8:d0:
         e5:e5:1f:90:9b:2d:46:4c:63:7e:86:80:19:5d:7a:54:17:33:
         bb:a3:79:e7:22:4e:67:9d:98:49:c8:c0:c6:dc:fe:f9:f8:ad:
         33:4a:2b:ef:89:ab:a7:76:4b:8d:e8:a0:d4:37:9c:5d:d8:e2:
         0a:e4:be:63:fc:e9:46:f6:a4:62:71:c5:52:0b:fa:a1:00:f6:
         d0:de:62:8f:3c:5c:d0:9f:5f:0d:06:5a:53:d8:2f:78:3e:dd:
         5f:9d:21:95:a7:33:c7:7b:19:81:ad:32:18:8a:5a:36:ef:1a:
         40:bd:f0:a9:d0:a2:1d:cb:11:5b:3f:e8:59:e9:16:a8:97:2b:
         77:34:a5:89:57:16:56:95:ce:ab:a0:ce:69:34:90:a5:53:72:
         bf:3c:3d:ea:35:83:10:2d:63:50:f4:fe:64:f4:13:8b:c0:11:
         c3:0f:72:e0:68:2e:f7:e5:20:41:3a:87:72:2d:10:92:81:59:
         92:18:5d:c4:e6:5c:9c:37:f9:40:36:e3:6d:99:cf:f5:cc:63:
         78:5a:4d:77:3c:82:1b:39:05:db:a2:b8:18:21:f0:66:91:6c:
         7c:ff:5a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:46:05 2026 by rpki-client