Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
File:                     ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft (raw, json)
Hash identifier:          JngS+Tv/v/gAWFIosXuas7vnDSkmKzI/RsAmiMImrY8=
Subject key identifier:   33:93:36:B9:B6:38:0E:9D:1A:62:18:C2:A2:29:63:C9:C5:F2:B0:46
Authority key identifier: 76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67
Certificate issuer:       /CN=A919DC79/serialNumber=76CD021E0C281DA5FE64D87803553808889A1167
Certificate serial:       0CAF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
Manifest number:          0C9B
Signing time:             Sun 20 Sep 2026 18:35:54 +0000
Manifest this update:     Sun 20 Sep 2026 18:35:53 +0000
Manifest next update:     Sun 27 Sep 2026 18:35:53 +0000
Files and hashes:         1: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl (hash: EGsx+jQ+1JYRprmJE5EhRqWm0mURcOEBJgK5d1kq8mE=)
                          2: 7AC6992E655411F088401528C4F9AE02.roa (hash: pTt0bboHk4i5KvWhd2IOroHa91kNethIzbOKv9fQupQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl
                          rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 18:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3247 (0xcaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DC79, serialNumber=76CD021E0C281DA5FE64D87803553808889A1167
        Validity
            Not Before: Sep 20 18:35:53 2026 GMT
            Not After : Sep 27 18:35:53 2026 GMT
        Subject: CN=6ab0278a-7dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2d:51:1c:37:8b:59:17:4f:35:f2:69:0c:d4:
                    19:39:ef:ca:4a:b3:ae:c9:a1:f6:d6:83:27:a8:79:
                    6e:d3:98:cb:4f:aa:19:7e:86:05:f0:a1:45:ba:f7:
                    30:aa:af:ab:c4:a7:5e:1f:37:a1:7f:a2:66:e1:5a:
                    d1:b3:15:02:d8:5c:53:d1:a5:41:64:9a:ba:90:f1:
                    63:c8:9b:92:87:49:8b:b4:33:30:77:0b:d5:e9:f7:
                    ba:f2:f1:4b:30:1d:7c:40:e6:b1:5e:a7:ce:48:aa:
                    b9:69:8b:f7:9c:61:02:4b:bf:77:b3:9e:ba:aa:ff:
                    96:ee:0e:20:e0:d0:0a:ab:23:44:6d:42:05:34:a1:
                    c8:27:cd:e5:82:6f:e9:93:70:46:14:b2:b8:b3:1f:
                    f7:8e:8c:b7:f0:ae:f3:c8:4d:b6:60:04:17:dd:54:
                    3f:07:b1:1e:bf:d6:49:e0:17:61:7a:32:a6:e5:91:
                    fc:fa:b3:d7:ff:a7:61:ba:61:fe:c8:f3:29:32:5f:
                    26:30:e2:c2:f0:ae:b7:e8:a8:f8:88:9a:b0:1d:0e:
                    53:19:3a:b2:83:51:a1:ab:8a:13:c7:5b:ed:64:3e:
                    83:8a:8d:59:fe:16:18:38:63:dd:61:c8:ca:ec:4a:
                    32:2f:b3:c0:8e:b6:62:bb:51:d4:1f:ab:cd:7f:58:
                    d7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:93:36:B9:B6:38:0E:9D:1A:62:18:C2:A2:29:63:C9:C5:F2:B0:46
            X509v3 Authority Key Identifier:
                keyid:76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:65:28:6b:a3:17:5f:29:7d:a6:fb:b1:d6:fd:c6:7c:30:ff:
         87:de:49:0b:34:6a:d4:dc:17:9e:de:fd:60:21:5f:37:ed:67:
         75:00:05:f7:e9:23:62:4f:34:89:43:ad:10:62:a0:bd:61:03:
         6a:b2:85:e4:9c:7a:cf:36:67:24:8c:a7:af:c1:93:f1:89:30:
         be:b3:47:f1:d5:43:b5:57:73:88:19:d9:f4:a8:6e:ae:58:f8:
         f7:e4:30:03:ac:c4:0f:2b:12:a4:50:db:da:0a:46:50:38:06:
         a6:cb:ef:13:79:5e:e5:06:cf:43:dc:03:d7:61:68:fa:9c:c1:
         48:95:dd:f6:7b:42:f8:43:6b:50:13:f4:c7:9b:c7:da:9f:b1:
         fc:36:b0:a7:18:3a:1a:9c:ad:40:5f:08:b0:66:85:50:24:68:
         61:26:1e:09:c9:c2:1a:c2:5f:1e:38:b7:43:5d:37:58:f0:14:
         0e:aa:5f:89:3b:5f:cc:3d:cd:1b:f4:94:1d:05:10:ed:21:53:
         f1:ff:f6:bd:1a:5a:3c:09:ba:29:2d:54:fa:ca:33:23:54:19:
         e3:14:18:e2:1a:01:6c:24:c1:e9:ec:94:37:dc:36:1e:7b:0c:
         7a:9b:54:25:2d:9e:d4:ad:fb:cc:3b:2d:b7:94:3b:1d:25:2c:
         0d:d2:ac:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:24:33 2026 by rpki-client