Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
File:                     u9Lp2RPGRcigUZJHTP-olruaTqY.mft (raw, json)
Hash identifier:          hY3MT/2mnd/JkMii2KOaAj0p3aZQA2YTD6/nFy+o05k=
Subject key identifier:   31:9C:C0:83:1E:E3:23:FC:EE:82:3B:69:01:29:83:8B:D5:B3:3D:80
Authority key identifier: BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6
Certificate issuer:       /CN=A9111B00/serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
Certificate serial:       02CB
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
Manifest number:          02C5
Signing time:             Mon 21 Sep 2026 01:17:36 +0000
Manifest this update:     Mon 21 Sep 2026 01:17:35 +0000
Manifest next update:     Mon 28 Sep 2026 01:17:35 +0000
Files and hashes:         1: u9Lp2RPGRcigUZJHTP-olruaTqY.crl (hash: diVqdLvgh0e9xh53LqGbgyr6FHPj+jhISwUJXMCV6pk=)
                          2: 46DE5C7875DD11ED86945E46C4F9AE02.roa (hash: 7+Gv58zskCYKY8U8/3pkQdLUJ38W9+Ov4Vj6lTNdiOY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl
                          rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 715 (0x2cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111B00, serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
        Validity
            Not Before: Sep 21 01:17:35 2026 GMT
            Not After : Sep 28 01:17:35 2026 GMT
        Subject: CN=6ab085af-5b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:74:1f:f3:8c:04:96:25:af:ae:d7:cf:b2:38:
                    c8:3b:3e:87:ba:9f:55:13:b7:76:d0:97:21:7e:6a:
                    33:fa:4e:bc:b3:cb:b7:62:c4:04:ef:10:6d:43:b0:
                    d4:eb:d8:3d:83:93:04:dc:cb:52:7a:18:6f:67:88:
                    a8:76:4a:2b:d4:59:c0:a8:de:7b:88:e4:86:32:76:
                    b6:28:db:02:f7:fc:6d:c2:ef:8d:23:78:e1:9a:cc:
                    81:70:2f:43:70:2c:18:92:d3:91:49:00:b0:c1:3b:
                    d9:0e:2a:19:99:42:9e:2f:9e:34:04:69:de:90:9e:
                    49:4c:ef:84:76:f0:47:0d:47:ac:28:a8:f9:eb:4a:
                    7a:2a:62:8b:f8:ca:22:78:d7:0e:30:f7:3f:ef:a8:
                    03:25:7e:55:6b:4e:72:77:b6:ad:2d:4f:2c:cb:e9:
                    11:b5:ec:99:52:dc:6c:16:8a:a0:58:06:86:22:89:
                    a5:9d:aa:ec:b6:c4:6c:50:d7:84:2f:b1:05:bc:42:
                    c7:de:08:b5:cb:a2:c4:2b:e8:30:a6:81:a4:52:2b:
                    52:ba:6a:da:5d:c3:ee:8d:44:6e:1e:67:f6:b6:a1:
                    46:0d:75:21:98:1c:6c:16:a2:d9:c8:68:b1:a4:e2:
                    5d:00:64:50:36:1f:21:8c:ad:2c:19:29:4e:38:bd:
                    70:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9C:C0:83:1E:E3:23:FC:EE:82:3B:69:01:29:83:8B:D5:B3:3D:80
            X509v3 Authority Key Identifier:
                keyid:BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:15:83:eb:69:6d:40:63:38:45:89:f7:eb:a4:6a:4b:22:26:
         78:48:f1:a3:63:60:37:6b:7c:a3:da:51:23:d6:b2:7d:ec:de:
         ec:81:36:04:e7:5d:c5:c0:80:9c:78:60:f7:38:82:3f:a5:10:
         d1:f4:18:fd:f9:d0:15:ca:3f:78:0e:db:91:f4:96:c6:23:df:
         18:b1:11:c8:50:3f:cb:c7:1b:45:1a:81:ae:ed:b8:9f:3f:af:
         c4:78:bb:7c:09:c7:fb:d3:e1:ad:25:b0:2a:00:96:1d:2c:d4:
         68:b5:07:f7:a5:3a:d8:10:6e:b3:ad:ce:84:35:c5:9e:8e:b2:
         06:ba:62:ba:e5:66:a5:62:70:71:50:ec:09:78:cd:19:4b:37:
         d4:9e:a1:28:93:84:15:b8:07:16:8b:87:ad:e9:ed:e4:12:a0:
         28:43:3c:e7:c2:15:5c:36:b7:71:63:b9:71:a1:a8:74:4a:b5:
         11:39:18:48:55:21:9e:81:0a:dd:20:dd:da:82:d4:71:f7:ec:
         0d:44:ca:0c:ec:fa:63:da:be:e8:ee:b4:b8:66:b4:ae:f6:7a:
         31:79:a8:72:b6:64:fa:4f:7a:1a:c4:4e:25:c9:80:e0:5c:e0:
         62:16:65:de:90:34:e1:f2:3a:fc:83:fc:a3:a4:ae:3f:5e:44:
         83:9a:c6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:22:07 2026 by rpki-client