Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
File:                     _pmKu7E0uTwc5_hOi5--HdqbZKk.mft (raw, json)
Hash identifier:          7D9x2taC2xeBLWVkJJhcGdIv3qEjtL0IE6L7QlWVc3M=
Subject key identifier:   0E:DE:D2:24:49:70:95:1F:7B:03:C4:E7:C8:1B:43:52:AF:17:BD:EA
Authority key identifier: FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9
Certificate issuer:       /CN=A911ABA2/serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9
Certificate serial:       9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
Manifest number:          9B
Signing time:             Wed 07 Oct 2026 07:57:45 +0000
Manifest this update:     Wed 07 Oct 2026 07:57:45 +0000
Manifest next update:     Wed 14 Oct 2026 07:57:45 +0000
Files and hashes:         1: _pmKu7E0uTwc5_hOi5--HdqbZKk.crl (hash: ma32ShLhE/YcUjfdKuqkqrbSd3qPatkZofVMwaSXc4I=)
                          2: B97CD5B84D1911F191BBC780B9833773.roa (hash: HpuWmUe+4DzlKIQ/3j2Ee6fHNR3Y+Qt0BWhQNdOZvoE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl
                          rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 07:57:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ABA2, serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9
        Validity
            Not Before: Oct  7 07:57:45 2026 GMT
            Not After : Oct 14 07:57:45 2026 GMT
        Subject: CN=6ac5fb79-e4d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:17:02:42:50:6a:fc:1a:d7:e7:cf:a6:9c:21:
                    ff:b2:1a:72:87:29:69:90:c2:48:19:13:47:1e:62:
                    92:e7:6b:63:c3:00:a5:94:00:fd:76:8a:58:a7:d1:
                    d5:f5:a0:f0:03:cd:ec:41:38:3f:7a:b7:cf:a9:a0:
                    a9:e3:1b:63:31:6d:a1:a4:0e:aa:50:4c:17:a9:60:
                    06:68:e1:69:10:50:c9:94:13:d4:b7:1e:5c:6f:61:
                    be:51:d3:5b:c4:5b:e6:00:8b:02:86:5b:6d:55:42:
                    d0:41:48:bb:c3:01:81:38:17:21:f3:d5:dc:66:83:
                    54:c7:93:8e:bf:54:3c:62:78:ff:1d:c4:df:d9:e4:
                    b6:b0:97:ba:1b:f4:4d:d4:70:01:cb:0c:c9:62:f4:
                    ca:36:c2:a8:9c:49:4b:4f:dc:a1:40:61:07:f4:56:
                    06:c3:5c:61:fb:be:b7:7d:61:ae:6e:32:85:90:2a:
                    f5:e6:65:dd:74:46:b2:81:c3:c5:85:d1:43:73:7e:
                    67:f4:34:46:e2:ab:45:16:79:7d:c8:73:59:c5:09:
                    96:12:6c:5e:18:33:ca:84:7a:9b:3b:79:8f:d3:45:
                    8a:16:ef:28:31:9b:f1:da:15:89:25:99:bd:79:a1:
                    e3:49:20:38:9a:9a:90:6e:d0:90:6e:e5:85:69:e7:
                    aa:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DE:D2:24:49:70:95:1F:7B:03:C4:E7:C8:1B:43:52:AF:17:BD:EA
            X509v3 Authority Key Identifier:
                keyid:FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:03:6b:93:2d:ee:52:7b:38:bb:be:22:c7:83:e0:60:ea:b2:
         37:9b:e0:f7:1e:43:10:06:d4:65:85:cb:cd:a2:ff:6e:01:09:
         b8:59:63:c6:92:b5:8d:ab:0c:64:f7:a2:9c:63:e1:dd:cf:a0:
         3f:8c:fc:e1:36:a1:df:4e:ab:b8:03:c2:89:f0:52:eb:06:78:
         7c:7b:c4:e8:4c:c3:86:b3:63:63:76:4d:70:65:8f:1f:ce:d2:
         fa:1a:72:80:a1:cc:f5:22:ff:92:fa:8a:62:fd:66:b2:e2:f5:
         1a:96:5c:8c:17:eb:e2:24:8d:2c:ad:57:83:a6:b5:6c:7e:83:
         03:69:da:c4:93:18:6b:d9:48:1a:3c:66:88:77:60:98:1f:66:
         0d:74:7b:c8:e4:a4:e3:30:cc:2a:bf:e1:bc:97:c6:e7:78:ac:
         a3:0e:83:28:76:4a:4d:d4:83:f6:62:e1:a5:69:9f:4d:24:fe:
         ed:3d:1a:db:c1:8b:b1:0e:82:ac:0f:c0:9c:e7:83:34:d0:1b:
         85:af:f0:b2:63:49:df:c1:fa:c4:0e:2f:6a:84:14:fe:f0:6c:
         8c:29:c9:4f:a1:eb:55:bd:83:f3:c5:e7:df:77:3f:36:91:71:
         4b:81:74:91:46:bd:6d:cf:8d:ea:28:b2:ef:ce:bf:12:77:e2:
         b3:44:06:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:14:08 2026 by rpki-client