Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
File:                     Sr9max48bHEsS0dwG_3RV94Djy8.mft (raw, json)
Hash identifier:          UXVlXRPNdykKQolQv6TRShiJ+Nj3LdroiiGjTcDmZ8U=
Subject key identifier:   38:03:47:1C:46:0E:DC:30:02:F3:70:10:1D:0A:90:ED:D7:B4:35:38
Authority key identifier: 4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F
Certificate issuer:       /CN=A911EED9/serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
Manifest number:          50
Signing time:             Mon 21 Sep 2026 08:20:33 +0000
Manifest this update:     Mon 21 Sep 2026 08:20:33 +0000
Manifest next update:     Mon 28 Sep 2026 08:20:33 +0000
Files and hashes:         1: Sr9max48bHEsS0dwG_3RV94Djy8.crl (hash: JIKNASVuyqlz3i3N/TZvFZWwzQ1cODVN+XoDrSguGn8=)
                          2: 1EC9E19C7AD111F188194D1271A30FBC.roa (hash: +9AXgCQZHA/qQnY6/zfwgsV6IjHJCtO7mBqzVtouNxg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl
                          rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EED9, serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
        Validity
            Not Before: Sep 21 08:20:33 2026 GMT
            Not After : Sep 28 08:20:33 2026 GMT
        Subject: CN=6ab0e8d1-0111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0a:7d:b0:5b:4c:f5:46:c6:5c:d4:c6:e2:0d:
                    9f:c4:48:5e:4a:10:db:7b:ea:55:a4:a0:a5:27:1a:
                    47:b7:2b:d5:ab:f2:25:da:01:d1:ba:b9:a1:32:37:
                    d3:12:e8:7f:b9:a1:f0:59:cf:7d:fa:3b:bd:4a:bf:
                    43:37:5d:44:39:da:27:e6:56:a9:69:4a:f4:8e:f9:
                    1f:96:ca:8c:0f:68:b5:03:c2:d3:18:37:a1:89:5c:
                    90:dd:dd:b2:0d:68:f1:e6:99:b7:be:b4:02:88:69:
                    bb:6b:77:4b:5a:c1:17:7f:a4:79:f6:e5:20:75:b3:
                    22:35:19:3b:42:9e:31:f5:62:54:0e:32:34:ba:cb:
                    a3:0b:16:5f:6b:a5:ff:01:42:54:3f:0e:9e:62:ba:
                    9b:5e:28:3a:72:4b:f1:2a:86:78:1c:fa:43:be:0a:
                    3f:75:fa:79:bb:5b:0c:b7:e4:3c:82:7e:a9:83:84:
                    21:87:62:d4:22:73:2f:69:34:3c:9b:8f:17:77:2d:
                    8e:8a:9a:b8:8e:cf:8a:88:48:44:eb:2e:39:9d:0c:
                    80:c7:91:60:4c:aa:cf:17:af:2e:39:a6:dc:5b:d2:
                    dc:07:4a:08:ba:db:15:38:a2:66:15:de:b2:16:c7:
                    10:d5:32:16:4b:46:21:7b:01:1d:57:37:cb:79:49:
                    66:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:03:47:1C:46:0E:DC:30:02:F3:70:10:1D:0A:90:ED:D7:B4:35:38
            X509v3 Authority Key Identifier:
                keyid:4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f2:f3:90:80:47:ac:3b:55:50:43:2d:5f:cd:18:48:7d:d6:
         00:dd:4f:fd:e2:cf:d6:75:3c:68:b9:72:b4:59:bb:9b:5b:cd:
         e1:9d:b5:70:aa:c0:00:7b:80:4f:f6:ee:92:f9:f5:45:c3:d8:
         fc:72:7e:ce:19:56:ed:9d:5b:72:fb:e3:ce:4f:ba:48:75:58:
         dc:f5:10:b0:87:6b:d4:ae:75:d9:0d:93:a4:4c:e1:d2:04:1b:
         bd:34:26:b9:44:4a:b3:db:72:e9:88:6c:67:0c:bf:6b:3a:2a:
         1c:82:92:76:24:6a:50:cb:7f:77:47:97:46:7a:bf:67:4d:bd:
         dd:9d:8c:c5:00:b2:d3:fc:b9:14:d9:b9:03:fb:61:83:56:f5:
         59:7d:8a:14:e2:ba:28:31:6f:0a:72:b1:f3:d1:c9:61:c0:5f:
         e8:a9:76:52:1e:77:e9:d1:d6:ee:59:49:36:41:6a:c4:56:13:
         ee:66:05:b0:3a:51:11:39:83:58:f4:6e:f6:e5:2d:c1:b3:c3:
         2e:3d:1b:85:7e:20:a3:73:75:00:bd:ed:10:a0:65:cd:77:40:
         9d:ec:25:01:ea:81:01:55:07:09:8e:73:f4:15:c1:05:1c:62:
         8a:f6:e2:6d:b4:5f:03:db:a0:01:72:20:f4:d7:e8:cb:2d:0e:
         00:df:96:86
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
RUVEOTExMC8GA1UEBRMoNEFCRjY2NkIxRTNDNkM3MTJDNEI0NzcwMUJGREQxNTdE
RTAzOEYyRjAeFw0yNjA5MjEwODIwMzNaFw0yNjA5MjgwODIwMzNaMBgxFjAUBgNV
BAMTDTZhYjBlOGQxLTAxMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDaCn2wW0z1RsZc1MbiDZ/ESF5KENt76lWkoKUnGke3K9Wr8iXaAdG6uaEyN9MS
6H+5ofBZz336O71Kv0M3XUQ52ifmVqlpSvSO+R+WyowPaLUDwtMYN6GJXJDd3bIN
aPHmmbe+tAKIabtrd0tawRd/pHn25SB1syI1GTtCnjH1YlQOMjS6y6MLFl9rpf8B
QlQ/Dp5iupteKDpyS/Eqhngc+kO+Cj91+nm7Wwy35DyCfqmDhCGHYtQicy9pNDyb
jxd3LY6KmriOz4qISETrLjmdDIDHkWBMqs8Xry45ptxb0twHSgi62xU4omYV3rIW
xxDVMhZLRiF7AR1XN8t5SWYVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOANHHEYO
3DAC83AQHQqQ7de0NTgwHwYDVR0jBBgwFoAUSr9max48bHEsS0dwG/3RV94Djy8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFRUQ5LzI0MkUwQkJBNDNB
NzExRjFBNTkxMTJFMDkzODMzNzczL1NyOW1heDQ4YkhFc1MwZHdHXzNSVjk0RGp5
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvU3I5bWF4NDhiSEVzUzBkd0dfM1JWOTREank4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF
RUQ5LzI0MkUwQkJBNDNBNzExRjFBNTkxMTJFMDkzODMzNzczL1NyOW1heDQ4YkhF
c1MwZHdHXzNSVjk0RGp5OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA68vOQgEesO1VQQy1fzRhIfdYA3U/94s/WdTxouXK0WbubW83hnbVwqsAAe4BP
9u6S+fVFw9j8cn7OGVbtnVty++POT7pIdVjc9RCwh2vUrnXZDZOkTOHSBBu9NCa5
REqz23LpiGxnDL9rOiocgpJ2JGpQy393R5dGer9nTb3dnYzFALLT/LkU2bkD+2GD
VvVZfYoU4rooMW8KcrHz0clhwF/oqXZSHnfp0dbuWUk2QWrEVhPuZgWwOlEROYNY
9G725S3Bs8MuPRuFfiCjc3UAve0QoGXNd0Cd7CUB6oEBVQcJjnP0FcEFHGKK9uJt
tF8D26ABciD01+jLLQ4A35aG
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:40:56 2026 by rpki-client