Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft
File:                     3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft (raw, json)
Hash identifier:          mC/257HlrfKwdmWm/RIlmMK/fJU2iqpfUpyK2bsZOo4=
Subject key identifier:   5C:A1:71:A6:C8:E6:5B:83:98:02:26:2A:A6:9E:76:1B:9A:DE:A7:E6
Authority key identifier: DC:99:3F:AE:88:10:E9:31:4F:5A:7D:F0:8D:6F:0C:D5:7E:A5:91:6E
Certificate issuer:       /CN=A9120656/serialNumber=DC993FAE8810E9314F5A7DF08D6F0CD57EA5916E
Certificate serial:       BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft
Manifest number:          B9
Signing time:             Fri 25 Sep 2026 07:10:03 +0000
Manifest this update:     Fri 25 Sep 2026 07:10:03 +0000
Manifest next update:     Fri 02 Oct 2026 07:10:03 +0000
Files and hashes:         1: 3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl (hash: IzwvjAG0Bg8C2VUX9/1ImCjOC6hIix3L40v2bNvF5uo=)
                          2: 9CBDB3D273C211F18F47108281A30FBC.roa (hash: QzjpXPwZ05RXkz8fbxHltT903W4r3GjO2bGz/Fnh4bQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl
                          rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120656, serialNumber=DC993FAE8810E9314F5A7DF08D6F0CD57EA5916E
        Validity
            Not Before: Sep 25 07:10:03 2026 GMT
            Not After : Oct  2 07:10:03 2026 GMT
        Subject: CN=6ab61e4b-75c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fe:8b:a5:84:70:0f:0a:4b:d1:cb:f9:78:0d:
                    c6:f4:dd:57:ab:c7:4e:2a:fe:74:38:96:92:0a:44:
                    48:57:e9:21:05:bb:c6:95:25:71:bf:da:95:c9:59:
                    e1:3c:ea:58:c1:de:72:e8:ac:60:d8:2c:30:c7:8c:
                    39:12:db:2c:40:13:fc:5b:22:4e:41:7a:ed:65:68:
                    a3:90:3d:2a:61:2c:9d:93:b1:eb:aa:c7:c9:3b:6c:
                    9a:bd:89:2d:bd:17:a7:e4:e2:4a:52:8d:63:3f:3f:
                    3b:b1:5c:20:2e:a3:19:57:ae:64:79:90:b1:71:87:
                    d8:0e:db:d5:92:67:ab:f3:ba:0a:78:82:d3:c5:1a:
                    a3:d0:a1:c2:4d:8e:5f:08:7e:63:03:33:4b:ed:fb:
                    40:67:dd:d4:28:22:2a:09:09:60:1b:56:b7:55:34:
                    9f:e3:d4:33:5e:c4:e0:0b:0d:63:ad:d3:56:d9:5b:
                    86:21:9f:14:fc:33:35:7b:27:18:a4:46:0f:24:b9:
                    ed:f0:ea:d1:2a:9a:0e:92:ac:50:63:6d:34:47:3c:
                    9b:fd:fc:39:49:96:f3:c1:0b:46:ee:36:83:72:60:
                    c6:ec:91:5c:68:dc:e8:eb:ff:72:77:c0:20:7e:21:
                    57:a0:b1:5e:48:7b:97:69:8c:b3:f5:51:bb:15:bb:
                    f4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A1:71:A6:C8:E6:5B:83:98:02:26:2A:A6:9E:76:1B:9A:DE:A7:E6
            X509v3 Authority Key Identifier:
                keyid:DC:99:3F:AE:88:10:E9:31:4F:5A:7D:F0:8D:6F:0C:D5:7E:A5:91:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:46:16:b4:2d:16:21:0c:39:b0:12:4a:d0:a0:68:6a:82:8a:
         74:16:1d:5a:a6:a8:48:81:82:e9:d1:f4:d7:e0:2a:40:29:21:
         b6:12:30:21:ed:6c:18:fb:e1:8a:86:da:09:0f:35:ea:c8:67:
         47:68:e9:22:3a:5b:05:45:73:c9:36:37:61:8e:a2:89:ae:eb:
         ed:23:a7:07:68:f6:cb:15:b3:44:b8:c0:65:8e:d6:05:82:e3:
         ab:5c:6a:c2:31:0f:00:b1:8f:9f:42:21:02:e0:de:57:23:24:
         30:5e:d1:76:5f:4d:b9:d2:63:be:d3:0c:0b:ea:99:21:05:8b:
         eb:fe:70:76:5a:04:67:47:af:1f:a1:ce:6e:03:98:43:a2:f6:
         2a:eb:91:ae:72:de:64:36:7d:46:67:15:c8:2b:60:ca:9e:6d:
         24:db:9e:fd:a4:5f:14:ef:4c:60:a0:4e:4f:ad:15:0b:d4:83:
         02:23:d1:75:72:4d:cf:a1:af:6f:bd:f6:aa:ed:bc:1a:a7:39:
         09:bd:e4:5f:41:de:fc:d3:49:cb:52:f3:d2:75:16:95:d4:ca:
         a7:81:f1:22:6a:37:2b:09:41:83:61:fc:05:69:4b:7b:1f:28:
         2d:e2:f0:38:bc:d7:89:d0:fc:ff:7e:89:5c:09:f2:5b:e7:0d:
         3b:c2:a3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:04:43 2026 by rpki-client