Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft
File:                     fSf9xw_NGLbdWwQmla_djBc1wTA.mft (raw, json)
Hash identifier:          u7RuHeSr8J/KFk51uvPJggfuKW9Jl1Gs8y6eHmLCp7o=
Subject key identifier:   5F:24:1B:76:7D:4A:2F:79:FA:6E:04:12:1A:F8:B7:99:F2:79:4F:BA
Authority key identifier: 7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30
Certificate issuer:       /CN=A9122041/serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130
Certificate serial:       01E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft
Manifest number:          01DB
Signing time:             Mon 21 Sep 2026 03:33:32 +0000
Manifest this update:     Mon 21 Sep 2026 03:33:32 +0000
Manifest next update:     Mon 28 Sep 2026 03:33:32 +0000
Files and hashes:         1: fSf9xw_NGLbdWwQmla_djBc1wTA.crl (hash: nYEnir9va2jPLeck84o32PGULdF7o46ZVK96fRiQE8Q=)
                          2: E46B7DACDC3611EEBE5CDD37C4F9AE02.roa (hash: MoAvmDRbnJwkS+0vgmz3vs5HmfoZ+nx4vYyuMb9qNrM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl
                          rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122041, serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130
        Validity
            Not Before: Sep 21 03:33:32 2026 GMT
            Not After : Sep 28 03:33:32 2026 GMT
        Subject: CN=6ab0a58c-b918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4b:eb:cd:02:ad:7c:c2:1d:38:2c:98:0b:c0:
                    10:3d:85:9c:7f:37:87:21:41:b0:bf:d1:e0:19:b9:
                    e4:10:3c:3b:18:8d:85:3b:00:3a:32:a1:5d:84:03:
                    99:19:93:b7:5a:07:09:b2:a3:c5:0f:fb:f1:a5:4a:
                    26:ae:da:59:8c:59:6d:86:56:d6:60:cc:34:35:b7:
                    bc:9b:19:22:2f:22:53:ba:0d:0a:1c:62:5e:01:fb:
                    ea:ab:70:73:55:bb:95:9a:d6:b7:76:e6:4a:b8:62:
                    08:bc:09:aa:29:55:92:05:ec:d4:48:03:ab:b9:c4:
                    c1:10:a1:91:43:43:fd:6e:64:7c:44:6e:1d:a9:7f:
                    77:60:1c:1b:a4:b8:14:d0:df:2c:dd:3e:ca:d8:76:
                    7b:d2:3b:ee:11:b1:bb:69:c1:56:b7:16:c4:83:de:
                    ee:5f:69:51:cd:fc:69:ea:4c:b1:fb:36:18:a1:e4:
                    cc:87:c2:d1:de:15:6f:6c:42:34:d5:c1:0e:f9:2b:
                    2c:de:17:3f:37:a3:a1:71:f4:37:cc:23:82:4e:9a:
                    f0:1b:ed:70:45:dc:1b:e6:b2:e4:b6:e8:40:7f:ca:
                    e8:1f:5d:4f:5d:93:f6:be:38:50:ce:3c:f2:49:19:
                    5c:57:ad:c6:b8:4a:12:7d:be:2d:e6:2d:b3:b6:01:
                    fa:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:24:1B:76:7D:4A:2F:79:FA:6E:04:12:1A:F8:B7:99:F2:79:4F:BA
            X509v3 Authority Key Identifier:
                keyid:7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:9b:b7:45:f9:1e:c3:df:6f:39:95:dd:ce:07:5f:1c:30:dc:
         72:17:6d:d8:05:b8:cf:81:5e:4c:fc:0f:67:88:9f:81:23:db:
         51:2d:09:ff:fa:34:a3:69:d5:fe:6a:ca:58:0b:e0:45:3e:27:
         13:04:2f:d1:eb:cc:7b:4d:0d:cc:1a:ee:48:96:7c:45:db:5e:
         c6:53:4d:ce:06:7a:59:94:6b:22:c8:e1:33:bd:4b:f8:92:db:
         83:ac:0e:b7:9a:ae:41:b4:ce:c7:05:ea:f6:e7:c3:0f:aa:3c:
         54:8a:10:08:e1:3c:47:87:3c:d2:4f:4b:c4:7e:cc:22:5c:58:
         93:80:59:82:31:6f:7e:23:5c:92:eb:f7:4a:c0:8a:bd:b5:ba:
         01:b3:31:61:72:4b:9a:17:40:24:b8:32:b0:37:ab:a0:1b:f0:
         12:06:99:b7:c4:31:71:ce:4e:d8:f6:00:12:fc:2c:e3:54:09:
         36:e9:cf:2f:af:29:82:5f:be:a9:08:2d:a0:9c:07:72:ae:d4:
         f5:a4:0e:bf:78:17:d0:fb:b5:9f:de:f0:26:66:c6:cd:3c:39:
         3c:74:56:6e:e9:e9:fd:d1:fe:a0:b2:9c:ad:f2:89:d2:2f:5e:
         ee:31:c7:07:86:37:4c:b6:14:40:b3:da:4a:ed:66:6b:7c:e6:
         d9:eb:11:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:41:45 2026 by rpki-client