Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
File:                     a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft (raw, json)
Hash identifier:          GLtnBlawxViSVG4zcnbj5OC7uAWLhuq4Bp+nojUHpNI=
Subject key identifier:   2D:2D:7E:9D:63:0A:9A:77:8B:B9:22:13:B9:D3:17:2D:31:40:AA:C8
Authority key identifier: 6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7
Certificate issuer:       /CN=A912AF79/serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7
Certificate serial:       0278
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
Manifest number:          0271
Signing time:             Sun 27 Sep 2026 02:21:45 +0000
Manifest this update:     Sun 27 Sep 2026 02:21:45 +0000
Manifest next update:     Sun 04 Oct 2026 02:21:45 +0000
Files and hashes:         1: a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl (hash: yGusP6KqbMt8j96gadejJ2jflXiUtZI0fAWqRIOwf8c=)
                          2: 476C306204A711EEA68A0D2FC4F9AE02.roa (hash: ZdlJs5j59OTdtMykqgkEo4kSJVyRSWRBfHHhWT67xiU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl
                          rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 02:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632 (0x278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AF79, serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7
        Validity
            Not Before: Sep 27 02:21:45 2026 GMT
            Not After : Oct  4 02:21:45 2026 GMT
        Subject: CN=6ab87db9-38db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2f:74:98:06:51:b1:92:ac:13:20:41:b9:62:
                    b1:56:79:13:9d:d0:32:c7:ee:10:7d:7d:3c:97:3d:
                    94:3f:88:49:04:8b:c4:82:06:4e:71:72:51:91:30:
                    29:c1:55:c6:db:3c:ff:b5:15:d4:58:f3:3a:24:ab:
                    35:0b:be:4a:fe:b5:fa:88:da:98:7d:86:ff:47:24:
                    e9:89:72:e8:1f:aa:43:d8:61:7b:82:ca:d0:6f:e9:
                    15:7a:01:88:0b:b0:2a:fa:87:53:8e:7c:f7:04:f0:
                    3d:05:41:dc:36:60:9b:9d:8d:58:66:44:3b:da:ee:
                    d1:c3:11:29:cf:82:e3:ea:45:64:92:d7:50:d9:41:
                    5f:a2:0b:61:dd:c5:cf:b2:59:cd:5c:91:53:c6:e5:
                    80:b5:ca:cb:14:b3:ab:7d:fb:40:99:13:65:dc:e2:
                    51:7e:4e:1f:aa:41:d5:5b:c2:90:a3:b2:11:d5:f0:
                    20:06:73:4c:ff:65:e2:83:0f:d1:60:d2:e6:6d:a5:
                    a7:da:f7:7e:fb:47:de:66:6d:74:20:18:3d:ac:5c:
                    4d:99:4c:82:a3:69:98:e1:84:2d:9e:b1:2e:0c:0a:
                    6a:75:f6:06:fa:9e:ba:90:88:07:02:54:fa:a7:18:
                    e4:3c:d0:b5:2e:0b:46:fe:aa:e0:bd:8f:a1:55:a3:
                    33:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2D:7E:9D:63:0A:9A:77:8B:B9:22:13:B9:D3:17:2D:31:40:AA:C8
            X509v3 Authority Key Identifier:
                keyid:6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c8:d9:14:0c:82:be:ff:22:3c:34:57:63:16:90:40:ef:13:
         ae:1a:82:59:b3:a6:ea:ed:41:2e:21:33:26:ce:fc:a2:11:2b:
         70:16:12:6b:c8:e2:a1:6b:b1:4c:b3:0b:0b:57:66:2f:e7:00:
         9a:96:ac:eb:b3:8d:38:0f:71:8d:b0:31:95:14:67:12:e0:5f:
         88:cd:c6:8e:da:13:6d:98:81:b5:e1:2e:c6:cc:b4:93:0e:1e:
         47:63:7c:d4:22:88:ed:7b:4f:5a:53:de:be:c3:78:07:6a:1d:
         ed:22:8e:35:d0:e0:05:b7:44:67:21:3e:70:32:5e:c3:63:ed:
         91:ec:6d:73:4f:dc:bb:fe:45:fa:b7:1b:b3:18:8b:34:10:49:
         41:f8:5a:df:24:4a:7e:18:d3:c2:e4:d4:fd:a3:e1:36:00:dc:
         84:fe:1a:0b:c9:fd:e5:3f:d6:f9:aa:10:1d:3e:80:7f:a9:ec:
         8d:f1:38:28:b7:31:95:fb:29:ff:df:03:ba:4f:4b:5e:20:ca:
         13:74:cb:80:4a:98:24:40:d1:b3:3f:e0:12:ce:97:07:a3:24:
         93:e9:84:f7:27:f8:7c:c8:3f:89:36:63:38:af:2d:48:8b:44:
         2b:5e:14:d8:8a:1f:61:53:0f:4d:d9:21:e9:bc:0b:77:f4:aa:
         56:d5:b6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:11:55 2026 by rpki-client