Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
File:                     R1JQ5qBVR49Kwerx7TLVZyw80bM.mft (raw, json)
Hash identifier:          6esiu3Fr1ZKLzle32Ox6pA8oBdBh+XLrdZaI8l+WmPA=
Subject key identifier:   D6:69:27:E0:87:D7:C2:BD:C7:AC:15:FF:61:47:84:B4:6D:CC:54:56
Authority key identifier: 47:52:50:E6:A0:55:47:8F:4A:C1:EA:F1:ED:32:D5:67:2C:3C:D1:B3
Certificate issuer:       /CN=A9140EE2/serialNumber=475250E6A055478F4AC1EAF1ED32D5672C3CD1B3
Certificate serial:       0E21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
Manifest number:          0E0D
Signing time:             Sat 26 Sep 2026 17:54:02 +0000
Manifest this update:     Sat 26 Sep 2026 17:54:02 +0000
Manifest next update:     Sat 03 Oct 2026 17:54:02 +0000
Files and hashes:         1: R1JQ5qBVR49Kwerx7TLVZyw80bM.crl (hash: zk18fcvMV6K/puZwEgBL5gLwuKWxByue+nMTzV5e1xk=)
                          2: B523DAE68C9211EABC682867C4F9AE02.roa (hash: DzBm/4YOy2Ud9WznE6B9DI03ozT3npO/B3S5GNicR1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.crl
                          rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 17:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3617 (0xe21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140EE2, serialNumber=475250E6A055478F4AC1EAF1ED32D5672C3CD1B3
        Validity
            Not Before: Sep 26 17:54:02 2026 GMT
            Not After : Oct  3 17:54:02 2026 GMT
        Subject: CN=6ab806ba-6616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7e:08:d2:07:55:ee:c8:b4:24:f4:98:c5:8b:
                    bf:29:3a:15:24:66:fa:a5:96:53:be:fc:17:30:f2:
                    0b:a6:ad:bc:56:d8:3e:2f:30:ab:5e:a7:19:ac:bd:
                    bc:ab:16:f0:ac:91:4c:13:17:8b:79:17:4e:0e:4c:
                    65:90:97:d7:9d:c3:e2:f1:b1:57:3b:4b:45:99:1f:
                    8e:9c:e8:66:40:32:ca:46:69:09:5e:74:e7:e3:31:
                    7d:8b:98:1a:29:d5:4d:ad:ec:51:4c:3e:1d:93:64:
                    6b:3e:08:3f:ab:26:84:06:e4:62:d0:0e:2b:03:ed:
                    71:34:57:20:da:6b:ab:5c:ff:18:ec:24:b0:8d:31:
                    04:ad:e0:20:f6:24:fc:6c:45:f5:a1:1c:68:8d:ac:
                    6f:c8:fa:33:55:72:5f:68:7c:2f:c0:a7:08:f0:98:
                    53:dd:cd:6f:e1:b8:01:cb:d4:2c:84:ad:aa:16:40:
                    50:c9:8d:dc:96:00:81:0d:5a:62:fd:3f:12:9f:40:
                    5f:c5:25:2d:ec:44:38:27:38:9c:8c:3f:a5:61:ba:
                    f8:a7:ec:a0:aa:09:5c:ff:f3:74:28:48:f6:84:e3:
                    7b:05:46:ea:05:cc:85:6c:f8:41:ca:b6:ec:24:5e:
                    60:cd:aa:7f:dc:43:73:c2:ca:4e:0d:8b:3d:96:91:
                    36:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:69:27:E0:87:D7:C2:BD:C7:AC:15:FF:61:47:84:B4:6D:CC:54:56
            X509v3 Authority Key Identifier:
                keyid:47:52:50:E6:A0:55:47:8F:4A:C1:EA:F1:ED:32:D5:67:2C:3C:D1:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:bf:5a:c4:a4:23:b3:9c:13:5d:19:b5:ad:51:b9:2b:5b:97:
         66:52:55:2c:92:34:30:f4:8c:14:ef:de:c8:33:55:52:e2:b4:
         82:5d:72:c8:1b:08:b2:8c:6f:f6:e0:05:bc:66:52:57:a7:2e:
         63:43:50:9b:54:2e:ef:e0:87:3e:34:21:3e:8c:28:32:35:52:
         64:2a:2a:eb:27:a8:db:d5:f0:8f:40:c2:53:f5:c2:9a:c9:a9:
         c3:e0:12:f2:a2:80:9a:a4:d2:2b:e5:fd:5b:d4:91:9d:a8:e5:
         77:cc:bb:46:94:30:4d:2e:52:71:92:5f:a3:a8:b4:e5:9b:53:
         63:cf:9b:3c:6b:54:f1:df:30:81:2f:d5:12:7b:cc:09:f1:b4:
         13:f4:02:a5:32:26:b4:a7:c2:ba:5d:27:3b:6a:fe:3b:ad:45:
         21:9f:8a:9d:1d:c9:05:6f:71:20:61:dd:3f:7e:f4:38:17:4a:
         7c:c5:e2:e9:df:47:b9:20:e4:2e:44:ce:41:e8:a2:ca:18:d1:
         8c:07:05:d1:20:82:34:5c:69:10:f6:59:17:12:33:ec:ba:a9:
         09:bd:d5:35:df:09:64:5a:11:00:5c:40:0a:54:76:20:8c:59:
         3d:20:b9:6e:2d:15:e3:9f:17:85:cf:f2:be:52:f5:ec:48:10:
         93:ce:96:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:13:20 2026 by rpki-client