Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
File:                     t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft (raw, json)
Hash identifier:          N2Iw3qBff3B05weStJwPPnrydZL7B8d587YtrAsIbmU=
Subject key identifier:   F0:29:CD:B8:47:67:9E:FA:22:28:A4:FF:FA:7B:9F:DB:62:B7:ED:06
Authority key identifier: B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C
Certificate issuer:       /CN=A9142DB4/serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C
Certificate serial:       0237
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
Manifest number:          0231
Signing time:             Mon 21 Sep 2026 02:41:17 +0000
Manifest this update:     Mon 21 Sep 2026 02:41:16 +0000
Manifest next update:     Mon 28 Sep 2026 02:41:16 +0000
Files and hashes:         1: t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl (hash: idFRmRIGnOO3LSs5mv/m7HlYCQoQQi+jYA35FE4O/AM=)
                          2: 9ADC9C8A5CE211EEBA4DBD15C4F9AE02.roa (hash: GuG6Y8Eu3CcfCqJ6rXqMTfXfwCt0ckJ+Jr8hqV3ee88=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl
                          rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142DB4, serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C
        Validity
            Not Before: Sep 21 02:41:16 2026 GMT
            Not After : Sep 28 02:41:16 2026 GMT
        Subject: CN=6ab0994c-5706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:44:39:7a:6c:62:d3:33:18:8a:bc:17:cb:e6:
                    eb:7f:40:f8:21:15:ee:cf:c1:58:5a:c6:cd:b7:9c:
                    b3:b1:68:d0:97:51:df:e9:9d:d6:15:88:06:05:b1:
                    7f:46:88:f3:b2:29:48:49:af:1b:b6:ac:72:4e:41:
                    f4:a8:a5:27:2f:b8:9e:4f:9d:3a:ab:f5:75:f1:b3:
                    63:15:31:6e:d6:15:07:0f:85:b8:ae:6c:3e:10:4a:
                    0c:a0:ed:c6:a3:7d:81:34:0a:a2:6c:76:68:9b:ef:
                    93:13:8c:71:96:8e:86:8f:b5:5b:e2:01:46:ff:22:
                    68:55:2b:f5:4a:06:02:c4:97:ff:80:a3:48:c7:5a:
                    cb:e0:98:24:42:94:8c:7b:cc:43:b4:6d:4a:8a:97:
                    2b:fd:58:cc:91:56:98:50:a1:b1:16:fb:03:c0:34:
                    c1:a5:4b:e9:b2:09:02:98:6c:01:4e:d4:67:d4:1d:
                    5a:23:68:b6:fc:20:b3:96:6e:b9:66:97:6e:94:5a:
                    ab:f5:b6:84:ed:72:e1:e9:38:d7:7a:a8:1a:86:c6:
                    ec:83:60:f0:60:d8:88:0d:83:b9:75:be:c6:45:54:
                    2f:af:21:3c:d7:3b:dc:6d:2a:65:12:49:a9:8b:c5:
                    b2:39:1a:ba:83:3e:a5:01:36:cf:5a:42:46:70:81:
                    b8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:29:CD:B8:47:67:9E:FA:22:28:A4:FF:FA:7B:9F:DB:62:B7:ED:06
            X509v3 Authority Key Identifier:
                keyid:B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:23:d4:58:bf:27:68:f1:4d:0b:86:94:1b:ca:2b:d3:e9:39:
         d1:e3:6a:0e:4b:24:b1:5d:d1:6d:b9:50:ee:0e:3f:ee:9e:00:
         9e:8f:f0:6a:f3:28:a7:d6:36:31:04:77:54:b4:85:93:e9:65:
         37:29:4b:42:83:87:f8:08:0f:8d:44:f0:ff:12:ef:f1:7b:1b:
         34:3c:4c:8f:a0:38:c0:07:0a:83:df:d0:f1:f3:17:23:a3:3f:
         5c:e1:6f:e6:b3:d4:56:5a:89:45:7a:a0:63:6a:cb:85:c4:30:
         0d:67:96:bf:b9:6b:cf:cc:df:c6:99:9b:5a:07:74:32:2d:7e:
         91:c8:70:d6:a7:b5:18:af:3a:23:62:e7:fd:b3:39:bb:53:ca:
         df:34:5b:36:5a:38:e0:ba:33:97:e0:51:4e:0b:30:20:51:3d:
         c3:28:ef:06:db:00:52:d9:dd:18:54:44:c9:eb:25:b9:36:df:
         0b:f4:69:65:8c:e8:06:eb:40:ed:38:30:d6:2a:2f:99:10:56:
         6f:4b:6c:27:32:5e:74:8e:58:99:07:a9:48:de:a9:86:05:d9:
         25:b4:8f:66:f1:82:85:df:a1:1c:aa:f5:0b:ee:13:a9:a0:20:
         e9:6c:7f:b5:d9:90:65:84:a4:8f:b3:6e:81:cc:4f:69:0a:46:
         7e:ae:88:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:59:46 2026 by rpki-client