Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
File:                     G9xHZ6bV6-C--lyhI1MI915IiRo.mft (raw, json)
Hash identifier:          k3sEe3SM2CPLr3RMfNOmef9wmIzhkbvtNdnyC1dhUUs=
Subject key identifier:   C6:CC:04:FE:10:0E:F2:3F:E2:98:0F:30:9E:7B:93:EE:D0:11:CB:1C
Authority key identifier: 1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A
Certificate issuer:       /CN=A9149C2D/serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A
Certificate serial:       1CAB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
Manifest number:          1C96
Signing time:             Thu 08 Oct 2026 16:13:59 +0000
Manifest this update:     Thu 08 Oct 2026 16:13:58 +0000
Manifest next update:     Thu 15 Oct 2026 16:13:58 +0000
Files and hashes:         1: G9xHZ6bV6-C--lyhI1MI915IiRo.crl (hash: kzbVCYbY6cctkztQvA4KYfeUemFzeSREkRAzr0fzLbI=)
                          2: A607F8965F4611EE80BD8D2DC4F9AE02.roa (hash: fv4oRIQ4Gxh8CoHiTKL/BcGQRnYE0nj0QiSPtWSrjAM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.crl
                          rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 16:13:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7339 (0x1cab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149C2D, serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A
        Validity
            Not Before: Oct  8 16:13:58 2026 GMT
            Not After : Oct 15 16:13:58 2026 GMT
        Subject: CN=6ac7c146-610c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9a:2f:c9:17:39:2c:cf:58:aa:06:a2:73:27:
                    f1:40:7c:39:79:6c:9e:c8:ad:15:1f:45:91:d0:24:
                    db:5d:4f:ec:de:cf:8d:6c:f6:fc:f5:af:58:96:16:
                    03:26:bb:ce:3c:e6:af:07:98:53:80:d3:d2:2a:3b:
                    a0:c2:43:d9:88:d7:cd:20:ce:5a:12:ed:67:67:d4:
                    a3:59:e3:38:04:02:3c:8d:d2:e3:22:b3:d8:dc:21:
                    79:91:95:8c:e3:d8:65:34:fb:9d:e9:e1:bd:11:30:
                    b3:8e:7a:74:e0:f9:d3:e8:2b:9a:08:6a:61:07:84:
                    05:e6:8a:51:e1:44:28:9b:5f:90:81:0f:24:df:e6:
                    94:f9:f4:53:ce:80:85:7d:97:d8:97:ec:99:68:7a:
                    8e:87:dc:70:a3:aa:8e:33:73:64:e2:06:ae:bc:be:
                    a3:48:14:66:91:79:c9:aa:a2:9d:9b:1c:02:1f:98:
                    85:67:fa:af:22:e8:e2:c7:71:79:1c:2c:15:48:91:
                    3e:9e:3c:ac:d0:b8:8c:09:84:48:81:04:80:4e:cc:
                    7b:62:d9:d7:aa:1a:59:5e:26:12:de:2c:9b:7c:1a:
                    86:8a:dd:6c:04:c1:57:f8:21:eb:15:d8:5c:f6:1f:
                    e0:c4:71:3e:73:81:36:18:4d:18:5a:95:ca:f4:53:
                    7c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CC:04:FE:10:0E:F2:3F:E2:98:0F:30:9E:7B:93:EE:D0:11:CB:1C
            X509v3 Authority Key Identifier:
                keyid:1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:27:37:7a:61:73:31:da:71:f7:0e:da:a7:95:76:65:3c:aa:
         4f:9a:3b:6c:d1:a3:67:9e:d7:48:7a:e9:8b:8b:6f:ac:e3:f2:
         e0:b8:6f:36:71:81:ab:81:e5:3e:cd:c9:9e:5f:a3:73:f7:52:
         58:27:c5:87:71:3c:ac:3f:7c:45:25:b5:e6:2e:2e:a6:1e:d9:
         c2:6b:5e:2d:16:79:f2:09:03:59:6b:d9:46:2c:7e:17:9c:ef:
         8e:c1:7c:1a:82:ba:9f:34:0c:f4:f4:fc:c2:d5:1d:72:f3:ec:
         dd:ef:0d:e6:b3:bc:9b:10:1e:7d:ab:77:d2:17:e0:4d:68:20:
         48:b9:1f:1b:3a:0b:80:14:49:b5:b7:71:a8:e5:33:5c:55:f1:
         a7:2e:5b:bf:33:73:fc:7b:1a:e4:d2:3e:f3:5e:09:31:10:38:
         79:05:ff:42:d6:84:1f:b7:a3:86:29:82:c0:c2:9d:50:e7:cb:
         11:fb:40:5e:db:7f:32:25:21:b1:80:ab:8e:81:6c:83:8b:ca:
         6b:86:33:8e:d2:b7:35:b5:ea:a8:05:d4:be:ac:49:b9:b8:88:
         f1:bd:af:8b:28:34:72:6d:9f:8f:78:17:36:ac:7c:2f:57:1d:
         a5:b1:8d:ae:07:ab:c1:7c:03:81:40:aa:ae:08:b7:0e:34:dd:
         81:e5:56:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:58:54 2026 by rpki-client