Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
File:                     o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft (raw, json)
Hash identifier:          VTfCipd41IIFWDRfgpDq5KpwRYA0Q4ie32mTmprq3Wc=
Subject key identifier:   5D:8B:50:7B:15:7B:EB:1A:EF:DB:B6:0A:4A:CC:88:3A:3D:D8:B0:6A
Authority key identifier: A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82
Certificate issuer:       /CN=A914F6AF/serialNumber=A3D250C5D52C5A8AC67BA021884D191A5D4A7182
Certificate serial:       02CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
Manifest number:          02C9
Signing time:             Mon 21 Sep 2026 01:14:34 +0000
Manifest this update:     Mon 21 Sep 2026 01:14:33 +0000
Manifest next update:     Mon 28 Sep 2026 01:14:33 +0000
Files and hashes:         1: o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl (hash: iszqWaInqG4q8SxaiGkDY1ssuRtArLzBXT6FvemAqK4=)
                          2: CCCA3842714711EDBB61A87FC4F9AE02.roa (hash: dQes4cKEo3vqUyE4KHkW1L+GW6dnJAq7VF/ynzV3hTs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl
                          rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:14:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719 (0x2cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F6AF, serialNumber=A3D250C5D52C5A8AC67BA021884D191A5D4A7182
        Validity
            Not Before: Sep 21 01:14:33 2026 GMT
            Not After : Sep 28 01:14:33 2026 GMT
        Subject: CN=6ab084f9-74cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6a:2c:c3:65:27:69:b6:d3:e3:c1:9a:6e:86:
                    db:1c:43:0a:5d:16:0c:c8:d7:ef:4e:9d:04:21:79:
                    12:e1:ab:41:ef:62:90:4f:b9:b6:c1:67:ad:70:54:
                    6c:0a:62:1a:6b:58:61:ef:52:58:bd:95:ae:30:ec:
                    ea:fd:53:e2:a5:0e:4b:e9:b1:e6:42:73:05:44:35:
                    d0:67:85:55:77:ae:e5:c4:a5:d1:f5:48:53:5b:82:
                    70:6f:fa:4d:bc:12:d9:5f:17:83:ea:a3:73:cd:45:
                    7a:5e:b9:30:ec:a5:2e:aa:52:e4:fb:ab:86:ac:74:
                    15:a6:69:48:a6:ca:ab:e9:c3:a4:6c:94:60:36:5e:
                    85:b8:d7:da:87:a4:d4:e7:22:45:f6:af:51:d9:db:
                    30:ee:b7:1e:b8:bd:05:7f:03:dc:11:71:37:fd:bc:
                    6b:51:da:c4:99:c2:73:a7:8e:d6:1c:82:4c:65:0f:
                    de:6f:97:9e:99:e5:de:33:28:15:40:26:e3:08:14:
                    d3:e1:3e:1b:1f:9c:10:5c:30:d3:e0:d3:9c:ac:05:
                    62:87:99:ca:66:6f:af:d1:a4:66:16:d8:0d:70:1e:
                    bd:f5:9c:2c:01:7b:dc:01:5c:71:0c:09:60:c8:29:
                    37:b2:88:7e:e7:9d:14:81:f6:b3:a9:93:d4:6d:8b:
                    41:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8B:50:7B:15:7B:EB:1A:EF:DB:B6:0A:4A:CC:88:3A:3D:D8:B0:6A
            X509v3 Authority Key Identifier:
                keyid:A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:65:d7:e3:e9:fc:fe:da:9d:0d:2b:5d:5e:cc:52:1c:e3:d2:
         56:ef:df:57:10:37:87:2a:11:4f:eb:d0:93:47:e4:16:cb:86:
         05:b9:51:0e:56:75:55:e9:3e:88:44:73:e2:1d:a0:31:e2:0e:
         4b:05:8d:c9:06:a5:66:82:b8:9d:f0:dd:eb:7f:5a:78:e7:73:
         ba:0d:69:76:0d:4a:17:23:23:d8:78:a8:51:dd:35:87:a9:b9:
         65:fe:77:12:c2:05:b9:97:7d:8e:f9:01:36:2f:06:1e:e1:d4:
         2a:b6:41:89:dd:56:ad:92:a5:16:ab:08:8c:24:01:4f:88:4e:
         98:2b:cd:e6:fe:1b:7f:a6:27:6c:53:d9:40:1f:7b:27:22:f5:
         b0:20:56:a7:aa:1e:f2:85:ff:31:0e:a4:30:de:da:c7:a1:46:
         1a:1c:d6:96:48:11:ff:20:f0:12:b4:e5:7c:62:a3:8b:20:b4:
         f0:d4:1f:8f:f3:68:8a:c4:58:20:86:95:32:b4:5f:71:62:6d:
         85:05:01:7c:08:71:59:b7:4e:78:7f:14:a0:20:50:af:89:fc:
         d4:38:95:7f:1d:37:64:7c:43:b6:7c:cf:c7:a7:e1:ae:2f:67:
         7f:4f:de:7c:f3:01:14:a4:8a:25:56:24:27:d1:93:c1:d2:b4:
         79:2a:e9:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY2QUYxMTAvBgNVBAUTKEEzRDI1MEM1RDUyQzVBOEFDNjdCQTAyMTg4NEQxOTFB
NUQ0QTcxODIwHhcNMjYwOTIxMDExNDMzWhcNMjYwOTI4MDExNDMzWjAYMRYwFAYD
VQQDEw02YWIwODRmOS03NGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzWosw2UnabbT48GabobbHEMKXRYMyNfvTp0EIXkS4atB72KQT7m2wWetcFRs
CmIaa1hh71JYvZWuMOzq/VPipQ5L6bHmQnMFRDXQZ4VVd67lxKXR9UhTW4Jwb/pN
vBLZXxeD6qNzzUV6Xrkw7KUuqlLk+6uGrHQVpmlIpsqr6cOkbJRgNl6FuNfah6TU
5yJF9q9R2dsw7rceuL0FfwPcEXE3/bxrUdrEmcJzp47WHIJMZQ/eb5eemeXeMygV
QCbjCBTT4T4bH5wQXDDT4NOcrAVih5nKZm+v0aRmFtgNcB699ZwsAXvcAVxxDAlg
yCk3soh+550UgfazqZPUbYtBtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF2LUHsV
e+sa79u2CkrMiDo92LBqMB8GA1UdIwQYMBaAFKPSUMXVLFqKxnugIYhNGRpdSnGC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjZBRi9GNkQ4REE5Qzcx
NDQxMUVEOUZERjNEMTJDNEY5QUUwMi9vOUpReGRVc1dvckdlNkFoaUUwWkdsMUtj
WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL285SlF4ZFVzV29yR2U2QWhpRTBaR2wxS2NZSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RjZBRi9GNkQ4REE5QzcxNDQxMUVEOUZERjNEMTJDNEY5QUUwMi9vOUpReGRVc1dv
ckdlNkFoaUUwWkdsMUtjWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK2XX4+n8/tqdDStdXsxSHOPSVu/fVxA3hyoRT+vQk0fkFsuGBblRDlZ1Vek+
iERz4h2gMeIOSwWNyQalZoK4nfDd639aeOdzug1pdg1KFyMj2HioUd01h6m5Zf53
EsIFuZd9jvkBNi8GHuHUKrZBid1WrZKlFqsIjCQBT4hOmCvN5v4bf6YnbFPZQB97
JyL1sCBWp6oe8oX/MQ6kMN7ax6FGGhzWlkgR/yDwErTlfGKjiyC08NQfj/NoisRY
IIaVMrRfcWJthQUBfAhxWbdOeH8UoCBQr4n81DiVfx03ZHxDtnzPx6fhri9nf0/e
fPMBFKSKJVYkJ9GTwdK0eSrpqQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:01:16 2026 by rpki-client