Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
File:                     4suW87BaY-nlR5ZSbszpSjWR5fw.mft (raw, json)
Hash identifier:          7o2sXwxoqdawsGNl8tZDKxL5AiLnNOswhvePAADl65I=
Subject key identifier:   A5:CF:27:D4:1E:98:12:AA:DE:CC:4D:01:63:DC:8F:C7:87:72:1C:AE
Authority key identifier: E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC
Certificate issuer:       /CN=A9157B74/serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC
Certificate serial:       FD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
Manifest number:          F9
Signing time:             Mon 21 Sep 2026 06:13:51 +0000
Manifest this update:     Mon 21 Sep 2026 06:13:50 +0000
Manifest next update:     Mon 28 Sep 2026 06:13:50 +0000
Files and hashes:         1: 4suW87BaY-nlR5ZSbszpSjWR5fw.crl (hash: 4I4ZZN9w2wXH9Y/wK7Sc7Ve9DimDg3okF4j5myvrwkM=)
                          2: ACCFE0643C9711F08159891EC4F9AE02.roa (hash: j7nDmBZXblO/tpvpaih+MGRhVNByB2VTssko4z3YvKQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl
                          rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:13:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157B74, serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC
        Validity
            Not Before: Sep 21 06:13:50 2026 GMT
            Not After : Sep 28 06:13:50 2026 GMT
        Subject: CN=6ab0cb1f-ceff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:eb:92:ba:36:f0:38:8c:f3:47:73:03:d6:ad:
                    c6:04:99:0a:36:1d:5d:12:38:25:a7:77:3c:fa:28:
                    ff:30:00:5a:43:2c:02:55:95:8e:c3:b6:03:81:54:
                    23:68:39:7f:74:fc:08:a7:23:79:13:bd:07:a0:b4:
                    63:b3:e8:62:0a:7a:58:8c:11:03:8b:b2:63:9c:21:
                    ed:e6:88:9f:78:b6:5c:07:41:df:2f:50:53:9f:63:
                    e5:d1:6a:9b:0f:8e:86:a7:e8:3e:96:42:ef:e4:47:
                    ab:ac:da:b8:00:71:be:1c:34:1f:d1:5f:0f:cc:36:
                    33:51:ab:8a:f1:89:cc:19:b0:f0:d9:33:a3:70:84:
                    fa:cf:6c:08:f6:e7:bc:0b:ff:03:e4:bd:c6:6f:0b:
                    72:fa:38:e5:58:7e:33:84:0d:dc:ef:3f:4f:26:ff:
                    18:e3:40:3e:cb:11:5c:71:d7:aa:73:89:88:cd:62:
                    ca:59:49:6e:cc:b9:7f:16:a9:c2:c1:c0:53:df:ef:
                    9d:74:b0:9a:c9:58:b4:d4:7d:7a:c6:2d:c3:0a:72:
                    20:12:e9:38:11:21:0e:09:84:97:74:87:2e:8b:f1:
                    ca:a8:e8:9a:60:21:ee:9b:83:8a:f4:c3:8a:e5:ea:
                    47:0b:2e:cf:9a:27:55:f3:9c:14:93:e9:ee:d4:5d:
                    6c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CF:27:D4:1E:98:12:AA:DE:CC:4D:01:63:DC:8F:C7:87:72:1C:AE
            X509v3 Authority Key Identifier:
                keyid:E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ca:f3:81:1c:51:c1:8e:6c:a8:5e:11:04:d4:cd:d9:c2:38:
         b9:02:74:42:b0:c6:76:87:3a:48:fe:1c:96:38:b7:2c:32:fa:
         af:fc:03:03:65:7d:12:f5:18:16:8c:5f:7d:07:6c:85:66:22:
         9d:b0:e9:6e:79:9d:13:d1:35:41:1d:7d:e6:47:05:38:81:2b:
         15:4a:a0:83:a2:ca:96:87:4a:9e:28:16:3f:98:50:35:a3:8e:
         56:fd:c4:5f:7d:e3:30:79:d0:38:fe:8b:31:5f:2d:2c:d0:f0:
         d4:ea:fd:9c:26:ad:6c:35:5c:2e:1e:63:db:2f:e4:3c:09:e2:
         d1:10:f3:3e:47:66:07:d1:9b:c1:fd:51:5d:d0:4e:cb:e6:63:
         ac:4a:4b:95:33:ae:1c:4d:bb:5a:2c:ee:9f:dc:d1:e5:30:a6:
         57:07:22:7a:0b:46:21:d4:67:c3:b9:c8:be:67:06:dc:d2:4a:
         4d:ea:5b:a1:34:87:37:22:dc:fb:d3:0d:78:ba:25:fb:31:6d:
         b8:1e:3d:90:9a:43:a1:24:a1:2b:77:e1:13:ec:02:6d:d7:0c:
         a3:a9:8b:08:52:de:7c:cb:25:b1:4a:79:ff:c3:54:72:f7:76:
         d1:97:9a:67:29:dd:a1:d0:54:d7:8e:e2:5c:96:c0:4a:21:db:
         54:04:a1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:58:41 2026 by rpki-client