Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft
File:                     Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft (raw, json)
Hash identifier:          18dx7KUZ7hxDzdyY04R6+B9idDI3WUeANo+PDasUXao=
Subject key identifier:   42:88:8A:D2:18:C1:40:13:FA:55:AD:8D:97:E7:52:97:BA:10:E6:44
Authority key identifier: 26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46
Certificate issuer:       /CN=A9161CEF/serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346
Certificate serial:       0C0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft
Manifest number:          0CE1
Signing time:             Sat 26 Sep 2026 19:00:46 +0000
Manifest this update:     Sat 26 Sep 2026 19:00:46 +0000
Manifest next update:     Sat 03 Oct 2026 19:00:46 +0000
Files and hashes:         1: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl (hash: VWQfHSMaaFRBRDpdVPF8Kt0f3Tjvy2e2DQJYDlIeqVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl
                          rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 19:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3086 (0xc0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161CEF, serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346
        Validity
            Not Before: Sep 26 19:00:46 2026 GMT
            Not After : Oct  3 19:00:46 2026 GMT
        Subject: CN=6ab8165e-dfec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a7:66:08:9d:a3:41:60:49:6c:39:b3:95:55:
                    14:3c:45:00:f7:a3:63:a7:f2:e6:37:4c:1b:a4:53:
                    80:87:c9:1e:41:8b:db:51:28:a2:a9:fd:55:c0:aa:
                    f7:df:0b:e8:77:ad:a9:6e:a8:b1:b3:55:7c:f1:9a:
                    e4:4b:dc:6c:f7:0c:b0:fc:4f:c2:00:e2:5d:22:ae:
                    48:0c:bd:bd:3d:71:79:0a:a6:6a:c6:1b:3d:12:8c:
                    20:02:9d:9e:99:e1:cd:9d:dd:4d:64:e3:a6:3e:50:
                    fb:cd:02:19:36:94:8f:90:1d:52:19:5b:72:4f:8b:
                    3f:d4:d4:32:c8:3f:59:70:92:07:37:b0:9e:a2:ea:
                    39:d4:ec:66:08:45:29:0d:d6:ce:e5:ea:70:68:84:
                    d7:ea:de:fa:12:a6:f4:d3:05:47:c1:0f:38:c7:ad:
                    e3:c7:04:58:a0:72:b7:d6:5c:19:b3:be:33:8a:f9:
                    1f:cc:08:88:bb:b3:65:ad:e7:11:aa:0d:2c:81:ca:
                    d6:92:dd:c7:ac:19:6f:6e:5f:17:2e:55:c7:8e:92:
                    1e:89:ba:89:ed:43:12:88:57:1b:c4:ce:60:f1:b1:
                    3e:d4:10:04:1b:a4:bc:75:3e:0b:20:bd:52:23:8a:
                    b7:03:52:bb:51:5f:ad:9c:c3:31:6d:08:ad:5f:bb:
                    59:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:88:8A:D2:18:C1:40:13:FA:55:AD:8D:97:E7:52:97:BA:10:E6:44
            X509v3 Authority Key Identifier:
                keyid:26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:00:37:a5:2e:f4:7c:ee:a1:45:28:62:25:11:cd:1c:91:8b:
         39:38:5e:b9:23:26:e5:cf:02:70:d8:3c:b4:77:0e:13:14:d9:
         c4:49:be:d8:25:62:5d:c1:53:97:50:3c:b6:de:4d:6d:03:c6:
         b9:63:1e:66:3a:ef:b3:50:42:05:c8:5d:29:0a:1e:30:6d:a3:
         73:a8:e8:cb:30:fa:66:af:48:e3:25:a9:21:56:a3:f1:29:e0:
         e4:7a:1d:1e:34:38:94:34:ab:8b:22:b8:59:c8:96:a1:ca:c9:
         fe:19:52:b2:6f:87:37:65:1e:e8:b6:13:6e:70:9f:77:5e:f4:
         d7:ce:d8:aa:45:b0:5d:06:2a:22:b4:64:48:0b:31:5d:61:bb:
         f1:19:58:db:df:65:d0:d1:6f:93:f8:5d:5f:3a:2a:2b:84:b6:
         ff:86:cd:f1:0c:2b:e0:02:c1:5c:e1:f3:d1:03:a0:68:fc:dd:
         10:8c:ad:81:bd:b3:e6:9b:79:86:18:11:36:d7:78:20:df:52:
         22:d7:04:4d:df:f9:9f:23:15:ad:1e:b5:5a:e4:79:54:2c:90:
         75:12:00:f1:07:40:ee:6e:50:73:83:71:21:32:75:86:ef:77:
         3b:63:25:c7:54:19:b4:34:7d:8a:e5:35:8d:6f:7c:de:e7:c3:
         99:15:7c:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjFDRUYxMTAvBgNVBAUTKDI2REY0RUNGOTM4QzQ5ODJEMzU3N0UxMjIxRUVCMUI2
QUQyMkMzNDYwHhcNMjYwOTI2MTkwMDQ2WhcNMjYxMDAzMTkwMDQ2WjAYMRYwFAYD
VQQDEw02YWI4MTY1ZS1kZmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm6dmCJ2jQWBJbDmzlVUUPEUA96Njp/LmN0wbpFOAh8keQYvbUSiiqf1VwKr3
3wvod62pbqixs1V88ZrkS9xs9wyw/E/CAOJdIq5IDL29PXF5CqZqxhs9EowgAp2e
meHNnd1NZOOmPlD7zQIZNpSPkB1SGVtyT4s/1NQyyD9ZcJIHN7Ceouo51OxmCEUp
DdbO5epwaITX6t76Eqb00wVHwQ84x63jxwRYoHK31lwZs74zivkfzAiIu7NlrecR
qg0sgcrWkt3HrBlvbl8XLlXHjpIeibqJ7UMSiFcbxM5g8bE+1BAEG6S8dT4LIL1S
I4q3A1K7UV+tnMMxbQitX7tZLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEKIitIY
wUAT+lWtjZfnUpe6EOZEMB8GA1UdIwQYMBaAFCbfTs+TjEmC01d+EiHusbatIsNG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUNFRi85Q0U1MTI1ODQ1
OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZTFRWMzRTSWU2eHRxMGl3
MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0p0OU96NU9NU1lMVFYzNFNJZTZ4dHEwaXcwWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MUNFRi85Q0U1MTI1ODQ1OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZ
TFRWMzRTSWU2eHRxMGl3MFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcAA3pS70fO6hRShiJRHNHJGLOTheuSMm5c8CcNg8tHcOExTZxEm+2CViXcFT
l1A8tt5NbQPGuWMeZjrvs1BCBchdKQoeMG2jc6joyzD6Zq9I4yWpIVaj8Sng5Hod
HjQ4lDSriyK4WciWocrJ/hlSsm+HN2Ue6LYTbnCfd170187YqkWwXQYqIrRkSAsx
XWG78RlY299l0NFvk/hdXzoqK4S2/4bN8Qwr4ALBXOHz0QOgaPzdEIytgb2z5pt5
hhgRNtd4IN9SItcETd/5nyMVrR61WuR5VCyQdRIA8QdA7m5Qc4NxITJ1hu93O2Ml
x1QZtDR9iuU1jW983ufDmRV8dQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 05:18:32 2026 by rpki-client