Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft
File:                     9kmjoLYxxWnKvzPjzkXIqllY3AU.mft (raw, json)
Hash identifier:          p90tJJ0bUuif9hi3ypJ3khN6AGuCJLcbz91tW+N0LtM=
Subject key identifier:   A4:E5:2A:3B:FD:93:F1:D2:E3:38:70:4D:9F:A8:18:01:BA:FA:29:D8
Authority key identifier: F6:49:A3:A0:B6:31:C5:69:CA:BF:33:E3:CE:45:C8:AA:59:58:DC:05
Certificate issuer:       /CN=A9166D02/serialNumber=F649A3A0B631C569CABF33E3CE45C8AA5958DC05
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft
Manifest number:          8B
Signing time:             Tue 13 Oct 2026 08:23:42 +0000
Manifest this update:     Tue 13 Oct 2026 08:23:42 +0000
Manifest next update:     Tue 20 Oct 2026 08:23:42 +0000
Files and hashes:         1: 9kmjoLYxxWnKvzPjzkXIqllY3AU.crl (hash: TS+LMRjRp6d25GlNN+UZRvTy7ZIJZTxJAtToNIqGZSc=)
                          2: A5E69774485411F1907D205D9E833773.roa (hash: Hf8RVmiLD+Lgc8VE9E8an2tv+ZmF6P6heQtkZtWGmpQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.crl
                          rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 08:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166D02, serialNumber=F649A3A0B631C569CABF33E3CE45C8AA5958DC05
        Validity
            Not Before: Oct 13 08:23:42 2026 GMT
            Not After : Oct 20 08:23:42 2026 GMT
        Subject: CN=6acdea8e-1366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a7:9c:b2:64:df:8c:70:af:03:a2:5e:a0:44:
                    fa:dc:96:ef:28:9c:31:3e:82:e7:1c:81:57:13:5f:
                    f8:bb:fe:60:b9:a0:24:53:b1:1f:38:88:81:ec:a9:
                    e9:b9:0c:a3:6a:c6:ff:3b:21:a2:76:4f:04:8e:2e:
                    d7:db:35:7e:bd:a1:6b:af:af:94:5b:87:9d:7a:71:
                    fe:67:4b:d4:bb:72:03:a9:9c:28:85:15:09:ae:e0:
                    93:08:5f:bd:e8:19:2b:53:a0:4e:06:d3:41:20:d5:
                    9c:ed:29:35:b7:83:5d:28:1c:15:02:86:75:04:3f:
                    5c:5e:e0:d6:61:98:c3:16:37:d7:d3:00:c9:66:d9:
                    b6:ab:80:e6:75:df:fd:82:92:74:8b:f8:8c:13:be:
                    b0:59:41:76:d7:b8:13:69:c8:8b:09:dd:c7:d5:68:
                    27:0d:f6:8d:8f:4d:b1:16:50:d9:df:9b:bc:6e:13:
                    c1:d9:d6:6d:61:e8:08:6b:9c:f2:2a:20:77:9f:22:
                    1c:cf:36:15:be:b6:71:55:75:bb:dd:3f:c7:9a:94:
                    4b:c2:b6:b4:52:4e:a9:14:55:b0:50:4d:35:aa:c4:
                    3f:9e:e5:ca:59:8c:02:e8:f6:a7:c2:12:a8:2a:44:
                    9c:96:9d:f0:1b:d5:7a:b6:ad:ac:6b:38:15:87:83:
                    b2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E5:2A:3B:FD:93:F1:D2:E3:38:70:4D:9F:A8:18:01:BA:FA:29:D8
            X509v3 Authority Key Identifier:
                keyid:F6:49:A3:A0:B6:31:C5:69:CA:BF:33:E3:CE:45:C8:AA:59:58:DC:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:30:cb:cc:bd:e6:2a:e7:d4:bb:08:5b:be:03:e9:11:31:e3:
         f9:d7:b5:a3:d5:98:39:64:26:fc:7f:91:b8:32:6e:07:9f:9e:
         81:f3:03:c9:de:5c:41:68:d1:f8:8a:d4:d0:58:06:1c:57:a4:
         2d:24:b0:cb:dd:54:7d:f1:77:0d:c0:c3:5f:c5:9a:7c:cf:0f:
         c8:69:15:67:ff:86:e6:63:ba:06:99:fd:d7:b8:03:ce:6b:2d:
         db:81:3c:9b:e0:84:b0:3e:50:dd:10:c9:00:87:7d:49:80:33:
         76:a6:12:12:45:ae:90:81:bd:d5:35:f4:40:49:79:d0:9f:41:
         09:e1:d2:ec:79:94:65:2f:ba:c5:15:93:bc:43:12:c9:41:a4:
         2a:7d:63:9e:a0:39:61:dc:1d:65:f2:f4:5e:e3:df:cf:4f:b4:
         31:1a:3b:0e:8b:c1:49:fb:57:b5:c3:15:95:99:5e:9c:ff:95:
         39:ce:8e:46:55:86:65:e0:59:1d:74:c0:98:67:36:29:ae:43:
         36:80:23:c1:cc:14:cd:80:ca:f6:73:74:e1:bf:3d:3a:57:4b:
         09:a6:4f:ec:7e:8d:af:f2:6f:90:92:f9:fb:48:95:3e:3f:c2:
         7c:f6:10:fa:cf:21:9c:3c:ee:97:05:b6:f3:dd:b6:e5:10:bb:
         69:93:e6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:47:15 2026 by rpki-client