Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft
File:                     1SAZKpWvyNXyc3TZo0xGM859rEQ.mft (raw, json)
Hash identifier:          J2f+rHD1GBREyr6fMJzoQCTC4XpEMVkfWjcaEXdH+vI=
Subject key identifier:   F5:9F:B9:61:3C:65:82:06:EE:61:C4:D1:D2:2E:16:8D:BE:E6:59:E6
Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44
Certificate issuer:       /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44
Certificate serial:       027B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft
Manifest number:          0268
Signing time:             Fri 09 Oct 2026 02:50:32 +0000
Manifest this update:     Fri 09 Oct 2026 02:50:31 +0000
Manifest next update:     Fri 16 Oct 2026 02:50:31 +0000
Files and hashes:         1: 1SAZKpWvyNXyc3TZo0xGM859rEQ.crl (hash: Pk9gVV7GSXPubBzQMKhMpSoYIyQ6rTL4bKsLAWs1aPU=)
                          2: D42F5C768D6C11F18EE805546F11F970.roa (hash: Sz/65WULpY02tU1/WSVRdUsQAN8B0cHXUocGj84jNV8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl
                          rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 02:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635 (0x27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169A9C, serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44
        Validity
            Not Before: Oct  9 02:50:31 2026 GMT
            Not After : Oct 16 02:50:31 2026 GMT
        Subject: CN=6ac85678-8b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:84:c4:af:d7:60:58:05:5e:98:d6:ed:78:42:
                    75:27:ad:df:70:b8:1c:f4:e5:76:39:ab:98:23:b5:
                    d3:86:5f:6a:0e:a9:99:da:73:d9:ae:df:9b:62:11:
                    23:92:87:c0:4e:2b:10:46:72:1d:9c:a7:b9:8c:33:
                    da:cd:75:1d:e4:20:7a:b9:41:92:e1:95:ac:dd:54:
                    ed:c6:ca:77:79:81:de:e4:db:88:d4:da:9d:4f:e1:
                    51:29:57:14:f4:27:83:83:f3:3b:75:aa:67:a7:ab:
                    b7:fa:cc:0b:0e:f0:ed:4a:f2:b3:1b:6a:64:10:4e:
                    c3:35:d9:4e:95:e6:5a:44:29:6b:14:b5:87:76:a4:
                    03:51:df:82:7d:17:a0:a3:7f:d5:9a:f9:d8:6b:e1:
                    56:42:e3:e9:c4:ae:d0:68:07:b0:97:e3:79:1a:47:
                    82:bb:94:33:0d:c8:76:eb:3b:a1:4d:4f:7c:af:9c:
                    81:b5:b5:ed:b4:de:05:8a:9b:9a:bc:ab:80:cc:17:
                    e6:99:cb:60:31:2f:03:7c:d4:0d:76:43:9f:34:14:
                    c1:01:54:b2:1f:a0:1e:48:c6:57:0a:04:fa:88:9a:
                    0a:0d:bf:0e:38:7d:61:5a:87:b5:19:f9:53:8f:4f:
                    ac:c7:35:2a:c8:a7:47:ff:30:fb:4c:68:69:34:25:
                    69:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9F:B9:61:3C:65:82:06:EE:61:C4:D1:D2:2E:16:8D:BE:E6:59:E6
            X509v3 Authority Key Identifier:
                keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:0a:78:7f:6d:fd:86:c7:31:70:f9:c9:4e:0d:e3:bd:83:97:
         db:c7:2b:52:d7:8b:c7:3f:96:5e:33:fe:13:9f:c0:aa:9c:6a:
         61:cd:40:c4:33:cd:3f:76:e0:6a:0a:a9:3b:41:0c:e7:c0:ba:
         3c:88:70:25:82:83:b5:11:3a:8e:f4:a6:8e:7e:b6:92:73:2b:
         7c:a4:2a:38:9e:e8:20:d5:ab:3f:10:60:26:19:dd:c5:85:34:
         ae:c6:3c:11:8f:1e:ca:86:c0:98:b9:78:51:bb:71:ba:97:aa:
         cb:5a:ab:c6:be:72:af:8b:be:04:8f:4d:3e:05:71:cc:6d:4f:
         b5:61:30:8b:f4:22:da:4c:0a:4a:08:69:99:0c:f2:52:37:bd:
         bd:af:3a:f5:4a:e9:2c:88:ae:cb:6d:36:ab:d8:10:eb:8e:b6:
         f7:db:de:5b:5f:cb:c0:4c:b6:85:6c:23:9f:2a:49:77:22:a1:
         d2:86:f9:fc:7b:6b:b9:03:a3:9c:61:1b:66:18:2d:f5:fe:80:
         c4:6c:e7:54:4b:f9:f4:48:fc:35:db:84:66:6a:80:26:1f:55:
         b7:3a:7e:1e:89:fe:e0:4f:ac:f2:c5:46:3d:a2:51:ff:6e:57:
         46:eb:3c:45:c7:3d:26:1a:e6:61:64:7e:37:59:0b:a3:1f:96:
         1c:3d:ea:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:28:45 2026 by rpki-client