Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft
File:                     xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft (raw, json)
Hash identifier:          y8VEddbcaJvbl3c2odzArzoFO2DilJ7r0UioCj/oCPo=
Subject key identifier:   3F:78:09:2F:31:D0:BA:58:B5:23:8C:7D:E0:76:79:40:E8:EE:6F:BE
Authority key identifier: C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E
Certificate issuer:       /CN=A9184BE6/serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E
Certificate serial:       0E9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft
Manifest number:          0E88
Signing time:             Sun 20 Sep 2026 17:41:40 +0000
Manifest this update:     Sun 20 Sep 2026 17:41:40 +0000
Manifest next update:     Sun 27 Sep 2026 17:41:40 +0000
Files and hashes:         1: xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl (hash: ZN1yrTaGYiBjdgMV4neZB0ztaznAGpZ6+7mhWyIRojg=)
                          2: AA2DE134C48A11E9804AA581C4F9AE02.roa (hash: zYy4S918px5uLTp6OwMmF2M8JIH9eVoyGMPCXX5c2Jg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl
                          rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 17:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3742 (0xe9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184BE6, serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E
        Validity
            Not Before: Sep 20 17:41:40 2026 GMT
            Not After : Sep 27 17:41:40 2026 GMT
        Subject: CN=6ab01ad4-6844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:38:34:c2:4b:e1:a0:1e:48:75:36:6d:67:eb:
                    72:a1:bc:c6:57:30:36:0e:8e:cc:df:78:dc:13:53:
                    9d:1e:e6:e7:a0:00:de:12:5f:22:67:da:74:f8:12:
                    5b:29:aa:a4:1e:01:bf:3f:4b:28:a9:ba:4d:5a:87:
                    21:eb:2e:ee:5c:ad:a4:c5:14:a1:7b:96:a4:1c:3d:
                    ae:6a:1f:30:81:96:4f:05:5e:d9:5b:09:1b:48:96:
                    cd:0c:da:ca:5a:58:53:ba:86:82:af:9d:d9:98:76:
                    f8:2a:0b:49:62:fe:31:f9:a1:99:25:c9:b4:c6:82:
                    38:e0:83:ff:80:b5:79:c7:e4:1b:94:07:15:2f:3a:
                    a6:3d:53:d3:7b:97:ad:07:c3:1d:d6:39:12:0d:fd:
                    c9:3f:3e:01:57:df:4f:b7:ad:73:36:0f:52:da:7c:
                    f7:6d:b2:e7:99:52:77:23:e3:62:49:a5:84:cc:05:
                    a3:1b:c3:c7:62:fe:f1:19:db:de:05:8a:28:7d:69:
                    cb:5c:c7:54:c8:81:d3:cf:92:66:ed:21:77:17:6c:
                    81:a1:60:da:b9:a3:95:71:d3:ae:8b:54:c0:34:6b:
                    98:b0:46:89:22:a4:a4:14:54:c6:63:e8:f3:a4:27:
                    c3:a4:4a:b0:b6:9b:99:ed:43:4a:0b:2a:8b:1e:6d:
                    c2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:78:09:2F:31:D0:BA:58:B5:23:8C:7D:E0:76:79:40:E8:EE:6F:BE
            X509v3 Authority Key Identifier:
                keyid:C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:4a:09:98:72:4d:be:74:3e:4d:39:82:6b:86:f6:78:c7:92:
         0b:b4:ae:e4:e2:2d:05:b7:8d:12:93:97:26:05:a8:86:f6:42:
         bd:69:a3:1f:10:2c:e1:85:79:a6:d1:5c:5b:e0:78:93:a3:bb:
         44:55:dd:96:67:b6:37:d0:30:a1:26:fd:2f:bc:59:d0:16:81:
         cd:a8:4e:9c:26:6c:69:42:a8:bb:cc:e9:cd:f2:40:19:39:f4:
         0b:64:03:b9:e1:ca:1b:40:ce:35:3d:ea:1f:2e:80:8e:0b:59:
         e6:46:65:18:53:31:a5:5f:64:3e:b4:d2:3b:1c:ec:08:e2:f0:
         5b:46:39:fc:18:6c:a5:1e:f7:00:44:97:e5:03:7f:8f:44:92:
         75:9c:b8:b6:8f:eb:1b:a7:e1:f1:b8:37:bb:61:e0:c6:9f:c3:
         c2:31:5f:5b:b8:47:f6:3f:bc:7f:47:88:f6:52:83:53:06:81:
         bb:11:e5:73:a5:73:0e:84:4e:72:1a:9a:96:8d:ba:a7:22:c9:
         b2:42:1c:9f:4a:b0:f0:fe:67:6a:e7:7b:7c:88:5c:a0:cc:f1:
         b9:fd:2e:cc:e9:00:a3:f1:9f:cf:ff:e8:d9:3e:9f:c2:ce:29:
         4b:7a:2e:4e:58:cc:9f:7a:3a:4f:65:82:56:0e:b1:d2:f8:3f:
         51:c9:84:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:40:14 2026 by rpki-client