Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.mft
File:                     n7vSMFYWjRpRfpltxW9mSm7lLqU.mft (raw, json)
Hash identifier:          h36Dx28OS1D/1dV18TNAlZaM83reIel0WSxAcg5xEyA=
Subject key identifier:   F5:DA:EA:9C:9E:66:C9:2A:5B:A1:5C:C3:C0:B4:EB:F0:88:4C:CE:72
Authority key identifier: 9F:BB:D2:30:56:16:8D:1A:51:7E:99:6D:C5:6F:66:4A:6E:E5:2E:A5
Certificate issuer:       /CN=A9189D79/serialNumber=9FBBD23056168D1A517E996DC56F664A6EE52EA5
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7vSMFYWjRpRfpltxW9mSm7lLqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.mft
Manifest number:          65
Signing time:             Sun 27 Sep 2026 08:39:19 +0000
Manifest this update:     Sun 27 Sep 2026 08:39:19 +0000
Manifest next update:     Sun 04 Oct 2026 08:39:19 +0000
Files and hashes:         1: n7vSMFYWjRpRfpltxW9mSm7lLqU.crl (hash: 9DXMIfFl1xoAL2CyGNyBFEEzA30/1xgRT7KveMlcfvU=)
                          2: FBC7C3BC24DB11F18E6B9B14AD833773.roa (hash: HaSFcTdyVltIF7SeiiWh8O/2wgEJqq3VXl8LlDRKgjI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.crl
                          rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7vSMFYWjRpRfpltxW9mSm7lLqU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 08:39:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189D79, serialNumber=9FBBD23056168D1A517E996DC56F664A6EE52EA5
        Validity
            Not Before: Sep 27 08:39:19 2026 GMT
            Not After : Oct  4 08:39:19 2026 GMT
        Subject: CN=6ab8d637-1b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9d:f9:36:32:25:1a:c9:8f:b1:69:a2:98:93:
                    12:16:61:55:fb:56:4f:ec:bc:5d:ef:c7:60:bf:09:
                    ac:1b:e0:27:cd:45:33:77:c0:72:2d:e2:09:5f:d5:
                    97:17:57:36:7e:59:5b:df:b5:51:00:2a:de:36:90:
                    e5:4a:66:1e:7e:3f:13:02:03:90:af:67:55:42:14:
                    0b:24:ab:e1:55:01:56:09:1e:76:8d:8f:76:d1:49:
                    c9:02:6a:e2:44:40:72:d7:e8:eb:36:6f:58:28:de:
                    40:70:f4:34:46:64:ec:4b:84:75:40:f8:bc:0a:33:
                    e1:ba:27:70:06:47:26:be:fc:2e:e6:6e:d7:96:40:
                    2a:be:84:0f:ef:23:dd:e8:ae:80:57:2e:da:53:bb:
                    0d:30:56:d7:d6:90:4d:2b:9c:d6:b8:09:e6:dd:b0:
                    8a:6d:05:60:5c:5f:1a:45:96:c2:89:68:21:27:19:
                    37:9e:6b:77:bd:6a:b8:c4:2f:7a:1e:0d:3a:24:9a:
                    36:b3:b0:b7:03:c5:bb:fc:61:48:3c:69:9f:a4:8e:
                    46:7a:58:c0:40:c2:5f:ab:71:07:bf:8b:fd:87:38:
                    5f:5e:99:b7:ba:12:e6:e5:8d:0a:97:63:1a:8b:e6:
                    a3:3c:79:98:75:4a:20:53:ec:dd:66:02:0f:e9:28:
                    d9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DA:EA:9C:9E:66:C9:2A:5B:A1:5C:C3:C0:B4:EB:F0:88:4C:CE:72
            X509v3 Authority Key Identifier:
                keyid:9F:BB:D2:30:56:16:8D:1A:51:7E:99:6D:C5:6F:66:4A:6E:E5:2E:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7vSMFYWjRpRfpltxW9mSm7lLqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:4a:fc:2f:52:c4:02:3a:b6:df:74:8e:a3:0f:df:05:5b:26:
         9a:1c:05:27:95:94:56:97:3a:b0:b1:70:b2:23:51:24:bc:9a:
         58:8f:0c:e0:62:22:98:5c:52:00:9c:24:60:0b:76:99:f6:30:
         03:f0:08:a2:27:4d:c4:e6:da:25:e3:80:5a:9f:31:5f:5d:b8:
         19:02:05:bb:8d:1d:1e:d3:9d:ee:c2:1c:66:93:d5:39:df:07:
         92:60:c1:2c:f5:8c:b6:bb:3b:bd:b7:c2:f7:73:65:2a:ef:9b:
         53:a3:6e:d4:af:24:53:52:88:41:99:fa:06:73:91:b1:10:ad:
         77:10:aa:27:dd:1e:13:ec:45:54:04:f4:cc:ec:ab:0b:55:2e:
         fd:b8:30:17:e7:6c:ae:8f:17:38:ff:57:e9:25:95:6d:d7:5f:
         4c:8c:92:4d:ba:9e:d1:ca:f1:f0:e7:35:85:72:ca:75:54:f2:
         39:83:31:81:9b:ae:1c:28:91:61:e0:93:3a:54:52:5a:0a:15:
         e0:bc:5d:4b:be:0b:83:71:b5:e8:79:17:ba:2c:6f:3c:5a:5c:
         ee:52:c7:3e:6d:1d:e6:cd:a0:c3:26:f0:45:41:39:f5:77:cc:
         00:4f:10:24:ef:5a:0b:cd:7a:90:eb:ea:08:21:7a:63:d1:9f:
         25:04:25:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:34:14 2026 by rpki-client