Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
File:                     f8JFjIbiXJNFoIUssn6xcnf7gaM.mft (raw, json)
Hash identifier:          LchnAjcbm40Uew70GsqDsG9qrLrjGWNNnaVXiLb9PNE=
Subject key identifier:   A0:26:7B:A9:38:F6:09:EF:21:3C:BC:44:26:17:A6:C8:96:05:A2:98
Authority key identifier: 7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3
Certificate issuer:       /CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3
Certificate serial:       0A86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
Manifest number:          0A7C
Signing time:             Sat 26 Sep 2026 19:41:54 +0000
Manifest this update:     Sat 26 Sep 2026 19:41:54 +0000
Manifest next update:     Sat 03 Oct 2026 19:41:54 +0000
Files and hashes:         1: f8JFjIbiXJNFoIUssn6xcnf7gaM.crl (hash: LvmxtuK6Vfa6WlLSUXeq2NRB/iYo4iSBVirMk7nPORw=)
                          2: F898AEBC8F6411EA96126E5DC4F9AE02.roa (hash: CgnP+/rSHkkonAvFRbYmCY32JDnrx7tAgsh6bxIXNeo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl
                          rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 18:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2694 (0xa86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191DE0, serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3
        Validity
            Not Before: Sep 26 19:41:54 2026 GMT
            Not After : Oct  3 19:41:54 2026 GMT
        Subject: CN=6ab82002-6ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3b:98:aa:08:67:ae:cd:a4:a6:a6:22:01:d1:
                    c6:0c:a1:8c:28:a5:cf:0e:0b:98:a2:1c:e5:5f:a1:
                    1d:ab:2c:16:cc:94:8e:40:22:bf:8d:9f:fc:8d:a1:
                    03:d8:bf:af:60:bd:6a:c5:77:81:fb:8b:ac:68:df:
                    86:55:13:cc:9d:03:bd:a2:67:71:15:62:db:6b:de:
                    f6:51:8d:14:6c:3a:39:8b:13:7f:4d:6b:d8:dd:f0:
                    7f:27:3c:59:9d:e2:da:a3:b0:7c:8b:a1:e1:39:26:
                    44:2d:ba:31:f7:7f:59:a1:e7:5b:61:95:b3:f1:98:
                    d8:83:79:ce:02:fe:b3:de:03:3f:97:ac:24:17:67:
                    36:fc:24:33:96:05:4a:78:7b:8f:c2:ed:41:c1:58:
                    b3:35:d8:ef:ee:15:aa:3e:b6:2a:26:e6:3c:ee:7b:
                    ef:b7:c4:f5:ec:e6:a2:26:d3:94:d0:fe:24:55:b9:
                    8d:24:fa:4e:c4:6c:45:78:0c:a1:7f:07:5c:34:ef:
                    74:b7:d9:79:a0:98:aa:6f:0d:48:33:ea:57:7d:15:
                    a3:bc:a5:18:bc:81:e3:88:37:2a:92:ef:58:2d:f5:
                    0b:6f:cf:02:47:f4:f2:69:39:bf:c6:c1:c4:cc:6c:
                    e2:16:d7:67:40:0d:26:2a:aa:fc:1d:e0:08:96:02:
                    9d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:26:7B:A9:38:F6:09:EF:21:3C:BC:44:26:17:A6:C8:96:05:A2:98
            X509v3 Authority Key Identifier:
                keyid:7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:f0:7a:61:c2:dd:0b:18:d6:47:88:6f:c9:0f:e9:3a:91:48:
         aa:f8:55:de:80:33:f0:d7:79:85:80:4d:ab:b6:f7:2d:c7:f9:
         ff:8d:0c:16:9d:73:81:db:d9:ed:d8:cd:77:4b:17:32:8d:62:
         f6:d8:6f:30:c0:db:2a:0c:3c:53:51:ea:30:0c:63:9c:3a:cf:
         d0:c7:ac:e4:96:b8:71:c9:4c:5a:fb:36:59:0b:6a:ff:d5:d0:
         12:8f:70:b2:ba:83:c6:c3:a9:8f:7b:1e:c3:e8:3a:6d:78:94:
         6e:9e:1e:63:f5:a7:27:53:9c:32:4c:b7:4e:05:40:d3:07:19:
         ec:4b:23:b4:87:5a:dc:20:e2:30:fe:e9:a8:d9:ad:0b:78:7a:
         af:88:c8:96:61:e2:4d:f2:f6:ce:4f:d5:d8:af:45:40:38:85:
         ae:c5:f7:d6:86:8d:ab:94:a0:56:7a:ad:38:b9:6f:fe:15:3e:
         8d:c8:fe:41:95:ba:26:84:cd:72:80:78:9b:df:e3:4a:da:b2:
         2e:55:86:d8:38:dd:1f:13:3b:a7:93:de:0e:97:0e:ec:98:31:
         75:42:a2:d6:38:99:b4:ab:a8:3f:1a:0a:b2:38:b4:2e:1b:f7:
         e3:c9:5d:bb:f9:e7:5a:fc:ea:1e:52:69:1f:85:6e:d4:22:3a:
         b8:c8:28:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:23:53 2026 by rpki-client