Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
File:                     u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft (raw, json)
Hash identifier:          gCTGPwnsPoheu0S7Lv8/Ieh6fo/mq2jwZYeQG5xqCCc=
Subject key identifier:   CC:FD:88:4E:DB:14:2E:47:BC:AC:F0:E5:C5:61:D3:A9:C8:51:77:F7
Authority key identifier: BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1
Certificate issuer:       /CN=A919B824/serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1
Certificate serial:       0A0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
Manifest number:          0A03
Signing time:             Mon 28 Sep 2026 19:54:26 +0000
Manifest this update:     Mon 28 Sep 2026 19:54:26 +0000
Manifest next update:     Mon 05 Oct 2026 19:54:26 +0000
Files and hashes:         1: u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl (hash: cQ+n4TE53PcqC7V+kLZ9S7wuQQBsG8w38Kxhck0Xe+g=)
                          2: EEC7D1CAA6C911EA8079FD17C4F9AE02.roa (hash: TBAaKtqT6P0ZL94ya5hEsalq4rRbeHQQPW8oTHhvKeU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl
                          rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 19:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2573 (0xa0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B824, serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1
        Validity
            Not Before: Sep 28 19:54:26 2026 GMT
            Not After : Oct  5 19:54:26 2026 GMT
        Subject: CN=6abac5f2-76c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:58:cb:6f:77:4c:65:81:06:18:96:06:f8:a5:
                    29:cf:ac:f3:0d:da:7b:20:f2:08:3b:fd:ce:97:7d:
                    fc:5c:9a:c4:e2:a6:d9:47:63:cb:57:32:9f:58:21:
                    61:7d:16:49:d6:80:4a:14:8f:13:33:b0:92:5c:f1:
                    34:4a:3b:20:1c:01:1b:0d:63:75:e6:b1:39:cf:1f:
                    63:02:84:9a:2a:17:24:45:da:04:e4:e3:a2:d1:fc:
                    d9:f8:34:33:58:21:e7:46:bd:9b:76:0d:c5:0a:18:
                    0d:28:8f:eb:6d:25:ea:2e:a8:ed:c8:7c:15:ed:bd:
                    c0:08:c1:d9:4b:2b:c4:e6:f6:90:8a:94:70:1d:44:
                    1c:b3:f4:3a:cc:61:de:e9:c2:94:8d:b6:8e:2e:99:
                    00:8c:83:b1:cb:61:fb:c2:a5:46:c8:f6:52:fa:b3:
                    17:3e:7f:d2:75:33:49:24:9b:8b:91:18:97:72:b5:
                    e5:91:3d:94:98:f6:94:db:6c:fb:8f:c5:c1:62:98:
                    92:74:ed:a6:70:15:f7:8a:0f:19:55:b9:8e:3b:64:
                    c6:5a:e7:22:9d:03:59:a6:e0:28:73:aa:d3:52:e8:
                    e1:9e:0f:9b:78:89:c3:93:35:3b:48:62:1f:04:05:
                    1c:9e:52:3c:22:d6:1c:62:79:e0:1c:fe:ef:a2:4b:
                    a9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FD:88:4E:DB:14:2E:47:BC:AC:F0:E5:C5:61:D3:A9:C8:51:77:F7
            X509v3 Authority Key Identifier:
                keyid:BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:64:93:89:32:9a:a8:3d:fd:9d:39:6b:2f:3f:de:9d:a5:31:
         78:60:a6:d0:b7:26:95:60:d6:c8:9e:ac:60:3e:e2:ee:0f:8e:
         52:d4:ce:23:6c:55:b3:3e:5d:9a:56:a4:7d:a7:a3:e3:0d:bc:
         44:4b:77:57:bf:08:cd:4e:39:91:0d:13:b9:70:fc:56:e5:64:
         ee:fc:59:a7:68:40:fc:19:87:17:a3:e3:fe:f3:7a:c4:a9:8a:
         77:8c:8e:94:a2:9f:a3:c7:a1:91:f2:f2:33:07:e2:2c:33:cd:
         1a:be:9a:90:4e:b5:16:57:2a:4c:89:e3:d3:52:93:18:ed:26:
         6a:26:57:15:29:69:5c:51:83:6a:19:15:4d:2f:9a:8d:95:4a:
         e2:0c:3a:02:e4:a4:59:65:c8:b9:aa:1b:98:1f:36:5f:bc:2c:
         1c:bb:7e:7b:03:f4:b5:8d:ee:56:9e:cf:68:66:7d:9b:81:42:
         ab:2e:71:17:54:40:12:66:58:b5:30:ee:ea:4e:d7:ab:bd:98:
         35:53:98:ff:fb:6a:4f:6c:8d:55:9a:23:bd:cd:09:79:1d:a7:
         08:b2:c3:61:b0:c8:7e:f6:88:15:f3:c5:74:d6:07:8d:e7:7e:
         e6:13:37:e3:dc:5d:12:25:3a:6e:4f:96:c0:af:28:b0:83:87:
         93:cc:ff:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:33:56 2026 by rpki-client