Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.mft
File:                     9pGTgWlq-5F9Ki_OXyHB2FM_8WI.mft (raw, json)
Hash identifier:          50BN7Tj9PXSD3qBoCAlVVyO87Uuyq24ujJFT9xmeEXU=
Subject key identifier:   97:A9:69:BB:9E:4E:C2:A5:84:7C:4A:23:F4:33:6E:6F:B2:11:11:DF
Authority key identifier: F6:91:93:81:69:6A:FB:91:7D:2A:2F:CE:5F:21:C1:D8:53:3F:F1:62
Certificate issuer:       /CN=A91D2A6D/serialNumber=F6919381696AFB917D2A2FCE5F21C1D8533FF162
Certificate serial:       3B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.mft
Manifest number:          3A
Signing time:             Mon 21 Sep 2026 00:38:35 +0000
Manifest this update:     Mon 21 Sep 2026 00:38:34 +0000
Manifest next update:     Mon 28 Sep 2026 00:38:34 +0000
Files and hashes:         1: 9pGTgWlq-5F9Ki_OXyHB2FM_8WI.crl (hash: o1n4+86Esindgf1Y9jAm9TuvLAmq6PRtLlgn78nQNuQ=)
                          2: 3F2882786B9911F19129D9096D47A888.roa (hash: LrMK47xAaSNKfir1pZggdafMp40B6KiAGZbM8Zztl8A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.crl
                          rsync://rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:38:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2A6D, serialNumber=F6919381696AFB917D2A2FCE5F21C1D8533FF162
        Validity
            Not Before: Sep 21 00:38:34 2026 GMT
            Not After : Sep 28 00:38:34 2026 GMT
        Subject: CN=6ab07c8b-a7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9d:ea:2b:70:08:38:3b:fe:ec:a0:f0:3e:2b:
                    81:fb:bd:33:c5:06:86:87:01:34:91:87:5b:68:38:
                    10:45:22:a8:a2:8c:f9:bc:93:2d:ea:18:dd:91:de:
                    38:66:9c:7b:e2:ff:9c:37:bc:a9:c7:c9:6f:99:e1:
                    01:7c:1f:58:75:1b:71:89:66:39:a8:c3:47:95:6f:
                    2b:a0:7a:f3:51:14:5a:17:4a:62:6b:a3:ca:e9:08:
                    71:9a:04:8f:52:1d:b7:07:82:db:04:fc:ef:d6:a9:
                    4f:bc:42:c8:bf:40:07:a9:a8:ba:d1:ff:53:bf:89:
                    da:11:14:98:8a:e9:a6:96:13:80:d6:51:48:9b:0f:
                    1c:55:e1:7b:d0:ed:7c:ba:bb:ee:2e:5c:0f:1e:ed:
                    b5:21:ce:f1:1e:92:5c:cb:d2:d2:3f:36:24:21:50:
                    fe:24:22:52:b6:f6:f0:04:3c:3e:74:ee:b0:1b:48:
                    02:13:6e:6a:e0:1b:5a:ac:ad:a8:d4:12:3d:3d:c8:
                    c5:cc:7d:c9:2f:f5:77:5a:7f:b3:ee:d3:28:18:21:
                    9d:38:b1:c1:04:74:d8:cc:91:f9:99:49:08:88:79:
                    1a:61:92:51:34:ed:44:cc:14:70:6f:46:65:cf:80:
                    9c:d6:8e:80:7c:20:32:a3:3c:9c:c3:2c:69:71:85:
                    42:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A9:69:BB:9E:4E:C2:A5:84:7C:4A:23:F4:33:6E:6F:B2:11:11:DF
            X509v3 Authority Key Identifier:
                keyid:F6:91:93:81:69:6A:FB:91:7D:2A:2F:CE:5F:21:C1:D8:53:3F:F1:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:02:de:bd:d7:d8:99:f2:d8:cf:df:49:ae:3f:b1:d0:b4:a3:
         4a:76:8f:b3:c9:d4:06:25:ea:9e:f7:f0:75:b6:47:53:97:56:
         9f:3d:56:2e:68:8c:00:e8:5c:a0:2c:6e:5b:7a:98:be:76:d3:
         4c:af:2e:7b:2a:b2:db:20:04:b2:cb:0e:2a:4e:48:46:34:24:
         df:8d:5f:f8:cd:3a:f3:34:2a:bf:8d:ce:dd:79:aa:e4:4a:7b:
         4a:e4:2d:6f:74:54:64:91:48:66:80:41:54:b8:f4:41:89:d2:
         84:8a:5c:74:87:14:9c:c4:15:ca:e9:f3:84:4f:86:07:9e:d9:
         6c:93:54:67:e8:53:6a:e8:99:cd:a4:b8:fa:9d:63:2a:e8:a9:
         c8:35:be:73:2b:8d:a4:88:aa:9e:3a:7b:38:97:5a:d3:03:9e:
         b5:f7:c8:b2:18:48:fd:98:5f:05:bb:81:3a:a8:a3:5e:02:fa:
         91:d7:d5:0e:c2:3e:f1:93:dc:75:7b:69:ad:37:67:6c:96:82:
         20:4d:2e:b7:37:51:64:47:f3:39:09:a2:96:34:db:f7:cf:64:
         cb:41:cf:4a:af:26:0b:44:80:eb:ce:64:88:ea:d5:00:18:0b:
         4d:f1:b2:56:45:60:ea:c4:de:bd:d0:cb:d9:c0:50:92:bc:f5:
         59:45:70:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:34:37 2026 by rpki-client