Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D404F/6C25F79E9C2A11F1BDCC8D493511F970/_9R0qbqMRmvzBtRaeHLucsCF8Oc.mft
File:                     _9R0qbqMRmvzBtRaeHLucsCF8Oc.mft (raw, json)
Hash identifier:          R8i3LVsIbxEGD9CL2fHdQFruCX79Uruk4Fh43eQQm5c=
Subject key identifier:   95:00:97:0C:5B:D7:D5:7F:12:83:85:BB:A5:F4:B3:A9:9B:67:B6:9A
Authority key identifier: FF:D4:74:A9:BA:8C:46:6B:F3:06:D4:5A:78:72:EE:72:C0:85:F0:E7
Certificate issuer:       /CN=A91D404F/serialNumber=FFD474A9BA8C466BF306D45A7872EE72C085F0E7
Certificate serial:       14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9R0qbqMRmvzBtRaeHLucsCF8Oc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D404F/6C25F79E9C2A11F1BDCC8D493511F970/_9R0qbqMRmvzBtRaeHLucsCF8Oc.mft
Manifest number:          13
Signing time:             Sat 19 Sep 2026 05:30:14 +0000
Manifest this update:     Sat 19 Sep 2026 05:30:13 +0000
Manifest next update:     Sat 26 Sep 2026 05:30:13 +0000
Files and hashes:         1: _9R0qbqMRmvzBtRaeHLucsCF8Oc.crl (hash: Ie3q98b99l5mxI0vQmtrH3YBPiwZUzOHxcZ1JL+mxxI=)
                          2: 92ADC1469C3C11F1B75CE00D3B11F970.roa (hash: 9wr4MQF1Gn6/eeol1oR+vKF1RpXFFk/pYqT+ZjOiTfU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D404F/6C25F79E9C2A11F1BDCC8D493511F970/_9R0qbqMRmvzBtRaeHLucsCF8Oc.crl
                          rsync://rpki.apnic.net/member_repository/A91D404F/6C25F79E9C2A11F1BDCC8D493511F970/_9R0qbqMRmvzBtRaeHLucsCF8Oc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9R0qbqMRmvzBtRaeHLucsCF8Oc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D404F, serialNumber=FFD474A9BA8C466BF306D45A7872EE72C085F0E7
        Validity
            Not Before: Sep 19 05:30:13 2026 GMT
            Not After : Sep 26 05:30:13 2026 GMT
        Subject: CN=6aae1de5-32c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:56:69:19:43:33:f8:3d:26:c8:93:8f:50:c6:
                    ce:38:b3:14:98:f7:a4:45:01:5c:27:10:ec:81:68:
                    56:dd:aa:48:35:a5:e4:e9:01:8d:31:58:f1:e2:8a:
                    23:d4:d3:7d:9d:dd:0c:30:a9:80:4f:1c:9a:6b:fe:
                    0f:cd:fa:c1:1c:d2:c4:17:34:46:21:73:4e:cb:d4:
                    93:3c:99:b0:62:3c:11:e5:eb:37:58:2e:87:97:0c:
                    68:77:8c:3b:cb:e0:aa:33:a2:62:cc:ae:d6:4f:74:
                    73:bd:f5:b3:73:8e:c5:48:42:38:7d:bc:dc:87:1a:
                    2a:3f:22:7c:e6:04:2a:2c:3d:3a:50:98:db:06:db:
                    b4:04:26:d5:ea:a9:a8:e6:33:6f:c0:0c:58:aa:b9:
                    cf:cf:31:34:bf:57:fe:56:f5:b9:59:43:43:0a:28:
                    cb:e3:4e:0a:bc:a1:60:bb:33:ab:fc:b2:73:3b:74:
                    10:ae:ac:dd:61:b8:f5:ad:10:d5:1e:11:cc:45:b9:
                    8d:f4:a5:1f:7e:d4:2e:fe:79:7a:22:d8:a1:a6:5f:
                    c8:0e:46:93:69:80:a0:31:d0:dc:af:da:8b:13:50:
                    db:73:77:18:96:e6:32:f6:d3:5c:d8:e3:0e:a9:2e:
                    1b:b8:f0:f5:e8:04:c1:30:88:0a:10:3f:dd:2f:e8:
                    b2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:00:97:0C:5B:D7:D5:7F:12:83:85:BB:A5:F4:B3:A9:9B:67:B6:9A
            X509v3 Authority Key Identifier:
                keyid:FF:D4:74:A9:BA:8C:46:6B:F3:06:D4:5A:78:72:EE:72:C0:85:F0:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D404F/6C25F79E9C2A11F1BDCC8D493511F970/_9R0qbqMRmvzBtRaeHLucsCF8Oc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9R0qbqMRmvzBtRaeHLucsCF8Oc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D404F/6C25F79E9C2A11F1BDCC8D493511F970/_9R0qbqMRmvzBtRaeHLucsCF8Oc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a4:83:e9:d6:02:50:48:43:b4:f7:13:44:5b:b7:79:ff:d4:
         b6:d6:3f:ef:95:69:be:f4:aa:29:de:5a:05:b9:33:74:24:55:
         ae:f0:b9:96:18:b9:0f:d5:bd:08:8e:d2:ac:e9:33:70:d8:0b:
         84:bd:ed:d0:06:0a:d1:93:1f:f3:55:28:5a:b1:f9:16:e0:d2:
         6b:6c:f4:03:f9:4a:39:11:d5:e5:68:ce:4a:c2:d7:be:44:67:
         22:e0:19:ba:ef:f8:4d:60:17:80:c4:f7:46:92:a5:15:92:bb:
         06:b7:be:0d:5f:e2:3c:f4:f0:f0:bd:f6:22:46:f8:36:86:9a:
         6a:65:e8:15:ab:ad:cd:ed:22:18:6a:58:6d:2b:42:8c:d0:8a:
         1e:2f:1d:c0:f9:58:78:4c:53:56:7b:f5:57:02:76:59:a1:33:
         14:83:08:3f:b1:e1:88:f2:bb:91:b7:7b:f8:ea:c8:00:73:2c:
         b2:a2:e6:41:08:e5:49:38:2b:84:28:05:b4:57:e5:39:f9:fa:
         58:a1:39:ed:b0:ba:93:9c:fe:58:46:91:18:f2:6a:c6:67:e2:
         f6:f2:f1:3d:ae:06:cd:11:23:4e:0c:34:03:49:ff:22:22:5c:
         29:32:d5:e1:3a:75:23:7a:1a:13:ad:c9:52:3a:07:2b:a1:16:
         39:d7:dc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:09:16 2026 by rpki-client