Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
File:                     hIP9VFfRHgUTVSER9bovNxLphfc.mft (raw, json)
Hash identifier:          TbLAnbCc2t8Jyrn/550j1q0lozJDF4jga9A04fzzZ4g=
Subject key identifier:   C4:7F:CE:B0:92:90:DE:94:F0:82:34:3E:3C:7B:EF:CC:EC:21:FD:F0
Authority key identifier: 84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7
Certificate issuer:       /CN=A91DC9C4/serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7
Certificate serial:       02F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
Manifest number:          02E8
Signing time:             Fri 25 Sep 2026 01:03:32 +0000
Manifest this update:     Fri 25 Sep 2026 01:03:31 +0000
Manifest next update:     Fri 02 Oct 2026 01:03:31 +0000
Files and hashes:         1: hIP9VFfRHgUTVSER9bovNxLphfc.crl (hash: OIcBP7XRWX+yOmisqOmIyjLj5nIuxbWvcJumAeLgNE4=)
                          2: 153EBE3ADEF711EF84C57421C4F9AE02.roa (hash: 7p4rLHYnygUc3vxsznjWwl4rW0fbM1D6EfxyvZyU7Rg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl
                          rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 21:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 756 (0x2f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC9C4, serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7
        Validity
            Not Before: Sep 25 01:03:31 2026 GMT
            Not After : Oct  2 01:03:31 2026 GMT
        Subject: CN=6ab5c863-81fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6e:a7:1f:c7:51:6c:d3:70:43:60:3c:8c:b9:
                    1f:12:70:6b:ea:2f:6e:15:b1:0d:68:2d:05:46:5f:
                    fe:06:d9:b7:07:38:3d:ff:46:5d:ec:ab:b3:fd:be:
                    ac:64:38:b3:6c:49:be:d7:f3:1f:90:4f:a8:dc:20:
                    fa:21:5a:9e:91:9b:0f:1d:9f:fc:0c:a6:63:4b:d1:
                    9d:5c:1f:d0:0a:c0:17:b8:6c:8a:a7:19:60:14:2b:
                    7e:4c:2b:ac:be:ab:80:ae:5c:eb:03:31:ef:59:8d:
                    16:b3:5c:32:ed:26:d9:ab:6e:c9:f1:15:e7:74:e3:
                    22:3f:0c:de:35:78:9c:c1:ab:9a:41:1c:16:7c:0c:
                    47:70:1a:69:8d:4e:93:a5:1d:73:87:49:8d:9d:01:
                    7c:92:6e:6d:2e:5b:fc:b2:d1:8f:c1:b6:76:5c:5f:
                    db:07:41:50:27:a1:73:3f:08:6e:60:e6:29:0e:d0:
                    61:ce:7a:64:3e:d6:a0:5b:5b:26:b1:e9:b5:44:e5:
                    70:0c:ba:0a:69:04:65:ef:79:86:ec:fc:f4:39:b5:
                    cd:fd:64:3e:2d:95:fa:12:b9:22:79:63:db:a1:53:
                    07:95:66:ba:4c:65:7b:1c:97:38:9b:7f:4f:4d:e2:
                    03:73:fd:31:2b:73:52:73:df:9d:63:c4:26:5f:be:
                    ee:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7F:CE:B0:92:90:DE:94:F0:82:34:3E:3C:7B:EF:CC:EC:21:FD:F0
            X509v3 Authority Key Identifier:
                keyid:84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:5e:33:c0:67:14:f1:54:25:e7:9d:72:36:80:f4:15:f3:00:
         b1:10:44:e5:17:72:b6:d4:06:75:64:79:e1:07:4f:c0:ca:e9:
         92:ff:58:cd:2b:6a:ed:32:37:6d:b7:67:b0:35:cc:31:0e:66:
         37:e6:a1:de:04:3c:0b:4d:3d:ff:06:e2:fd:a9:c7:c9:7a:a4:
         e5:43:dd:62:42:31:d1:90:0d:6a:f2:d7:d3:d7:f6:6c:f7:ea:
         24:9a:6f:0e:11:36:ca:e3:dc:bf:7e:83:ca:f5:46:b3:4f:72:
         c1:70:11:5f:7e:96:14:26:f4:f9:54:9c:e5:d8:e1:d9:82:0d:
         20:30:49:ff:0f:a7:fd:7e:35:a9:cb:74:1e:af:ac:2b:16:ad:
         05:9c:ce:71:4e:35:c9:aa:a1:57:88:ba:db:fa:f8:bc:b7:76:
         8e:9f:d3:44:45:60:8e:cc:bf:5d:55:25:64:4c:ff:72:c3:d8:
         b7:49:21:09:0c:3a:28:a3:0c:42:b8:26:78:fd:77:bd:16:98:
         0c:aa:a6:a8:28:57:72:ac:3a:37:ac:b5:fa:20:b6:70:cc:6e:
         a0:72:64:22:13:6b:a8:5c:6e:09:a7:d9:a8:4a:8f:76:f8:41:
         e4:03:d2:06:e4:69:df:9a:ae:09:b1:7c:ad:f1:f1:01:dc:b0:
         9a:b5:a6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:13:47 2026 by rpki-client