Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft
File:                     9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft (raw, json)
Hash identifier:          SUl2wDCci1lzLL68inpFK+hfMpCevMnUYv7G35nF1nc=
Subject key identifier:   56:A8:F5:45:64:D0:B0:EB:A2:7D:80:2A:25:92:BE:1E:1E:41:69:A7
Authority key identifier: F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26
Certificate issuer:       /CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
Certificate serial:       0D72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft
Manifest number:          0D46
Signing time:             Sat 26 Sep 2026 18:21:23 +0000
Manifest this update:     Sat 26 Sep 2026 18:21:22 +0000
Manifest next update:     Sat 03 Oct 2026 18:21:22 +0000
Files and hashes:         1: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl (hash: 4srPrYIB7kjp+c8PDU5Ef53jzpwfFKJPW93cHoQxTvo=)
                          2: 6451124A7F8011F185F61C616BA30FBC.roa (hash: o3+ZJqky9inXgHtSxC+UnBSLFmoputjC6nKC+kOkMzY=)
                          3: E6C1F0003C7E11F08A874435C4F9AE02.roa (hash: 1HE8yGNDssBftj1LAFhds8elRbEeqxTTho89AYi5gvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl
                          rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 18:21:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3442 (0xd72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8928, serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
        Validity
            Not Before: Sep 26 18:21:22 2026 GMT
            Not After : Oct  3 18:21:22 2026 GMT
        Subject: CN=6ab80d22-0596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:74:1a:68:ea:31:a2:e8:87:53:19:10:80:fa:
                    27:fd:fd:24:8d:61:17:24:55:11:c5:2f:24:55:69:
                    79:91:c7:18:c3:2e:19:d6:d2:50:d6:5e:8a:1d:e0:
                    2d:7a:87:8c:5f:85:86:ee:67:ea:4a:48:ea:66:73:
                    ba:5f:c7:4a:43:1d:fb:50:30:f2:dd:75:66:30:cc:
                    0a:a2:bf:2b:9b:90:b2:81:6a:c1:e3:2b:18:93:34:
                    30:07:31:b9:1d:bb:65:a9:64:67:c6:33:24:ea:54:
                    d7:94:90:6f:ef:07:75:f5:ec:e2:a1:55:ef:d5:cd:
                    ed:b1:e5:20:03:25:45:70:28:3e:cf:a4:30:30:c2:
                    9a:58:86:6a:94:bc:15:6d:9c:11:0b:8d:3f:af:39:
                    75:50:ab:e5:1d:2f:d2:fe:91:fa:89:93:58:24:dc:
                    4f:63:6f:f8:61:1e:d8:78:91:56:5a:ab:66:8e:47:
                    3b:33:43:7c:b7:af:7e:56:94:56:28:c3:96:82:32:
                    0e:03:03:fe:1b:41:78:aa:df:47:37:90:4a:02:c8:
                    6d:80:f2:ed:b7:38:b9:47:bb:37:a0:f3:6a:e1:f4:
                    4c:49:28:96:19:e2:40:02:60:21:91:b5:5d:5a:63:
                    ff:3a:d7:1c:75:a6:ef:08:8c:88:85:6f:e3:32:a0:
                    a8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A8:F5:45:64:D0:B0:EB:A2:7D:80:2A:25:92:BE:1E:1E:41:69:A7
            X509v3 Authority Key Identifier:
                keyid:F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:03:b5:98:e2:a0:a7:a4:8a:d3:d7:26:b3:b8:e9:bc:96:92:
         c1:a9:31:8c:4b:53:84:e5:f3:f3:3e:86:73:70:78:29:3a:ec:
         00:6b:16:8a:98:05:d8:9b:5f:4f:e2:73:69:f0:ca:9e:fe:e0:
         ec:d5:59:47:3c:16:82:14:61:ee:fd:2d:9a:4d:82:3d:d7:ab:
         c9:5a:49:0f:72:8d:cf:bc:95:bd:f0:85:c7:72:c3:ca:fc:5e:
         2f:8f:52:70:22:e6:04:b2:1f:aa:9f:a9:cd:3c:88:6e:f4:42:
         9a:54:8e:33:aa:0d:5a:f0:5f:04:04:d1:97:0f:aa:82:61:71:
         46:63:18:ac:a0:64:c3:cb:de:ed:f8:cc:39:9d:62:1a:bb:22:
         cf:39:e8:60:41:67:8d:c9:1d:8f:99:bb:8a:cd:eb:a1:91:84:
         c8:2c:2b:7b:35:ff:12:27:93:f7:c9:06:c5:1d:c4:d2:20:c1:
         6f:8f:98:96:2d:22:66:94:56:2a:74:5d:b1:2f:60:b8:1f:3a:
         e3:89:46:93:31:20:f9:c2:a5:4b:ab:11:cc:ee:72:a6:8a:4c:
         31:3c:4a:4c:c8:92:5a:76:ec:ae:f6:eb:18:06:e1:67:d2:5e:
         ec:ac:8b:2f:04:91:8a:ad:62:2f:f0:6a:ac:cf:66:f8:07:fb:
         7d:7d:a8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:43:24 2026 by rpki-client