Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
File:                     u9Lp2RPGRcigUZJHTP-olruaTqY.mft (raw, json)
Hash identifier:          yAjlYJrkTvlXMnk9LFYIdTF5bgbGBcpiXSOQovhcqBw=
Subject key identifier:   E1:08:61:AE:07:E0:0D:26:39:E8:AB:21:75:2D:E0:7F:D1:60:AF:1D
Authority key identifier: BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6
Certificate issuer:       /CN=A9111B00/serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
Certificate serial:       02DD
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
Manifest number:          02D7
Signing time:             Tue 27 Oct 2026 01:17:57 +0000
Manifest this update:     Tue 27 Oct 2026 01:17:56 +0000
Manifest next update:     Tue 03 Nov 2026 01:17:56 +0000
Files and hashes:         1: u9Lp2RPGRcigUZJHTP-olruaTqY.crl (hash: McZ6QWB/wbVn2l9r6eh8/SxPX4DG9e3vol6VZN62Se0=)
                          2: 46DE5C7875DD11ED86945E46C4F9AE02.roa (hash: 7+Gv58zskCYKY8U8/3pkQdLUJ38W9+Ov4Vj6lTNdiOY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl
                          rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 01:17:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 733 (0x2dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111B00, serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
        Validity
            Not Before: Oct 27 01:17:56 2026 GMT
            Not After : Nov  3 01:17:56 2026 GMT
        Subject: CN=6adffbc5-e1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:58:06:d3:8f:d5:60:7b:1e:f9:20:1b:23:53:
                    1d:d3:8c:ff:2f:4c:01:37:d2:72:d1:fc:a2:3a:02:
                    ac:76:54:0d:2f:80:91:e6:13:36:99:89:b7:a3:2f:
                    b2:e4:e2:46:15:30:66:56:e2:06:3c:33:10:25:8b:
                    13:35:12:6f:09:0b:8b:11:9d:b8:b1:28:71:fd:35:
                    9a:98:7c:48:2f:50:46:0a:a8:68:b9:a6:e6:d0:b5:
                    93:26:e4:f7:86:42:c3:b5:18:79:d0:27:a2:7f:9c:
                    50:9e:b0:50:7b:47:05:e7:52:10:9b:66:6b:06:b8:
                    23:68:26:4a:fe:60:d6:11:e1:8c:36:ee:61:a1:9c:
                    fe:5b:82:1f:7f:0b:12:f1:61:bb:27:e1:77:99:ea:
                    1c:2e:1e:f3:97:a2:c6:fb:0d:19:c2:5e:7a:23:96:
                    7b:69:32:8e:0a:d7:07:f5:04:e1:c6:c8:56:f7:f2:
                    81:99:9e:f3:26:3d:ed:05:6b:c1:e7:f1:5b:95:ee:
                    de:86:b3:41:14:52:79:7f:52:fb:e7:6b:b0:e5:fb:
                    04:be:9a:f6:82:ee:2a:7b:a9:d2:1a:b3:9d:c6:ce:
                    47:d7:02:c6:e6:6d:99:e1:36:5e:e9:5d:43:f4:0a:
                    c2:b2:fd:8b:a8:7c:96:83:ab:d1:7f:42:95:87:52:
                    ec:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:08:61:AE:07:E0:0D:26:39:E8:AB:21:75:2D:E0:7F:D1:60:AF:1D
            X509v3 Authority Key Identifier:
                keyid:BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:05:4c:02:45:95:52:a1:36:50:b4:03:87:98:eb:4f:cc:75:
         ee:53:9d:8f:64:e0:03:e2:46:94:f3:64:e0:cc:dc:f7:03:f8:
         97:54:4e:d4:1b:3a:26:fb:1e:cd:1e:a2:4d:38:90:1b:c9:e9:
         b8:0c:42:95:f9:76:a5:9f:20:66:ee:c3:b3:5a:3b:4d:4c:36:
         1d:de:f4:ae:51:1f:33:43:52:25:72:ca:0a:bb:82:15:06:29:
         9f:46:e6:df:2f:19:4f:d0:7f:08:5c:e1:2d:5b:3a:a3:80:02:
         c4:43:68:0f:d6:7e:6f:8c:53:e5:3f:7d:34:e6:8a:56:e2:94:
         cc:48:12:38:bd:f7:97:f8:9e:ff:e4:cd:64:88:6d:db:15:fa:
         91:a7:c1:9d:bb:f7:4d:45:6d:0f:53:cf:d7:4e:1a:e3:ac:e5:
         8b:50:24:60:99:06:25:4f:40:e3:ff:ee:40:fc:da:05:95:08:
         a3:91:25:af:b5:da:23:c6:3e:ad:6f:3c:ab:de:79:f7:9e:1a:
         91:62:40:56:96:bd:49:13:ef:02:c5:bb:ea:59:f3:1a:cf:be:
         cb:1f:74:82:b1:6a:a2:39:46:a2:bb:26:a1:4d:ad:53:f4:a3:
         15:f7:57:ec:c7:ee:1c:e3:55:7a:e4:ad:50:9e:4c:f6:f1:12:
         96:d9:16:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:43:15 2026 by rpki-client