Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/ScNR1UzEj6Gm_pofTPxL6MA2tKA.mft
File:                     ScNR1UzEj6Gm_pofTPxL6MA2tKA.mft (raw, json)
Hash identifier:          n1dfvw7KQ08SQvWtOIQ/4BOwTeLMVyqBeuAGwOJzpxw=
Subject key identifier:   B7:67:25:E1:0D:5F:B2:3E:3C:61:F6:0F:A4:FC:03:A9:A6:38:D7:3F
Authority key identifier: 49:C3:51:D5:4C:C4:8F:A1:A6:FE:9A:1F:4C:FC:4B:E8:C0:36:B4:A0
Certificate issuer:       /CN=A9199197/serialNumber=49C351D54CC48FA1A6FE9A1F4CFC4BE8C036B4A0
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/ScNR1UzEj6Gm_pofTPxL6MA2tKA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/ScNR1UzEj6Gm_pofTPxL6MA2tKA.mft
Manifest number:          09
Signing time:             Fri 04 Sep 2026 20:22:39 +0000
Manifest this update:     Fri 04 Sep 2026 20:22:39 +0000
Manifest next update:     Fri 11 Sep 2026 20:22:39 +0000
Files and hashes:         1: ScNR1UzEj6Gm_pofTPxL6MA2tKA.crl (hash: T9iQdbg++FoJyz0gcR1EGYKVGEKE+duZPPpEysTpx6U=)
                          2: 06C575F8A5B911F198D1D1366C11F970.roa (hash: NokoFevfvQskoHnxohVLzCM9L0IYhUXDVwoiqSoRVHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/ScNR1UzEj6Gm_pofTPxL6MA2tKA.crl
                          rsync://rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/ScNR1UzEj6Gm_pofTPxL6MA2tKA.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/ScNR1UzEj6Gm_pofTPxL6MA2tKA.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 20:22:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199197, serialNumber=49C351D54CC48FA1A6FE9A1F4CFC4BE8C036B4A0
        Validity
            Not Before: Sep  4 20:22:39 2026 GMT
            Not After : Sep 11 20:22:39 2026 GMT
        Subject: CN=6a9b288f-e0bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:81:15:14:ea:fa:de:52:9a:f0:64:17:4e:79:
                    ba:99:5f:c3:d9:2b:ff:5d:06:dc:99:1a:75:9e:97:
                    b1:6c:d5:d1:9b:02:e9:f4:f9:f1:33:5a:be:c3:45:
                    89:55:3e:e1:14:b1:08:4f:34:b9:9c:7d:39:22:89:
                    32:0b:e3:8a:da:34:08:61:3d:3e:bd:11:2f:f8:99:
                    fa:8c:bf:47:34:65:70:0a:06:23:0e:d8:e3:31:a9:
                    c1:23:57:56:bb:dc:f1:14:37:02:f0:29:89:26:7a:
                    a9:2a:81:c6:23:e9:27:6f:3f:18:6c:7a:dd:27:a4:
                    eb:f4:18:5e:98:48:c3:3b:e9:b9:a7:7b:3b:9a:eb:
                    5a:a2:87:8c:78:86:c9:7d:8a:2c:ef:a6:f3:6c:4f:
                    24:31:fe:73:d1:8e:4f:8a:4a:c6:a4:bd:a1:5c:32:
                    97:d4:f7:d5:78:2b:bf:8d:31:c1:ef:6b:88:28:37:
                    6c:53:a9:1e:1a:da:2d:ef:f5:8d:e7:62:92:a3:b3:
                    68:a5:8d:79:7d:ac:f0:d5:f3:53:36:71:a0:d9:b2:
                    20:77:90:a8:b3:ce:6d:eb:08:bb:98:16:65:25:e5:
                    19:aa:0a:45:62:cc:a4:17:4a:e0:f1:66:54:5a:f2:
                    bc:ab:5f:ca:90:6b:1b:53:8f:55:70:e2:ac:31:44:
                    fc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:67:25:E1:0D:5F:B2:3E:3C:61:F6:0F:A4:FC:03:A9:A6:38:D7:3F
            X509v3 Authority Key Identifier:
                keyid:49:C3:51:D5:4C:C4:8F:A1:A6:FE:9A:1F:4C:FC:4B:E8:C0:36:B4:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/ScNR1UzEj6Gm_pofTPxL6MA2tKA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/ScNR1UzEj6Gm_pofTPxL6MA2tKA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/ScNR1UzEj6Gm_pofTPxL6MA2tKA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:7b:94:b6:86:69:1e:e1:21:8b:ff:bb:f0:a2:3f:5f:0b:ba:
         ac:99:04:a2:6d:9a:ca:ad:c1:80:94:51:ca:6b:a8:46:1c:9c:
         d0:57:40:bd:42:f4:82:f8:10:8d:e3:f0:3c:0b:eb:9f:84:51:
         8d:24:a5:ec:ad:84:75:38:d2:73:5b:40:6d:31:2a:22:77:95:
         ef:cf:f9:c9:57:38:a2:90:e5:a7:a6:b4:9e:b3:4c:5c:62:00:
         2c:ca:19:fd:c4:43:fb:60:4e:9c:f4:a7:c7:e1:33:e8:26:1d:
         9a:af:0e:4b:a1:dc:21:75:16:da:62:c9:a4:cd:96:6c:e6:cc:
         11:f6:2b:1b:82:bc:a3:29:58:51:42:9b:f8:6a:db:29:49:4d:
         0a:5e:9a:bd:7f:3c:de:5e:cf:09:2b:e2:b4:b1:af:80:2b:38:
         2e:67:c0:13:d0:92:10:de:a3:2a:16:27:e6:cb:f7:ae:b6:77:
         39:27:40:c2:f3:3d:62:b3:6c:ea:cd:ed:ba:c1:aa:78:4e:00:
         25:5a:ea:c1:93:39:33:a9:c0:b2:b3:4a:64:81:47:9d:00:a9:
         bf:09:60:f8:97:2d:1e:e1:24:04:8b:e6:c9:04:da:29:ec:51:
         e8:f0:5e:8e:4d:ff:d9:60:2a:cb:e6:6c:dc:39:3e:27:78:a3:
         5e:48:95:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:53:46 2026 by rpki-client