Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C7F/2537EA3890ED11F1903363874A11F970/fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.mft
File:                     fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.mft (raw, json)
Hash identifier:          e4UvGLdOw7YqU8iu1b6M2TNQ+ti/1I4Fd1C7sXDQW60=
Subject key identifier:   3F:37:EF:19:59:99:C6:07:B0:C9:99:51:7A:BB:DA:8C:23:92:64:A0
Authority key identifier: 7C:D4:39:C1:F1:7B:44:0B:F9:53:1C:DD:D1:A3:36:15:01:EA:FB:83
Certificate issuer:       /CN=A9111C7F/serialNumber=7CD439C1F17B440BF9531CDDD1A3361501EAFB83
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111C7F/2537EA3890ED11F1903363874A11F970/fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.mft
Manifest number:          09
Signing time:             Wed 19 Aug 2026 09:55:00 +0000
Manifest this update:     Wed 19 Aug 2026 09:55:00 +0000
Manifest next update:     Wed 26 Aug 2026 09:55:00 +0000
Files and hashes:         1: fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.crl (hash: /x5X8cYaDGz8qg+9KWtowHKZYEgBuLVhciPhJToEzLg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111C7F/2537EA3890ED11F1903363874A11F970/fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.crl
                          rsync://rpki.apnic.net/member_repository/A9111C7F/2537EA3890ED11F1903363874A11F970/fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:54:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111C7F, serialNumber=7CD439C1F17B440BF9531CDDD1A3361501EAFB83
        Validity
            Not Before: Aug 19 09:55:00 2026 GMT
            Not After : Aug 26 09:55:00 2026 GMT
        Subject: CN=6a857d74-ad7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:d7:6b:8d:05:60:22:36:c8:78:95:8d:0f:
                    8e:c5:27:ef:0b:04:2d:49:91:6a:4e:19:1d:2a:0a:
                    f5:de:c6:f4:e3:38:cb:01:b8:2c:da:88:30:09:07:
                    cd:37:83:1e:28:ef:74:06:1b:af:d5:f4:b6:20:02:
                    93:ef:81:23:8a:4a:e2:34:df:7b:ad:43:9b:7b:91:
                    ff:ea:80:a6:fc:23:e4:b1:08:d4:b7:87:e7:fb:e5:
                    51:84:e1:6d:12:49:1c:67:d6:74:7b:58:4c:3c:e4:
                    5a:e0:e7:e0:b8:84:d5:12:98:9c:a8:60:d4:50:06:
                    b9:f3:93:08:ee:aa:fd:d4:82:87:ae:dd:ec:3a:6f:
                    f0:a2:56:a0:4c:fe:41:f9:bb:17:01:aa:41:40:59:
                    a2:14:16:a0:83:02:80:22:8f:32:0e:62:60:80:cd:
                    82:35:fd:cf:3b:ce:a1:9d:2e:c7:05:cb:f0:d6:10:
                    01:58:e4:ad:52:96:7b:40:9f:d9:1b:3d:fb:37:82:
                    5b:57:43:8a:0f:d1:76:6f:2a:33:6b:11:64:19:74:
                    29:bc:a6:c4:64:44:ab:c8:11:5f:c7:4d:5e:b0:9f:
                    af:a1:d8:a7:1e:cf:7b:6a:51:9b:7a:6d:11:23:b1:
                    f2:5e:43:bc:2a:bb:6e:2d:1c:d0:ab:60:81:29:d5:
                    3e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:37:EF:19:59:99:C6:07:B0:C9:99:51:7A:BB:DA:8C:23:92:64:A0
            X509v3 Authority Key Identifier:
                keyid:7C:D4:39:C1:F1:7B:44:0B:F9:53:1C:DD:D1:A3:36:15:01:EA:FB:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111C7F/2537EA3890ED11F1903363874A11F970/fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C7F/2537EA3890ED11F1903363874A11F970/fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:38:6d:d7:bc:b6:3a:65:6e:33:3f:d4:dd:4f:7e:92:96:50:
         62:e7:56:5b:00:ab:d5:6f:ff:38:eb:ea:29:2c:ee:8d:2c:3e:
         a9:37:1d:80:11:d9:ae:e8:d2:47:f3:b6:a6:de:76:1d:b7:ed:
         31:dc:af:4c:ee:14:81:d2:bb:84:9a:0d:9a:a5:12:1b:3d:eb:
         b5:fb:b6:88:62:1b:9a:6a:62:5c:c0:c9:22:a8:88:c0:4d:07:
         90:94:6d:ce:30:d2:0f:48:06:29:02:71:b0:ce:7b:dc:30:93:
         7f:31:12:b9:5f:61:c3:de:7f:d6:a9:c8:90:92:2b:25:7e:6e:
         52:a1:96:82:64:5c:a1:db:63:ec:02:d2:08:6c:db:5d:cb:50:
         52:a5:89:7d:66:60:4e:ce:8b:52:c2:d1:31:27:af:54:39:3a:
         23:71:93:09:f4:38:09:c5:9c:95:33:cc:d8:d9:96:75:04:87:
         93:80:0a:ce:bc:8a:4c:b9:e0:a8:c4:48:1f:4f:c8:e2:b2:04:
         ee:ff:62:54:9e:33:60:56:a9:b5:bf:7f:16:6d:56:0a:9e:79:
         70:b8:93:ba:4a:3b:c4:52:45:e7:84:48:61:bd:55:78:34:c5:
         d0:78:f2:d6:82:4b:54:08:87:04:9c:87:df:cb:42:25:98:3a:
         a0:45:ec:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:44:33 2026 by rpki-client