Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft
File:                     091LwNHr_QIHqqZvYIuOBdPNRuM.mft (raw, json)
Hash identifier:          OKhtBLAB+Cilxl3q9axkr5VIAaYtowVd4UQ+qFTzdRk=
Subject key identifier:   D1:8B:A8:C8:07:E6:47:B1:2C:14:74:26:23:BD:C3:CF:B5:E9:13:2B
Authority key identifier: D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3
Certificate issuer:       /CN=A9112956/serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3
Certificate serial:       0CA4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft
Manifest number:          0C9A
Signing time:             Tue 06 Oct 2026 18:43:55 +0000
Manifest this update:     Tue 06 Oct 2026 18:43:55 +0000
Manifest next update:     Tue 13 Oct 2026 18:43:55 +0000
Files and hashes:         1: 091LwNHr_QIHqqZvYIuOBdPNRuM.crl (hash: GHsVILnvHj2uUfYYTzoxMoa1KRFYW4rdgux71l5KAKQ=)
                          2: 04346EDA262111EAB705442FC4F9AE02.roa (hash: 21GHOZMTG/TylPlfibWEI7AKeSHxKXdxhV5sqtOzK+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl
                          rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 18:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3236 (0xca4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112956, serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3
        Validity
            Not Before: Oct  6 18:43:55 2026 GMT
            Not After : Oct 13 18:43:55 2026 GMT
        Subject: CN=6ac5416b-916f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cb:47:39:d7:0e:f2:ab:eb:d0:bc:7a:b7:bb:
                    05:71:36:44:78:10:55:88:7a:5c:1f:ab:ba:f6:d5:
                    64:07:18:32:a6:20:e2:4e:c9:62:71:dc:ac:38:36:
                    e3:bb:12:10:81:6b:67:60:8b:7d:f1:45:d0:0e:04:
                    9a:2a:28:41:10:ec:c0:1d:6e:72:ab:3f:e9:a8:75:
                    e6:3b:9a:1a:74:d0:83:18:ea:36:92:0f:31:bd:93:
                    32:ec:72:9b:74:61:15:f3:04:c4:63:af:53:af:71:
                    92:44:7c:9b:43:97:94:54:a3:a3:2e:ea:05:c5:f8:
                    85:41:ec:53:fd:c0:f0:0b:e1:23:76:ff:cd:f8:28:
                    eb:8f:00:c2:2e:50:06:5b:52:65:91:b9:10:ce:33:
                    e7:9c:ee:3a:eb:df:8a:68:56:bb:89:f0:72:e2:8c:
                    cd:5a:3a:08:ea:5f:72:3d:0f:e8:79:e0:46:af:28:
                    34:17:a6:0f:fb:dc:df:44:f8:23:b3:d5:72:75:5f:
                    71:75:2a:ad:49:9d:1b:f8:14:c0:8d:1c:ea:f5:5d:
                    af:c2:c0:04:ac:71:e4:66:b4:58:77:18:98:f0:26:
                    c5:af:59:84:d7:f2:32:b0:5a:2e:86:79:e8:87:3c:
                    e4:17:02:75:8b:16:45:d7:28:10:86:f2:cd:06:a1:
                    0c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8B:A8:C8:07:E6:47:B1:2C:14:74:26:23:BD:C3:CF:B5:E9:13:2B
            X509v3 Authority Key Identifier:
                keyid:D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:88:6d:d3:cc:c1:d8:b0:16:ce:db:fc:bc:50:11:44:35:d0:
         9d:0d:43:02:f8:30:b6:39:8d:db:fa:82:1b:2a:e1:e2:c0:43:
         18:8d:b2:d2:20:db:dc:ab:68:d9:02:18:ea:5b:d3:fc:a9:d3:
         d3:d8:5b:c6:4f:ac:fa:72:4a:71:39:79:ff:f2:04:8d:8b:6b:
         f6:2a:55:9d:4a:09:21:03:04:80:5f:06:48:d6:06:49:5e:fb:
         54:a5:4a:cf:ab:b2:59:e7:4d:0a:22:3e:b8:ab:13:45:d6:40:
         76:9c:d1:71:75:b2:4f:e3:7a:dc:89:11:b0:59:90:aa:61:b1:
         10:b4:65:19:11:99:59:fc:51:f2:0b:48:c9:8f:48:ee:6b:90:
         57:cc:3d:f0:53:da:c7:02:e1:09:c0:11:1e:b8:29:e7:cf:a4:
         05:b7:49:1f:47:1e:5e:4c:81:cd:3c:aa:12:cc:a1:c2:7c:4c:
         4f:9d:f5:ac:4d:18:60:19:e6:f8:5c:4c:a1:b7:c9:4a:6a:fa:
         93:83:f4:4f:69:40:18:f5:01:58:f0:08:78:6d:8d:be:54:55:
         c8:f7:e7:6b:45:f1:6b:58:36:70:2f:d1:94:40:b4:9e:68:4a:
         f7:13:7f:28:b2:38:35:9d:87:1e:c7:29:f8:88:00:84:bb:ac:
         51:8e:b8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:47:53 2026 by rpki-client