Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9114B3B/C9983FCE3E2711F1A5B85BA4B5833773/aUOJgRsj_1S9M9BrFKb99PL02eQ.mft
File:                     aUOJgRsj_1S9M9BrFKb99PL02eQ.mft (raw, json)
Hash identifier:          tXpwtuQQbI+8hvPFUOk1jZo+PGfaySNvYspWjwrEBoQ=
Subject key identifier:   62:D4:C2:94:8D:45:CA:CA:BF:6E:F7:0B:65:AA:FF:D6:1C:A6:39:6B
Authority key identifier: 69:43:89:81:1B:23:FF:54:BD:33:D0:6B:14:A6:FD:F4:F2:F4:D9:E4
Certificate issuer:       /CN=A9114B3B/serialNumber=694389811B23FF54BD33D06B14A6FDF4F2F4D9E4
Certificate serial:       59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUOJgRsj_1S9M9BrFKb99PL02eQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114B3B/C9983FCE3E2711F1A5B85BA4B5833773/aUOJgRsj_1S9M9BrFKb99PL02eQ.mft
Manifest number:          57
Signing time:             Mon 05 Oct 2026 08:39:32 +0000
Manifest this update:     Mon 05 Oct 2026 08:39:32 +0000
Manifest next update:     Mon 12 Oct 2026 08:39:32 +0000
Files and hashes:         1: aUOJgRsj_1S9M9BrFKb99PL02eQ.crl (hash: iE72k89hTAngBfkiYeaZPR7h+ZJeX65acKWjGD+WkhY=)
                          2: F010CE063E2B11F18BB5C12CB7833773.roa (hash: H6xoO5MzMJ9JTbPOAdEJk9JhNfRvcgtay7QA301J/BM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114B3B/C9983FCE3E2711F1A5B85BA4B5833773/aUOJgRsj_1S9M9BrFKb99PL02eQ.crl
                          rsync://rpki.apnic.net/member_repository/A9114B3B/C9983FCE3E2711F1A5B85BA4B5833773/aUOJgRsj_1S9M9BrFKb99PL02eQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUOJgRsj_1S9M9BrFKb99PL02eQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 08:39:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114B3B, serialNumber=694389811B23FF54BD33D06B14A6FDF4F2F4D9E4
        Validity
            Not Before: Oct  5 08:39:32 2026 GMT
            Not After : Oct 12 08:39:32 2026 GMT
        Subject: CN=6ac36244-6273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:35:58:39:88:12:56:f3:ce:e4:7e:84:95:85:
                    22:4c:12:48:3c:2c:39:70:3c:02:26:c2:26:d2:e9:
                    c2:b5:b0:6f:8f:6a:22:1b:b7:ec:81:53:4d:20:df:
                    46:82:0d:c8:de:ed:26:c6:08:50:b9:e7:36:1a:61:
                    15:a8:4a:9b:89:72:d0:aa:0a:e5:80:e9:fa:1d:9e:
                    69:a0:eb:c7:84:e6:3d:e9:d6:9e:67:8f:2e:d1:58:
                    36:19:d7:51:ed:7b:e4:09:05:24:2e:3b:6d:6a:ce:
                    e1:6d:a9:ee:9e:29:56:c0:50:87:8d:32:3d:5b:bf:
                    5e:91:81:aa:52:fd:c9:4b:56:32:d6:08:c9:5c:0d:
                    27:df:98:0b:46:02:cd:d5:0e:00:fe:e2:6c:62:cb:
                    37:dd:95:dc:18:9a:29:fd:af:12:81:e1:b5:16:03:
                    f7:d4:15:6a:06:9f:89:0f:21:74:6a:3a:93:cd:39:
                    27:c3:2a:ff:f3:66:e4:35:60:a2:06:93:55:d8:af:
                    9c:60:03:00:13:aa:8f:1c:4c:d5:76:ee:04:73:69:
                    86:63:7d:cf:66:64:77:de:84:7e:55:06:bf:d9:6b:
                    95:a0:16:5e:bd:fe:ef:c4:2a:2d:c6:16:ec:2c:ca:
                    bd:41:b5:4c:58:ff:10:b1:ea:4f:67:7b:5b:d1:e5:
                    50:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D4:C2:94:8D:45:CA:CA:BF:6E:F7:0B:65:AA:FF:D6:1C:A6:39:6B
            X509v3 Authority Key Identifier:
                keyid:69:43:89:81:1B:23:FF:54:BD:33:D0:6B:14:A6:FD:F4:F2:F4:D9:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114B3B/C9983FCE3E2711F1A5B85BA4B5833773/aUOJgRsj_1S9M9BrFKb99PL02eQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUOJgRsj_1S9M9BrFKb99PL02eQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114B3B/C9983FCE3E2711F1A5B85BA4B5833773/aUOJgRsj_1S9M9BrFKb99PL02eQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c1:f3:9d:e0:c8:2c:c3:1c:7a:c7:be:fc:f6:85:a6:5a:3d:
         43:e9:2d:1d:02:0c:e9:31:9f:c1:ba:30:43:15:40:19:b1:cc:
         04:ea:18:04:f0:e8:65:d1:65:bb:2f:91:91:03:bd:fe:18:20:
         d0:78:f6:03:97:79:65:bb:4a:46:25:92:7b:d6:9a:6e:ce:99:
         4d:b5:69:2a:20:d9:0c:f8:e9:79:8d:4b:ee:7f:ee:3e:0c:96:
         7a:32:c9:02:f6:63:5d:5f:75:e4:95:23:b4:ef:4e:dd:ae:3b:
         55:6e:09:d3:a3:e3:7d:26:2f:f3:16:85:1f:d1:6c:58:93:81:
         52:2c:d8:ee:f1:55:8b:9a:1d:4f:00:cb:a4:44:ab:9b:ae:3e:
         fc:34:88:d8:32:7b:70:d0:5f:be:df:6c:13:b7:ee:41:c0:ad:
         ef:7a:a0:90:f5:53:b9:cd:23:b6:22:e6:81:db:f1:60:da:6d:
         a3:6f:13:30:ca:f0:9f:1d:93:b5:a3:68:1a:1c:12:53:31:9c:
         2f:2b:2e:cc:c2:06:11:8c:4a:36:be:f9:65:2f:c7:23:d6:9e:
         81:bc:59:4a:61:a0:1e:df:a3:5e:6a:61:9d:d2:11:bf:88:a8:
         a8:91:24:8a:ba:ac:61:77:ba:f6:1a:a3:4c:c0:72:60:15:b4:
         b6:a6:5d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:59:06 2026 by rpki-client