Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft
File:                     9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft (raw, json)
Hash identifier:          qeDnO0Brz6tn4FUt02nyH3fTm4hTfW+bsA5Ms+9yEyA=
Subject key identifier:   0D:A6:44:C0:EF:45:7C:B0:F7:64:A1:C5:43:70:EE:0D:6C:72:39:AA
Authority key identifier: F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1
Certificate issuer:       /CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1
Certificate serial:       088B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft
Manifest number:          0881
Signing time:             Mon 31 Aug 2026 20:43:01 +0000
Manifest this update:     Mon 31 Aug 2026 20:43:01 +0000
Manifest next update:     Mon 07 Sep 2026 20:43:01 +0000
Files and hashes:         1: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl (hash: F1bIfYgIsfQB9cDNkGNAuGC4mXFENfrVcdLDiTEy9ew=)
                          2: A01CB8D409DD11EBB507BD1DC4F9AE02.roa (hash: 7kGBgOCffz8RCK57g3IF8bU12ZydXkBz4WpEpH4Rrv0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl
                          rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 20:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2187 (0x88b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CDD9, serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1
        Validity
            Not Before: Aug 31 20:43:01 2026 GMT
            Not After : Sep  7 20:43:01 2026 GMT
        Subject: CN=6a95e755-ac3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fd:77:5e:d1:4c:f4:7d:b1:aa:f9:0d:75:89:
                    d7:b3:3e:82:48:13:87:cd:8a:9e:09:f2:c6:8b:51:
                    77:99:49:22:3f:d9:c1:4c:e8:be:22:d8:b9:2e:ab:
                    72:32:b5:d5:d4:40:6b:7e:a0:fe:e2:ae:de:0a:a6:
                    4d:d6:95:b1:44:21:8a:17:ec:13:f4:28:f8:ef:0c:
                    24:78:44:ec:14:e7:5e:cd:d0:bd:f4:74:b0:42:e9:
                    55:1e:77:62:bd:65:7f:fd:e3:e2:91:14:e0:43:eb:
                    14:ce:00:ac:96:c4:67:cb:0f:3a:f5:18:2c:7e:b2:
                    40:59:7e:29:a3:ad:5b:22:3f:f0:47:5c:35:31:a5:
                    f5:9e:20:90:a2:8c:6a:18:45:27:80:79:4e:51:d1:
                    21:a4:fc:c3:7c:ea:bc:b3:18:37:c0:1e:f4:a0:89:
                    ee:f0:96:06:ad:b9:ad:93:a2:f3:ce:fe:e2:24:8f:
                    58:cf:c4:58:a7:07:e3:23:9b:66:42:6e:d5:ba:04:
                    30:66:81:d6:42:4a:31:5b:e5:51:64:61:05:d9:e2:
                    aa:a7:ff:89:47:9f:70:1b:07:82:d8:35:fc:92:bd:
                    c9:a5:bb:d5:e0:11:f0:d6:60:37:ae:20:40:b5:a1:
                    85:09:cd:02:2e:0d:af:56:a8:32:17:ce:ed:73:a6:
                    a1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A6:44:C0:EF:45:7C:B0:F7:64:A1:C5:43:70:EE:0D:6C:72:39:AA
            X509v3 Authority Key Identifier:
                keyid:F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:48:79:12:00:0b:3c:c4:48:37:70:05:32:8d:ef:95:f5:e2:
         77:93:b4:09:4f:30:28:18:61:33:56:85:06:30:4f:2c:f7:d9:
         e6:82:7d:b5:05:eb:d1:8d:90:61:30:a4:fc:97:1b:7c:3a:8d:
         8c:57:e2:df:b1:ee:41:e8:cb:5e:3b:0e:12:d0:25:04:41:df:
         a7:63:05:b3:3b:76:6d:ce:ca:22:69:49:c8:6d:ad:8a:87:c4:
         a9:24:e6:d1:f5:b9:96:57:2d:b3:b7:8c:83:30:ed:0b:d2:d4:
         6d:73:4f:4a:5c:cc:ed:4d:98:33:e3:2d:d3:fa:96:e0:bd:23:
         be:10:46:34:33:ac:a6:8a:46:70:19:0c:f7:65:27:93:e2:14:
         ea:2d:9e:77:6c:02:4b:d9:1d:06:e9:a3:de:09:71:43:af:46:
         0f:02:49:d3:1f:ef:3d:bb:03:b4:f7:51:37:6c:fd:4a:85:cc:
         43:02:2c:6c:5b:87:31:7d:50:c9:37:81:7e:9f:44:9f:8b:b1:
         3a:04:fb:d0:bc:49:e2:32:21:0c:55:e9:dd:65:b7:b6:08:4b:
         8d:32:51:fb:66:92:96:87:6e:34:fa:7a:c9:30:10:5e:12:56:
         2f:38:95:0d:07:f0:de:a7:90:ad:88:01:8c:a5:d3:77:f9:fb:
         38:80:03:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:50:57 2026 by rpki-client