Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft
File:                     9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft (raw, json)
Hash identifier:          Rh9aJt0khqNOG9tEoBtxeB11OUwTCjqaJUSztB9uUaw=
Subject key identifier:   8E:9E:E6:B8:4E:27:34:45:41:A4:CB:0A:C0:F8:32:B4:BD:95:9A:42
Authority key identifier: F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1
Certificate issuer:       /CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1
Certificate serial:       08A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft
Manifest number:          0898
Signing time:             Fri 16 Oct 2026 20:53:19 +0000
Manifest this update:     Fri 16 Oct 2026 20:53:19 +0000
Manifest next update:     Fri 23 Oct 2026 20:53:19 +0000
Files and hashes:         1: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl (hash: wNmhI+xXBUOkXt6hHIINFpphbLx/X3KDUyyyIH1bAKk=)
                          2: A01CB8D409DD11EBB507BD1DC4F9AE02.roa (hash: 7kGBgOCffz8RCK57g3IF8bU12ZydXkBz4WpEpH4Rrv0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl
                          rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Oct 2026 20:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2210 (0x8a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CDD9, serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1
        Validity
            Not Before: Oct 16 20:53:19 2026 GMT
            Not After : Oct 23 20:53:19 2026 GMT
        Subject: CN=6ad28ebf-b8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:c5:28:82:6b:eb:12:3b:5c:97:f0:80:1d:
                    36:af:4e:06:bb:70:2c:18:64:69:19:16:ee:bc:4b:
                    a6:2b:2d:05:79:b1:d9:3f:83:63:9e:00:15:76:26:
                    f4:e9:4a:cf:91:d3:90:53:d4:bb:98:de:43:45:5f:
                    ae:58:d6:7d:ef:79:33:4d:20:51:cb:b5:71:28:0d:
                    31:3d:4e:25:52:5c:6d:97:90:e3:68:88:e7:03:2e:
                    a8:fd:3e:ac:70:c9:b5:18:b8:e1:7f:1d:28:b3:00:
                    9a:8c:05:ae:4b:63:10:6b:de:44:8e:e8:40:6e:a2:
                    c5:3d:74:93:e3:6d:33:2c:e9:31:df:7d:4e:01:a9:
                    e6:0f:9e:c3:6d:d3:55:b7:87:44:db:55:91:c2:8b:
                    ff:c9:58:a7:16:55:d2:f1:1e:a3:bf:fe:b1:51:e1:
                    4d:cc:54:b4:7d:2b:66:5d:68:ce:7b:75:03:22:63:
                    46:ed:6f:47:d2:d2:5b:3f:dd:74:1a:2b:25:b4:8e:
                    c9:73:ec:c2:f8:49:1d:de:98:b9:d5:86:0b:34:4b:
                    f8:ed:e2:43:df:79:c6:2a:e4:bc:8e:42:cc:70:a0:
                    57:be:f9:f5:31:c7:7b:fc:9e:1e:0a:fc:31:60:32:
                    98:01:03:ba:45:1b:47:bb:63:b7:68:31:b0:91:e1:
                    c2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9E:E6:B8:4E:27:34:45:41:A4:CB:0A:C0:F8:32:B4:BD:95:9A:42
            X509v3 Authority Key Identifier:
                keyid:F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:3c:7a:e8:d1:c2:2b:24:7e:55:92:44:8f:78:25:7b:bb:e2:
         b0:3b:c5:9e:36:c9:3d:00:3d:dd:41:9e:4f:57:e3:be:5c:ea:
         01:f0:c3:05:a2:0f:47:0c:ca:50:37:a4:c3:50:d9:54:b0:86:
         73:c8:8d:1d:8a:49:92:cb:6d:e7:bc:90:38:50:73:ba:e2:62:
         9c:79:09:c8:55:1c:ca:b7:96:84:13:d3:54:65:a3:85:8e:cd:
         4e:44:83:bc:69:b4:cc:08:c0:89:e2:7d:df:21:b7:24:f7:28:
         8e:e2:ae:18:36:c7:15:f5:77:8e:e4:a3:5e:2c:c8:2b:c9:de:
         b3:55:84:12:57:41:db:d7:5b:24:48:c9:8a:07:54:75:1e:83:
         46:b5:9a:ce:e7:2c:29:9a:e9:3d:6a:2e:a3:47:27:7f:14:58:
         f3:0f:1d:16:4c:5c:66:f9:c2:44:d9:f6:58:d6:22:ff:af:8e:
         e1:08:b9:d5:bc:af:78:01:ff:bf:b0:f1:5a:63:ee:da:e1:ee:
         18:9f:72:a3:e2:c2:d6:62:63:c7:e7:15:56:70:a0:04:32:e2:
         ec:d4:bd:a9:cf:30:3c:79:ec:d8:89:9e:e6:77:70:57:fa:b3:
         20:ca:68:b0:36:66:84:ce:39:38:23:9d:ea:d0:59:ab:01:3d:
         0f:5b:3a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 12:06:19 2026 by rpki-client