Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft
File:                     P9UxYCV9sBsu4O8BPB4tQusaKI0.mft (raw, json)
Hash identifier:          RkXMs31rVv/HWG8tTu3VfBiExVhb4FIw0Y1/WVEaa6Q=
Subject key identifier:   82:A6:90:7C:63:5F:13:96:D0:BD:5E:F8:15:7A:BC:7B:4E:17:40:F1
Authority key identifier: 3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D
Certificate issuer:       /CN=A911D51C/serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D
Certificate serial:       05F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft
Manifest number:          05ED
Signing time:             Fri 02 Oct 2026 23:15:24 +0000
Manifest this update:     Fri 02 Oct 2026 23:15:23 +0000
Manifest next update:     Fri 09 Oct 2026 23:15:23 +0000
Files and hashes:         1: P9UxYCV9sBsu4O8BPB4tQusaKI0.crl (hash: br4lp5hSR7KKXT0uuDi18oI4qi6aOV3AUtWQhk+wDRI=)
                          2: A7493DA6145611ECAA3B5769C4F9AE02.roa (hash: 9No5R6QsEqMvq6ApWij+X8OuZMaVXyEFFrhes/cBm9k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl
                          rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 23:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1524 (0x5f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D51C, serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D
        Validity
            Not Before: Oct  2 23:15:23 2026 GMT
            Not After : Oct  9 23:15:23 2026 GMT
        Subject: CN=6ac03b0c-5baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7c:44:d0:27:c9:02:50:e9:0b:de:6f:d1:ba:
                    f2:6c:3b:38:fa:e6:7b:51:36:9b:91:ab:77:79:02:
                    27:3a:d2:9c:e1:a5:da:03:76:b4:c7:bc:5d:b5:d3:
                    5d:db:fb:c0:f3:a6:05:55:c5:e3:59:6e:28:aa:75:
                    62:90:6e:3f:fb:4d:53:85:19:7f:8b:f7:f0:74:d5:
                    ee:2d:79:d9:df:8a:80:04:26:6b:a1:b6:5f:03:7c:
                    20:68:2a:73:e5:4d:4e:47:70:86:a5:97:b3:f7:7e:
                    f8:81:56:8e:3b:fa:7e:6f:64:83:fa:e8:46:03:3f:
                    e2:5e:da:9b:47:90:3a:95:64:b3:83:76:1e:e9:0a:
                    6a:09:c5:88:9f:6f:8e:80:62:32:01:57:fb:d2:e3:
                    b3:c9:39:52:5d:79:82:74:ef:bf:e6:61:c2:b3:fd:
                    ec:1c:25:9e:9b:27:2f:d6:4e:ee:04:9c:80:a9:68:
                    76:66:a6:73:0e:ff:ac:f3:da:35:d5:4e:de:fc:2c:
                    84:a4:c4:e4:f5:ea:c1:69:2b:b2:56:f4:40:cd:46:
                    2c:a1:d2:80:41:f7:6f:2c:a7:53:16:f0:3f:48:c0:
                    bd:f9:3b:23:ef:f0:b8:cc:ef:c4:31:09:f4:2d:33:
                    9b:11:4e:c2:05:0e:83:29:af:8b:b9:36:4f:2a:cf:
                    fb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A6:90:7C:63:5F:13:96:D0:BD:5E:F8:15:7A:BC:7B:4E:17:40:F1
            X509v3 Authority Key Identifier:
                keyid:3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:e2:d2:1b:b6:08:fc:67:b3:6c:a2:a8:a6:f4:24:b1:00:1b:
         b9:b0:23:92:9b:df:b0:1b:e7:6c:ab:03:a5:e5:05:48:d4:2d:
         0d:88:21:43:ac:2c:e6:09:68:b3:fd:0b:49:f1:86:43:ed:0a:
         0c:68:c4:31:fc:c8:6a:71:e4:f4:10:8b:6f:c2:29:24:18:01:
         01:10:de:d6:73:0a:fc:d3:6e:60:08:c2:7b:20:cf:48:07:6f:
         f3:36:46:cb:12:53:7e:f9:bf:8a:61:82:7e:bc:89:ce:10:d3:
         02:b0:32:0d:35:5a:b8:ed:5f:dc:78:d1:95:87:b3:a0:b4:bd:
         e5:b5:ef:5e:89:45:6a:f0:26:69:19:20:ad:9c:75:2e:fe:3e:
         17:a8:f4:6e:47:be:50:76:95:6a:89:16:b3:fb:f9:8d:5f:90:
         5c:a3:d3:69:71:02:c2:d4:fe:d4:18:c9:51:1a:75:c8:49:11:
         6c:3e:13:ff:b6:b3:d2:ab:71:13:10:4a:73:21:52:f4:7b:75:
         d2:00:62:b6:d8:35:be:24:01:48:3e:19:8c:2c:e5:7a:f5:04:
         dd:0c:31:65:32:05:e2:12:61:48:37:47:5d:b0:46:86:e9:96:
         9c:83:23:0e:58:3e:42:e8:e8:f7:39:12:ec:4f:d4:44:27:46:
         13:c7:aa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:17:12 2026 by rpki-client