Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
File:                     G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft (raw, json)
Hash identifier:          hK/n9EQsohPIkLRLMjbMWSfUvx3MczkeBTC4nF6PsWg=
Subject key identifier:   99:64:4E:34:7D:3F:30:6B:9A:DE:DA:B9:46:88:8A:C9:10:05:C8:69
Authority key identifier: 1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87
Certificate issuer:       /CN=A911DF56/serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487
Certificate serial:       F8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
Manifest number:          F2
Signing time:             Sat 17 Oct 2026 07:03:02 +0000
Manifest this update:     Sat 17 Oct 2026 07:03:02 +0000
Manifest next update:     Sat 24 Oct 2026 07:03:02 +0000
Files and hashes:         1: G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl (hash: 8Xokk0oNxz5XtccPRmapwa4SMhM2zidfzLe34lX9Z7o=)
                          2: 6D18C6E88FF311F0B3309340C4F9AE02.roa (hash: lELwYfCJ8QLJoPWBTmeafMYkQU/nJlsMXebmLAieoRc=)
                          3: C31F44C25BD211F0962D6F5BC4F9AE02.roa (hash: 0fTr8Ky2ks1lTkMxL9IKSz1oQnIZMQcWNBUaHcz+NfY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl
                          rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 06:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DF56, serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487
        Validity
            Not Before: Oct 17 07:03:02 2026 GMT
            Not After : Oct 24 07:03:02 2026 GMT
        Subject: CN=6ad31da6-2b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1e:99:e5:6b:96:2d:31:06:99:07:a1:ad:3e:
                    18:9e:37:e5:4e:5b:63:82:fd:0b:bf:97:12:b2:47:
                    76:0a:be:be:21:86:1f:8e:48:42:5c:1c:8e:33:b2:
                    63:99:4e:38:f9:91:13:1e:f3:c6:ca:1f:64:45:56:
                    1c:87:77:7e:6b:2f:db:5c:f3:3b:81:e1:0d:af:6c:
                    8f:ec:be:26:da:cf:bc:2a:65:f3:7e:1d:3c:3a:ab:
                    3c:8c:cd:e9:ee:ca:e0:4d:b4:26:46:27:db:24:f8:
                    d3:eb:72:e3:bf:dc:3f:0f:4e:2d:17:d3:40:bf:a9:
                    1a:14:22:9b:a6:8d:4e:ba:ae:02:3e:e9:93:fc:5d:
                    ff:e1:9e:31:8c:a5:2c:30:33:39:f5:23:65:a8:57:
                    b4:80:d0:78:4b:ed:f4:f0:53:3c:18:74:64:c8:c4:
                    c3:54:7e:a2:f0:c7:39:b4:07:d3:b1:bb:ad:15:44:
                    c3:cb:a4:6e:37:56:6d:81:ca:6f:12:fa:ef:c4:63:
                    fe:d1:c4:62:64:c3:1b:1e:fa:a2:14:19:31:dd:22:
                    3b:9d:31:55:e4:cf:99:ca:f9:94:52:f0:99:b7:2c:
                    88:1b:cd:77:f8:76:9c:32:0f:3e:02:a2:55:08:a5:
                    42:23:9f:92:0e:a5:07:9e:a7:8f:c6:80:30:40:b0:
                    76:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:64:4E:34:7D:3F:30:6B:9A:DE:DA:B9:46:88:8A:C9:10:05:C8:69
            X509v3 Authority Key Identifier:
                keyid:1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:04:20:f0:3e:18:54:4e:5a:71:81:07:9f:6f:ab:0e:ab:ba:
         4d:68:e8:a7:c8:e8:c9:94:15:f8:6b:5b:c1:e8:d8:11:cd:22:
         4d:87:e8:1c:87:02:f8:f3:0a:9f:d4:35:23:93:5b:0c:7d:3b:
         61:32:a0:4e:5b:b8:45:36:49:f8:79:d3:c4:1c:34:1c:89:2f:
         5b:af:35:31:53:60:6b:00:16:6a:71:05:67:6b:00:90:68:97:
         70:b8:94:7d:aa:f5:f3:57:79:56:f3:7b:c8:67:12:32:8c:cf:
         98:3a:e0:f9:f3:c1:c6:cc:69:e7:bc:de:65:ec:3b:c3:a7:3a:
         2d:3e:69:50:09:25:83:72:0c:7c:42:28:9e:b0:e5:ec:ee:d1:
         99:52:66:2f:40:d5:01:fa:97:86:ea:64:fd:64:f9:69:57:62:
         32:53:22:1c:76:18:1d:c1:82:8b:6f:10:8d:0f:bb:d2:90:99:
         3d:2b:b5:38:e5:5b:ad:8c:b5:8c:00:61:1e:da:27:68:24:ef:
         8d:4b:b2:73:c7:0f:a7:72:d9:45:3f:21:0d:b1:52:07:38:0b:
         fa:24:b6:90:cd:2d:d0:f9:3f:18:09:e1:b1:6f:26:a4:8e:16:
         22:68:93:aa:7f:4d:4a:96:ae:c2:d7:76:4b:d6:88:4f:7f:b9:
         99:d5:e4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 16:52:56 2026 by rpki-client