Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft
File:                     s9da4ezu9vkr0X0MSzZRjVvndvE.mft (raw, json)
Hash identifier:          ae0qBIdmUzS2TCbctxD8TeyAw+9FbJTf8ztgi708ZGE=
Subject key identifier:   49:9B:09:21:F5:A4:25:54:9D:75:A1:08:4A:FC:D3:E8:62:7A:D2:56
Authority key identifier: B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1
Certificate issuer:       /CN=A911F5CA/serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1
Certificate serial:       01E5
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft
Manifest number:          01D8
Signing time:             Wed 21 Oct 2026 04:10:58 +0000
Manifest this update:     Wed 21 Oct 2026 04:10:58 +0000
Manifest next update:     Wed 28 Oct 2026 04:10:58 +0000
Files and hashes:         1: s9da4ezu9vkr0X0MSzZRjVvndvE.crl (hash: RB2Y8fsdRyk/mCFSmjcL/nMrvJT1x3Z9rw+IMQRvi8M=)
                          2: C591C650781311F080669C0EC4F9AE02.roa (hash: Bg2wu7TpMXwzFSX0fI8NfsbFSLdPHOZ/G6xBjTAs5cw=)
                          3: 9D44176C781211F09ADE4979C4F9AE02.roa (hash: ki8BXTLBldb3cGwGovgDoOhIuW4iyxvUAjDm1D52/e0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl
                          rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 04:10:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485 (0x1e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F5CA, serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1
        Validity
            Not Before: Oct 21 04:10:58 2026 GMT
            Not After : Oct 28 04:10:58 2026 GMT
        Subject: CN=6ad83b52-4b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:14:c7:34:dd:14:92:80:08:c8:20:03:8a:a8:
                    56:90:0c:37:63:8d:80:ee:c8:1b:04:2b:97:62:0f:
                    d1:bc:62:2d:f3:96:44:a3:cb:5c:4b:85:38:fd:cd:
                    bf:7c:8e:9d:41:8d:d5:28:69:4f:cc:02:7d:bd:dd:
                    3b:25:27:1b:68:e6:c3:60:83:28:8d:77:34:5f:22:
                    bf:69:a1:22:d1:1e:22:c5:a3:02:ac:eb:06:7e:34:
                    f8:fd:aa:60:f0:2c:04:01:84:9f:c8:43:3e:1b:24:
                    8e:78:bc:a0:81:25:8e:3d:4d:86:8c:94:cc:72:30:
                    6c:bc:31:c8:10:99:ae:f0:75:21:0a:76:0e:39:e2:
                    5d:f5:35:2a:cf:0b:b4:1e:8d:f0:2d:8c:2b:c5:cf:
                    64:b5:73:7c:8e:01:b0:a9:da:f1:ed:46:e8:53:93:
                    9b:ec:69:1f:f7:9b:a2:ce:1f:1e:ab:7d:7b:59:fd:
                    a3:af:09:0b:b8:8f:f2:25:29:d6:c0:90:fe:9f:30:
                    aa:c6:88:38:9a:5c:bf:e3:0f:9a:82:ad:91:56:5c:
                    cb:1e:ba:31:88:92:d4:be:92:01:a5:42:43:54:7a:
                    f4:02:56:7c:e3:3d:dd:b3:f7:68:ba:37:03:8c:4b:
                    9a:c6:a5:e7:33:f3:37:12:44:73:e1:bb:41:05:76:
                    6a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9B:09:21:F5:A4:25:54:9D:75:A1:08:4A:FC:D3:E8:62:7A:D2:56
            X509v3 Authority Key Identifier:
                keyid:B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:7b:b6:0a:4a:92:5f:66:f5:da:39:39:d5:2e:f8:a2:6e:b4:
         67:2d:e8:26:90:06:d4:13:89:40:a2:94:5a:b5:f3:08:ac:95:
         ef:43:fc:ef:3a:61:0f:31:ac:4d:ff:63:ad:ab:ac:9a:df:cc:
         8b:5f:92:35:7f:ec:95:5e:29:62:c8:4a:a1:a1:ca:62:d8:e1:
         b2:28:06:1d:f7:bc:c6:c8:f0:76:5a:21:f7:9c:50:9a:38:2b:
         00:ad:ff:79:ac:07:7b:80:6c:8f:88:54:61:24:92:dc:b5:a6:
         6f:86:e7:b0:6d:a1:45:8c:dc:42:2f:1c:e7:93:66:51:af:a8:
         8a:b5:09:e6:d7:99:6c:50:aa:c8:f9:48:84:a3:76:63:31:11:
         d1:4d:37:30:0f:d9:34:5e:9e:ce:5e:3a:7b:c1:fc:5d:43:bd:
         ef:df:19:eb:db:11:68:cc:96:ab:41:92:a5:cf:fa:4e:52:69:
         94:bd:f5:fa:51:36:1f:94:1b:28:f0:64:af:e4:a0:4c:52:cd:
         9a:c4:1b:b9:91:8c:2f:1a:89:de:2d:58:67:d2:cf:6e:41:b2:
         42:05:24:55:f7:a8:63:9e:73:61:09:c4:cf:45:eb:80:e3:65:
         ad:69:77:ef:cc:a9:be:cc:3a:43:9a:95:44:a5:b2:04:2e:fd:
         da:31:f2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 05:07:59 2026 by rpki-client