Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft
File:                     B9hag3mLsXa8AxU9UQprljJs9WQ.mft (raw, json)
Hash identifier:          0TKO3sd+0rqH/Dsyv9zQUXJBBkglNNH8GxMxckVmh2k=
Subject key identifier:   DF:99:61:95:A2:3D:3B:74:4F:7B:E5:5C:D5:D2:8A:B5:48:AE:EF:C7
Authority key identifier: 07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64
Certificate issuer:       /CN=A9123600/serialNumber=07D85A83798BB176BC03153D510A6B96326CF564
Certificate serial:       0262
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft
Manifest number:          025B
Signing time:             Mon 05 Oct 2026 02:32:34 +0000
Manifest this update:     Mon 05 Oct 2026 02:32:34 +0000
Manifest next update:     Mon 12 Oct 2026 02:32:34 +0000
Files and hashes:         1: B9hag3mLsXa8AxU9UQprljJs9WQ.crl (hash: 4Vem9CdiLFw68BpTv61T+iKoGp+gQLEiASK0KncoGlM=)
                          2: 51BD88882B6011EEB0127E84C4F9AE02.roa (hash: bopl7UbV+kveTfFUss6QZfXwjAk3OnM3ua/GuA1yHJQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl
                          rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 02:32:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 610 (0x262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123600, serialNumber=07D85A83798BB176BC03153D510A6B96326CF564
        Validity
            Not Before: Oct  5 02:32:34 2026 GMT
            Not After : Oct 12 02:32:34 2026 GMT
        Subject: CN=6ac30c42-efdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3e:c9:ef:3f:e2:69:f3:aa:b6:aa:b4:11:99:
                    3b:4b:c1:09:49:eb:c6:ea:6f:25:aa:75:54:8f:22:
                    7c:7c:1d:a4:4a:d6:d7:35:5f:21:4e:96:22:b0:98:
                    0e:36:a7:d0:67:a0:35:18:4d:bd:b5:d5:6d:30:c5:
                    9a:a4:76:d9:9f:14:83:86:ca:46:87:43:ad:57:aa:
                    fc:ed:02:94:4d:2d:8b:69:8f:19:1e:dd:27:f5:5d:
                    73:33:f7:1c:f5:7b:ae:ba:32:30:f9:c2:4e:b1:67:
                    c7:a6:3a:ab:82:6e:bc:3c:0e:99:0f:7d:50:12:c8:
                    b4:0a:21:bf:40:1d:9a:8c:e4:21:42:51:89:8e:b5:
                    93:b9:25:20:5a:2d:29:01:86:d5:da:39:d8:9b:7a:
                    32:f0:86:ae:a9:88:ca:db:21:d6:be:71:50:1a:46:
                    75:7e:6d:d8:55:b3:16:92:b2:41:ca:3b:1c:dd:86:
                    ae:e8:e4:b5:94:d4:7b:4d:79:b4:5d:17:77:55:51:
                    04:8b:cb:cc:9b:e7:60:33:4a:04:d7:70:d3:e3:4d:
                    80:b8:cc:d3:36:1c:fb:88:96:76:37:96:8b:9d:67:
                    1a:38:b9:c1:f3:c7:09:b0:fc:b9:ce:0f:29:86:5f:
                    0d:71:01:ce:8a:4a:fe:a6:2c:5a:dc:e2:fe:dc:30:
                    8c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:99:61:95:A2:3D:3B:74:4F:7B:E5:5C:D5:D2:8A:B5:48:AE:EF:C7
            X509v3 Authority Key Identifier:
                keyid:07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:2b:0d:83:10:88:e0:13:91:3d:63:9c:8e:39:87:c5:fc:f6:
         6e:5c:86:8b:bc:b2:f7:fa:06:32:ad:86:5b:bf:65:84:ef:61:
         7c:8d:66:4e:01:d3:37:0e:c5:dc:9d:1a:57:0c:a2:50:c5:5e:
         15:e3:77:b4:6c:1a:e0:72:70:10:1b:1b:4c:52:fc:41:ed:aa:
         a9:54:59:65:ba:5d:d1:be:61:91:9d:6e:df:5b:aa:28:d9:b5:
         4a:34:cb:59:f7:58:18:f1:2a:f4:5b:c5:22:16:2f:0f:9e:6f:
         35:01:6f:05:f7:df:78:78:d8:59:db:19:18:7c:47:05:16:ea:
         21:9d:4b:b5:e1:62:3a:d0:9b:51:eb:6a:c1:7e:4e:4f:d7:ef:
         bf:a3:87:c1:52:40:a1:83:ff:58:95:5b:f9:da:1c:63:72:b0:
         f7:54:c0:1d:34:39:08:da:50:21:a8:a0:57:4e:a0:a0:22:db:
         03:46:c8:8b:01:50:93:0a:33:1b:e3:57:22:3d:9b:da:e3:00:
         32:ef:cd:58:bc:55:6b:89:6c:99:11:84:23:13:46:8f:c6:6c:
         ef:57:eb:fb:10:99:2a:13:5e:1d:39:08:bb:3a:5a:01:26:fb:
         b5:01:d7:d9:35:3b:57:89:b8:9c:f4:00:71:8d:e8:31:f4:d9:
         20:05:d3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:09:36 2026 by rpki-client