Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft
File:                     w9DuaJTOj1bPawcKsT-YFp39QR8.mft (raw, json)
Hash identifier:          0+kLK2vlzSJE7R9dfYLfldT0aCeSjiRYs6eImNY8how=
Subject key identifier:   3D:64:B7:F4:20:48:CF:E2:A4:AE:3C:45:F5:A7:F3:03:8A:AD:9C:79
Authority key identifier: C3:D0:EE:68:94:CE:8F:56:CF:6B:07:0A:B1:3F:98:16:9D:FD:41:1F
Certificate issuer:       /CN=A912380D/serialNumber=C3D0EE6894CE8F56CF6B070AB13F98169DFD411F
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft
Manifest number:          86
Signing time:             Wed 07 Oct 2026 08:12:42 +0000
Manifest this update:     Wed 07 Oct 2026 08:12:41 +0000
Manifest next update:     Wed 14 Oct 2026 08:12:41 +0000
Files and hashes:         1: w9DuaJTOj1bPawcKsT-YFp39QR8.crl (hash: gr5xxd4gFolrUjpoqvyKhI8RjJpQNAmbI8+o/Qrj93U=)
                          2: 5147C064FFE611F0819299B6756F56BC.roa (hash: PbQ4AYnQxtghraD/LEsa/Ll3mQLAruMXQgHBWCuOIN4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.crl
                          rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 08:12:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912380D, serialNumber=C3D0EE6894CE8F56CF6B070AB13F98169DFD411F
        Validity
            Not Before: Oct  7 08:12:41 2026 GMT
            Not After : Oct 14 08:12:41 2026 GMT
        Subject: CN=6ac5fefa-acbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ec:16:2d:35:4a:c5:b0:81:84:16:72:41:22:
                    9c:4e:68:49:47:6f:66:4a:e1:0b:24:73:73:43:80:
                    a0:65:b2:bf:20:b6:44:c6:d4:cf:f5:a2:a6:8e:49:
                    2a:be:e0:b1:36:75:6f:5e:e7:99:d4:1b:21:9b:2d:
                    5b:b9:f7:62:90:66:79:4c:24:00:3d:0c:31:ef:ae:
                    92:5c:14:4d:62:4d:5b:ac:13:db:cd:be:73:b5:6a:
                    7e:48:5d:e8:9f:4b:37:4a:e2:37:ec:75:c4:38:23:
                    4c:bd:cd:13:e8:bf:18:e4:ce:ed:39:06:f1:f0:ff:
                    05:1e:46:92:b1:e8:e6:f5:6f:16:33:61:78:bb:e3:
                    40:3a:c0:4b:ff:f2:54:67:a7:f2:bc:82:6e:7d:c2:
                    12:fc:80:33:13:08:e2:d7:c3:b2:25:d2:6b:81:b4:
                    fa:5b:24:88:37:e5:02:bf:2c:0d:eb:d5:09:a6:e0:
                    b3:03:95:6e:b5:27:4a:32:14:4d:bd:fb:46:df:19:
                    53:dd:11:fe:e6:11:9a:67:2e:0b:ce:6f:b8:07:28:
                    0a:73:98:a9:31:57:31:2b:3f:d7:b7:c0:46:46:88:
                    61:b4:2b:f5:57:08:5c:6a:44:ee:3d:02:23:01:3f:
                    a9:54:14:cd:79:d5:db:30:16:6e:ea:59:0b:99:f8:
                    1c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:64:B7:F4:20:48:CF:E2:A4:AE:3C:45:F5:A7:F3:03:8A:AD:9C:79
            X509v3 Authority Key Identifier:
                keyid:C3:D0:EE:68:94:CE:8F:56:CF:6B:07:0A:B1:3F:98:16:9D:FD:41:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:11:63:47:43:60:25:ad:4f:51:8f:1b:1b:62:9b:47:b6:ff:
         23:a7:75:8c:dd:b2:1e:22:d5:17:50:a5:67:ed:d3:87:11:6a:
         54:89:c5:ab:21:3e:14:79:aa:5b:18:0b:23:34:8f:5f:cb:2f:
         a1:ff:c6:f8:86:13:9b:0f:a0:08:40:a2:bc:3a:23:cb:be:e2:
         28:c1:af:6d:65:9f:0d:3e:74:71:86:65:2b:b3:72:16:99:8e:
         ba:1a:d3:c7:9c:db:7c:a8:9c:ac:95:e6:28:25:df:74:ad:a5:
         5a:c4:ab:cd:f6:be:c7:8a:6a:43:c2:a2:54:e2:7f:d6:f1:30:
         bf:6e:2c:b6:7e:06:0b:fe:4c:ac:73:9b:ea:25:b0:d8:3d:34:
         52:69:3f:77:53:43:81:54:42:b4:67:77:71:5f:83:f9:62:0e:
         33:7e:ab:34:3a:b2:fe:77:8a:f6:12:9a:2d:0a:8f:4c:67:37:
         79:72:13:2d:b9:fe:79:52:36:e4:31:54:22:cb:fa:f9:97:a6:
         fb:03:65:ef:39:58:42:cc:02:70:cd:3a:6d:8d:71:f0:0f:50:
         9a:4d:77:8d:9d:30:11:8f:6d:5f:41:6f:51:c7:fc:d6:65:07:
         4d:9f:d1:bb:50:b7:39:a2:1a:d9:36:4d:48:c7:59:60:a9:a7:
         d3:d2:38:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 04:51:33 2026 by rpki-client