Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
File:                     r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft (raw, json)
Hash identifier:          rxGg9jardIWZVazbDL2lfl6nzZL/Ggy6aSrojgS0Svk=
Subject key identifier:   58:EA:B4:9E:6A:81:43:08:56:85:6F:55:AF:8B:63:C2:C7:7D:A3:EA
Authority key identifier: AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32
Certificate issuer:       /CN=A9123BFF/serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032
Certificate serial:       0872
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
Manifest number:          0868
Signing time:             Fri 04 Sep 2026 15:53:27 +0000
Manifest this update:     Fri 04 Sep 2026 15:53:27 +0000
Manifest next update:     Fri 11 Sep 2026 15:53:27 +0000
Files and hashes:         1: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl (hash: d50j8N4Utt/K7hVeuqpxUNr2JVE2uidX1nH0BtWWzmk=)
                          2: A3744A28149A11EDB9CF2F70C4F9AE02.roa (hash: zMVM5XvHUSFuCWzCvYIz2LcqG9igaxxQSY0E3/h4FG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl
                          rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2162 (0x872)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123BFF, serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032
        Validity
            Not Before: Sep  4 15:53:27 2026 GMT
            Not After : Sep 11 15:53:27 2026 GMT
        Subject: CN=6a9ae977-b5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8f:af:77:f7:13:da:f0:97:8b:2d:4c:a2:ab:
                    e3:21:69:29:55:2f:bd:e8:b8:21:49:cd:b1:5d:2e:
                    eb:17:cc:63:46:16:35:e5:7d:d6:91:77:ee:0e:a9:
                    3a:26:1d:ae:85:55:c1:85:56:1b:a3:85:b5:30:00:
                    33:d0:98:40:0e:1e:f7:bc:52:e8:ad:3a:eb:44:c5:
                    ea:67:00:6b:e7:ea:69:04:ef:da:42:86:c4:e8:12:
                    be:7f:36:96:d7:fe:db:20:bd:72:57:27:57:91:fa:
                    5b:8a:30:fc:e1:df:78:e4:e0:10:bf:29:9c:f5:dd:
                    8a:3f:4e:21:23:b7:90:7d:a6:5c:15:64:20:0d:b0:
                    a1:9f:c0:65:e1:91:dc:21:3b:1f:6a:2f:ac:41:b0:
                    2a:ee:23:15:f1:21:15:c6:57:b2:16:e4:cc:7f:8b:
                    07:4c:ff:21:8c:95:93:60:92:27:21:91:19:70:f9:
                    13:9d:aa:99:fa:6b:10:24:de:80:99:ee:4f:4f:22:
                    8e:0f:67:1b:c5:69:11:0f:b5:59:a7:20:c2:2e:d4:
                    73:ce:69:0d:b5:28:f9:a8:2b:11:c3:6a:8d:80:db:
                    b0:58:c3:40:f7:8f:c2:51:f2:95:96:6a:32:91:49:
                    7e:ad:29:54:a7:89:7b:06:4e:28:08:39:a9:46:01:
                    7a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EA:B4:9E:6A:81:43:08:56:85:6F:55:AF:8B:63:C2:C7:7D:A3:EA
            X509v3 Authority Key Identifier:
                keyid:AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e5:0a:99:27:2c:90:30:1f:31:44:67:26:59:35:eb:39:dd:
         69:9c:28:a5:7d:3e:93:99:25:02:55:0b:96:b2:40:a6:6a:42:
         3b:7b:b3:eb:5b:0c:07:6e:e4:6c:e3:71:f1:b1:a2:dd:25:d6:
         08:d8:4c:2d:6b:1c:91:bc:61:fb:f3:d3:32:05:53:4f:fe:d8:
         b1:53:69:e6:4b:9c:4a:7e:e4:74:4e:aa:7f:f2:e0:87:61:4f:
         34:db:cd:0b:1b:a1:72:dd:26:d8:2b:b6:29:96:f5:28:a1:cc:
         07:7a:91:6f:83:83:73:d2:cc:7d:91:d5:9d:e5:81:b9:01:43:
         66:48:cb:15:8d:f8:67:d4:8e:86:ed:91:ff:d9:f8:db:e7:63:
         5d:4d:f5:33:18:53:eb:5f:26:f1:96:0d:89:6d:2d:53:2b:28:
         3f:a2:44:fb:d1:cd:6f:02:cf:27:9c:02:2a:36:e6:ba:46:8a:
         1d:3e:8c:6f:83:6b:3f:d1:4c:c1:77:b6:5f:64:4c:4c:54:c3:
         0d:98:1a:cc:6b:31:1a:21:05:54:90:00:31:66:22:19:fe:34:
         ac:c3:69:4c:d4:b6:70:ab:28:e2:96:ec:9c:b8:1b:f6:98:f0:
         c4:db:a9:be:e9:65:74:7d:3f:2d:76:97:e1:2d:80:ee:ac:0f:
         70:f4:bc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:38:01 2026 by rpki-client