Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft
File:                     0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft (raw, json)
Hash identifier:          mn22gMaD97i2LqU3QU5PApPL0xnUTPGS/PQawYkogEU=
Subject key identifier:   E8:A3:77:DD:11:6F:1F:9E:EC:5A:16:FB:A2:51:7F:8A:AF:58:F9:B8
Authority key identifier: D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90
Certificate issuer:       /CN=A9123E38/serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890
Certificate serial:       0BA7
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft
Manifest number:          0BA3
Signing time:             Fri 04 Sep 2026 16:33:46 +0000
Manifest this update:     Fri 04 Sep 2026 16:33:45 +0000
Manifest next update:     Fri 11 Sep 2026 16:33:45 +0000
Files and hashes:         1: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl (hash: +30WqTn8MurQWbOtwTCcw2pwizWbHKYXxm9tf8vf98k=)
                          2: DC25591636C011F0A9DAF53EC4F9AE02.roa (hash: EesMUM6OTKAdEg0mYRmy7VycLGp32k1mGYc0u42kdzs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl
                          rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2983 (0xba7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123E38, serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890
        Validity
            Not Before: Sep  4 16:33:45 2026 GMT
            Not After : Sep 11 16:33:45 2026 GMT
        Subject: CN=6a9af2ea-ea9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a2:92:46:65:a1:9f:29:f7:89:bc:83:e5:0f:
                    19:8b:11:d2:1a:5a:de:ac:ec:58:d3:f8:62:fe:6e:
                    7a:64:82:3b:9c:29:a3:4f:f0:cc:70:18:99:28:c3:
                    19:3a:af:4d:0d:49:fb:62:8b:75:fb:9f:06:8a:04:
                    18:04:8d:56:e5:b0:f8:69:a3:90:42:c5:eb:46:61:
                    23:c2:0c:2c:ab:68:ae:b4:63:36:06:9a:e0:41:1e:
                    43:ea:5c:6d:6c:7e:fd:5a:19:5a:ef:b2:5f:19:2b:
                    08:a6:3d:74:85:06:03:d2:93:b0:f5:e7:9f:48:7f:
                    93:76:b3:df:9e:bf:34:24:82:b9:87:34:a9:0e:d0:
                    76:94:0e:c0:81:f4:c0:fe:09:5f:c6:23:47:8f:b3:
                    39:87:17:1f:f9:8e:f6:66:5e:43:96:a2:a4:7e:cb:
                    d2:fd:2a:c8:94:6a:48:24:f1:71:35:38:c1:93:c3:
                    fc:ad:54:5a:6e:92:94:2e:63:db:90:63:b6:92:24:
                    5d:63:9b:7a:04:db:e6:2e:76:dc:01:21:4a:65:60:
                    42:8e:ac:f1:5e:ff:df:a5:71:a4:14:fd:84:e4:70:
                    8e:41:a6:90:42:eb:a1:dc:3f:fa:4c:d6:72:1a:fb:
                    b5:c2:ce:08:50:98:ce:4a:df:a7:ee:6a:35:1d:4c:
                    c5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A3:77:DD:11:6F:1F:9E:EC:5A:16:FB:A2:51:7F:8A:AF:58:F9:B8
            X509v3 Authority Key Identifier:
                keyid:D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:aa:04:55:cb:64:8a:e4:f9:1f:19:ba:2e:99:01:81:b0:04:
         a2:e5:38:9c:43:d1:00:20:c8:51:af:5b:75:10:9b:f5:09:4c:
         db:41:04:11:2f:e2:e5:74:69:b8:25:39:d5:30:67:55:5d:2d:
         d1:d7:49:fe:6c:af:ac:2f:31:9a:4f:d0:1d:8b:ea:b7:f7:37:
         64:09:88:ce:6f:dc:3b:6a:0a:16:35:ba:09:ce:54:ef:57:08:
         6b:72:c1:4d:53:a9:98:7c:1f:3b:30:db:50:e8:1f:e7:a0:2e:
         d3:cc:6e:bc:54:29:79:c1:ff:8d:8a:9d:ca:be:e4:3e:72:ae:
         cc:4c:44:d4:d7:92:4d:a6:3c:4e:91:ab:66:4d:60:75:54:3e:
         d8:81:ad:06:cf:64:7f:fc:a7:49:be:f1:09:40:c0:f5:e4:d6:
         28:d3:de:eb:48:cd:92:40:fc:6a:41:2d:cb:09:2f:2a:94:f4:
         29:49:1a:12:e5:91:81:20:0e:b9:17:8f:df:fc:6c:e7:1d:98:
         2d:47:49:bd:44:ca:95:25:05:79:49:0d:2b:48:45:a7:96:b7:
         83:22:b7:65:3e:29:ee:fa:47:1c:cd:a6:5a:d7:a4:fe:1d:26:
         65:b0:a9:2c:4f:b1:d0:44:a7:dd:5c:93:70:2a:28:db:03:69:
         af:55:4c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:18:52 2026 by rpki-client