Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft
File:                     9yY4deggn7olR_uOOH2AP3WAvtY.mft (raw, json)
Hash identifier:          bT7pZiHiyfab7J6U2iFS4rUciaDof2hbQDsvWwY9XgM=
Subject key identifier:   95:AD:F5:CA:CA:30:E5:B6:D0:E3:4F:EE:7C:13:7A:B3:4A:0F:E7:ED
Authority key identifier: F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6
Certificate issuer:       /CN=A9126AFE/serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6
Certificate serial:       0739
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft
Manifest number:          072A
Signing time:             Tue 06 Oct 2026 13:32:33 +0000
Manifest this update:     Tue 06 Oct 2026 13:32:32 +0000
Manifest next update:     Tue 13 Oct 2026 13:32:32 +0000
Files and hashes:         1: 9yY4deggn7olR_uOOH2AP3WAvtY.crl (hash: NpBvRE4/lYRWDj/Y2n5kLMyOcEuEKr/cB0AXNSvxhKc=)
                          2: B46F501C994D11EBB61C0C71C4F9AE02.roa (hash: P9Uven0A31OGxoXzcKV6cpGLmheaduCJtgkM3S29AZs=)
                          3: 7C096C200C1C11F19C04CE1F053D8C67.roa (hash: NjXsXLh6F1ZDcd0hTom1Uexjj86KTB2fN/3UpmZ2exA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl
                          rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 13:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1849 (0x739)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126AFE, serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6
        Validity
            Not Before: Oct  6 13:32:32 2026 GMT
            Not After : Oct 13 13:32:32 2026 GMT
        Subject: CN=6ac4f871-9b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:98:44:dd:f5:d2:3f:df:35:42:a9:26:63:4a:
                    d3:d8:9b:23:2c:51:41:00:5b:96:79:77:78:1d:37:
                    3f:3d:2f:e4:6d:10:0d:f2:84:2f:50:97:94:52:2c:
                    11:e5:70:97:69:08:af:cb:c1:34:61:50:a7:86:ea:
                    fd:a2:28:3f:78:ed:ce:88:0a:d3:6d:19:ec:ca:1e:
                    80:c1:6a:84:f7:ef:b4:c1:fe:1c:9b:06:e7:a0:86:
                    ed:84:c6:3f:9e:a2:90:e7:33:c5:f0:3f:38:29:f5:
                    47:a8:9e:e2:33:3d:40:10:42:92:35:af:7f:3d:97:
                    6b:94:c6:72:e7:ee:cd:61:6e:7e:1a:08:e5:42:5a:
                    65:2d:3c:10:b5:83:39:f0:5a:bf:75:6a:39:94:7c:
                    9f:a7:20:04:15:91:b0:6e:d9:8b:a8:01:7b:d8:cc:
                    86:6c:03:40:d0:42:ad:2c:b7:90:5c:45:6e:60:77:
                    d5:61:dd:d7:c1:a6:29:31:73:53:21:62:b8:ea:7a:
                    62:80:50:72:b2:88:42:b1:ae:93:97:8e:94:1c:d7:
                    f4:39:9f:86:e0:7a:cb:88:12:dd:89:72:5f:2b:4c:
                    5c:a5:1a:0c:49:cb:3e:81:9a:33:47:f8:d0:db:d9:
                    b8:4f:db:fe:33:55:cc:f5:92:15:5a:87:41:99:b9:
                    8d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AD:F5:CA:CA:30:E5:B6:D0:E3:4F:EE:7C:13:7A:B3:4A:0F:E7:ED
            X509v3 Authority Key Identifier:
                keyid:F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ea:9b:35:4e:83:5b:fd:f5:a3:1d:1d:0c:1e:87:ea:e2:48:
         1f:03:52:d3:5a:b9:eb:5c:dc:c5:05:71:69:4e:e7:3a:7a:78:
         8b:74:85:5a:eb:4f:6e:4d:f0:7c:11:8f:92:48:8b:2f:1a:59:
         1e:6d:2e:23:36:9a:e2:00:56:aa:87:69:e3:22:25:d7:63:a6:
         eb:6b:69:c0:4d:da:89:93:ea:9e:dd:b9:1b:43:c5:3f:1b:21:
         07:6b:ff:44:8b:26:fa:7d:f1:c0:c7:18:38:96:0a:a2:06:f5:
         fd:63:7b:fa:ab:fb:4c:6d:61:0e:1f:8d:b3:d5:99:a5:ab:20:
         16:da:c9:c6:af:80:22:c1:28:0f:3a:14:b6:a8:a2:13:2f:70:
         0d:78:db:da:66:cc:44:6a:57:78:3a:9c:24:58:7f:8f:4b:f6:
         25:51:7d:e4:27:f6:0a:12:73:5b:47:07:b6:fc:ac:4d:e2:76:
         b1:c4:6a:f9:97:05:de:59:4a:1a:a8:6d:d6:05:7d:a6:1a:cc:
         31:23:c2:4e:70:53:f0:7f:77:fc:a3:c3:d9:26:6e:e4:d2:a2:
         f1:63:28:f6:05:a5:b9:9d:ad:4c:9b:51:d0:ea:cb:46:93:01:
         45:a3:53:e6:c3:64:c7:20:3e:d8:17:61:f3:af:37:18:fe:bd:
         ca:fb:98:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:59:22 2026 by rpki-client