Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130F3B/E7B18622B7EA11F18BCEDEB76A11F970/pCN_5dFNjr4Npet-icCSAhCeaJU.mft
File:                     pCN_5dFNjr4Npet-icCSAhCeaJU.mft (raw, json)
Hash identifier:          Xke1FHn8KsqHKVvX0uBuYBMkOYDGJsGMgU85uJzx7qs=
Subject key identifier:   94:53:45:88:C2:08:3F:94:39:8A:1C:92:A8:44:22:C1:59:B6:2C:6E
Authority key identifier: A4:23:7F:E5:D1:4D:8E:BE:0D:A5:EB:7E:89:C0:92:02:10:9E:68:95
Certificate issuer:       /CN=A9130F3B/serialNumber=A4237FE5D14D8EBE0DA5EB7E89C09202109E6895
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pCN_5dFNjr4Npet-icCSAhCeaJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130F3B/E7B18622B7EA11F18BCEDEB76A11F970/pCN_5dFNjr4Npet-icCSAhCeaJU.mft
Manifest number:          09
Signing time:             Wed 07 Oct 2026 09:52:04 +0000
Manifest this update:     Wed 07 Oct 2026 09:52:04 +0000
Manifest next update:     Wed 14 Oct 2026 09:52:04 +0000
Files and hashes:         1: pCN_5dFNjr4Npet-icCSAhCeaJU.crl (hash: XbwUe8CHMMEokPzxId/9nDSVr0PtknptycUH03516KI=)
                          2: 95A0C026B7EC11F1B1A676DD6A11F970.roa (hash: nmq6934PJBC0Lq4XBqUmQv0yTSqCb333WVJd/aqAhUg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130F3B/E7B18622B7EA11F18BCEDEB76A11F970/pCN_5dFNjr4Npet-icCSAhCeaJU.crl
                          rsync://rpki.apnic.net/member_repository/A9130F3B/E7B18622B7EA11F18BCEDEB76A11F970/pCN_5dFNjr4Npet-icCSAhCeaJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pCN_5dFNjr4Npet-icCSAhCeaJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 09:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130F3B, serialNumber=A4237FE5D14D8EBE0DA5EB7E89C09202109E6895
        Validity
            Not Before: Oct  7 09:52:04 2026 GMT
            Not After : Oct 14 09:52:04 2026 GMT
        Subject: CN=6ac61644-bcb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:99:84:6f:44:85:93:27:be:7d:a5:d4:30:37:
                    9a:c0:fa:41:da:a1:20:aa:b1:df:4d:1b:fa:29:4a:
                    38:5c:3d:74:c3:d6:ef:75:d2:d1:ad:3d:73:87:f4:
                    7c:d9:4b:e3:13:63:c0:b5:32:19:7d:0c:54:e8:af:
                    8b:78:04:70:b1:4d:83:f7:94:c8:56:ec:11:42:76:
                    a2:2f:b0:0f:68:11:e9:e8:7b:d9:f9:32:76:f7:8c:
                    4b:32:39:92:eb:05:8e:d4:12:02:8a:bb:b8:31:e0:
                    9e:1c:61:75:cc:74:17:68:08:96:2d:d2:28:e6:34:
                    11:ef:0f:39:f2:62:1a:3c:a7:71:e5:9c:99:24:d7:
                    17:2b:6c:04:d9:06:cd:ec:0c:56:fd:50:ad:4a:28:
                    77:63:08:e1:ba:90:d2:2e:a8:5c:86:2f:cb:52:bb:
                    2e:e9:2f:67:7e:3b:33:55:8b:ca:04:72:b1:f8:8f:
                    9c:fb:1b:08:b3:f0:ee:8d:5a:88:32:53:dd:85:c1:
                    2e:8f:19:25:d8:38:76:93:80:00:b3:bc:f5:f6:91:
                    ba:d8:55:2a:ca:e2:d7:73:3b:5e:79:09:5a:32:03:
                    45:d9:7e:34:5e:56:3c:d2:50:05:1c:92:ab:d2:f9:
                    45:e1:d8:0f:54:16:88:1a:13:1f:93:5d:d3:a5:d2:
                    06:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:53:45:88:C2:08:3F:94:39:8A:1C:92:A8:44:22:C1:59:B6:2C:6E
            X509v3 Authority Key Identifier:
                keyid:A4:23:7F:E5:D1:4D:8E:BE:0D:A5:EB:7E:89:C0:92:02:10:9E:68:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130F3B/E7B18622B7EA11F18BCEDEB76A11F970/pCN_5dFNjr4Npet-icCSAhCeaJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pCN_5dFNjr4Npet-icCSAhCeaJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F3B/E7B18622B7EA11F18BCEDEB76A11F970/pCN_5dFNjr4Npet-icCSAhCeaJU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:8a:f9:9d:af:6e:40:f3:43:b7:1f:15:6d:76:b5:f1:bb:18:
         7a:c2:aa:90:e0:a4:10:1e:ba:23:3c:7e:de:55:0b:b7:80:78:
         c5:95:c4:8d:78:23:18:31:bb:0f:6d:92:40:1c:37:e0:c0:07:
         32:e8:3e:71:9f:73:28:7c:1f:4e:93:81:5f:ef:08:c6:9d:2e:
         79:a6:0b:ae:31:37:c6:3f:01:fd:69:00:6e:fc:43:ff:a4:c2:
         bc:2b:cf:8a:eb:55:4d:8a:27:a8:a5:b3:65:9b:fa:e6:6c:eb:
         97:54:0f:eb:1d:b2:42:f8:6c:66:2f:73:68:ef:b1:8f:8f:ce:
         2a:d9:39:86:3e:74:f2:8a:ae:f0:02:ae:18:9c:33:5a:b4:10:
         bb:04:25:9d:44:4f:f4:9d:3e:95:17:d8:d4:b0:a0:ca:e6:3b:
         0d:de:e1:27:54:03:6d:09:95:c8:73:92:34:a2:09:0c:3d:e8:
         27:db:8f:e8:81:d5:fb:6c:16:09:af:86:43:c0:0b:21:e9:42:
         43:c0:d5:80:b2:5b:20:99:e1:2f:6c:6e:4e:65:a5:f1:48:c4:
         11:9d:02:3e:d7:d9:25:bd:1d:e8:ff:92:bd:ea:b1:50:ca:15:
         8e:ec:85:6b:59:b9:68:00:c4:06:4b:61:4d:4e:83:08:2e:e0:
         e4:73:12:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:30:15 2026 by rpki-client