Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
File:                     x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft (raw, json)
Hash identifier:          Br1WeKdlafj4pgXchquZjNklwQmIgLbxGIs8eo2ikdc=
Subject key identifier:   DF:F9:00:E8:74:A9:35:45:15:B1:A1:DD:D2:26:39:92:DD:3B:19:3E
Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B
Certificate issuer:       /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B
Certificate serial:       026C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
Manifest number:          0268
Signing time:             Mon 05 Oct 2026 02:24:00 +0000
Manifest this update:     Mon 05 Oct 2026 02:23:59 +0000
Manifest next update:     Mon 12 Oct 2026 02:23:59 +0000
Files and hashes:         1: x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl (hash: e1Ml5Vo3WG6R41EBThTop5OBfoxvrZyXhqxvfZ6qGXA=)
                          2: 96BD724A36E411F0AAE1DE39C4F9AE02.roa (hash: shoLPgC/NpsBS7wBYyvhBSwKP6LoO6Nubl4gi/Om0Kk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl
                          rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 02:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 620 (0x26c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131A5E, serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B
        Validity
            Not Before: Oct  5 02:23:59 2026 GMT
            Not After : Oct 12 02:23:59 2026 GMT
        Subject: CN=6ac30a3f-3f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4e:f2:d5:a1:0a:2d:de:c8:ae:8d:30:56:f5:
                    22:61:03:ab:4d:7a:1e:01:d6:22:8b:2d:5d:8d:02:
                    69:f3:86:5b:bf:b1:56:b6:f3:8f:42:57:28:f1:ed:
                    be:96:fc:55:6c:ad:0a:d7:15:e7:ec:f6:d3:bf:ec:
                    c1:e5:fe:82:c0:4b:d3:e7:8b:7e:e5:56:1d:72:45:
                    49:39:68:96:27:df:8b:bf:68:d1:d9:78:c6:48:1a:
                    00:9f:ae:b0:68:a8:57:cb:9c:79:c5:c2:c9:6a:bd:
                    ed:dc:6d:4c:bc:68:29:29:5e:d4:1e:7c:51:81:6b:
                    b2:63:d2:be:73:da:3b:ec:ad:a5:d5:c6:8e:9d:10:
                    e7:f1:2e:d9:69:8e:ce:91:42:63:9f:32:e6:7a:39:
                    39:4c:b4:cd:f4:f5:fe:9e:71:0a:f0:64:f8:6f:7b:
                    f0:a4:b1:5b:e1:3d:eb:a4:29:9f:97:df:1a:d2:1f:
                    2b:07:ae:12:9d:c7:8d:e0:52:58:48:02:01:ce:be:
                    ea:64:47:c2:8d:3c:f2:75:72:2c:37:6c:08:ac:3e:
                    46:4c:d3:c5:31:34:47:18:28:49:05:3a:96:fa:ca:
                    fe:07:a0:ee:22:fc:b2:99:db:f4:8e:55:12:9d:91:
                    17:38:31:e5:1a:1c:ff:f5:ba:f2:91:a3:b9:ad:eb:
                    81:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F9:00:E8:74:A9:35:45:15:B1:A1:DD:D2:26:39:92:DD:3B:19:3E
            X509v3 Authority Key Identifier:
                keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:54:ea:db:36:21:d9:c1:ba:40:0f:94:d6:b9:3f:08:f1:1f:
         23:b5:65:4a:df:58:d4:8d:1b:bb:af:a6:c0:15:63:e0:23:ee:
         bc:de:f9:8c:ab:b2:41:a0:46:57:0a:5c:a2:7b:9c:52:2c:57:
         b3:35:6a:79:82:aa:4e:bf:02:93:43:2c:b9:a8:c5:12:b4:f3:
         d8:b6:05:93:6d:0f:00:52:e8:10:75:81:27:71:30:80:77:2c:
         d5:b9:c2:d2:54:0d:c6:b2:84:b8:94:32:48:ce:d2:35:52:1c:
         10:2b:02:ce:96:56:29:4d:85:5b:24:7a:85:f0:fa:b8:c9:47:
         5c:15:31:f9:42:5e:1f:4d:78:3e:44:ac:d2:71:d0:70:a4:42:
         a9:64:c9:a3:18:ad:bb:c5:0f:27:b9:0e:6d:db:ea:0d:9f:dd:
         47:7c:f5:84:60:44:b0:c5:4b:53:55:ba:a6:1a:e2:96:47:ef:
         44:a1:38:35:f3:f7:6a:70:53:7e:3c:eb:8f:cc:fb:00:9d:f4:
         e3:86:f4:d2:22:20:d4:f9:b4:61:76:7c:d2:d6:1c:ac:b9:b6:
         9f:43:87:bf:a5:59:3b:ad:1c:c1:a5:27:27:39:8c:84:a7:89:
         c9:d6:2d:48:53:23:5a:fa:4b:32:1d:94:36:03:db:97:ad:05:
         00:61:15:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:42:12 2026 by rpki-client