Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
File:                     McT5Bk-J5WsZTriEkukCHBUt6z4.mft (raw, json)
Hash identifier:          kOfYNAP5xQj34pqarN7guE5L4P3dd/KeNlpxNPCHQsg=
Subject key identifier:   FD:6F:C6:98:22:A1:C0:E3:BB:E7:CE:EE:79:38:41:BB:C3:A2:9B:40
Authority key identifier: 31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E
Certificate issuer:       /CN=A9133E16/serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
Certificate serial:       0A03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
Manifest number:          09F1
Signing time:             Sun 20 Sep 2026 19:46:56 +0000
Manifest this update:     Sun 20 Sep 2026 19:46:55 +0000
Manifest next update:     Sun 27 Sep 2026 19:46:55 +0000
Files and hashes:         1: McT5Bk-J5WsZTriEkukCHBUt6z4.crl (hash: tbPNsIPromycvJpZXGcrOnc2dMywaqfrJTVCThxr9xw=)
                          2: DB4932CEC2B611EB9BF18A81C4F9AE02.roa (hash: Hj2gvQPptbIyBsk+GZQr8HEa82gNIwoOpKASxetT7F4=)
                          3: 900E2272349F11EDA1460419C4F9AE02.roa (hash: H91fXqxV7rY9zHcxYCuUe8A5mKb0ae920Vx4iWfH6XE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl
                          rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 19:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2563 (0xa03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133E16, serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
        Validity
            Not Before: Sep 20 19:46:55 2026 GMT
            Not After : Sep 27 19:46:55 2026 GMT
        Subject: CN=6ab03830-4c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6a:c9:76:47:eb:6b:87:83:30:cb:f5:76:45:
                    27:74:65:2f:31:27:60:32:3a:31:2a:b8:b4:fe:0f:
                    68:d6:13:ce:60:0e:fe:d9:4c:cd:4c:46:c2:01:a6:
                    64:07:7d:60:41:0f:40:ff:70:40:4c:d7:11:41:06:
                    d7:59:0c:ad:84:d9:7a:18:95:1e:fd:e0:0e:27:d9:
                    47:cb:8b:be:b5:e8:e0:16:18:08:32:30:46:d7:53:
                    63:c7:e5:ee:92:9a:dd:4c:da:cf:e0:5a:2e:88:41:
                    6a:45:65:db:f9:b8:6d:ad:06:59:ca:64:cc:60:18:
                    a2:4e:50:82:97:0a:70:8b:ad:7d:fb:dd:80:2c:b5:
                    97:35:fa:be:00:ca:2f:6f:22:e3:4a:17:42:ee:9e:
                    68:b7:a4:4c:31:e7:54:49:71:fb:59:76:65:b0:0d:
                    8f:a0:56:d2:0d:c5:d7:15:2e:87:06:30:d6:5d:26:
                    0e:02:f1:f7:ff:3b:54:a5:f6:03:95:37:08:7d:70:
                    35:c5:7c:d8:02:9f:e6:b9:32:e3:a6:93:d4:e0:64:
                    ef:27:af:ec:e7:eb:e6:e8:8a:1b:93:98:e3:59:47:
                    bf:92:78:79:21:3a:f7:4a:3f:e8:7d:95:d5:c5:3d:
                    7b:45:61:28:4c:df:d2:8f:b4:6d:a9:56:f4:83:c5:
                    8b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6F:C6:98:22:A1:C0:E3:BB:E7:CE:EE:79:38:41:BB:C3:A2:9B:40
            X509v3 Authority Key Identifier:
                keyid:31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ec:9e:3a:18:1f:65:d7:05:e5:79:e7:d9:df:58:03:a6:ab:
         dc:40:cf:fc:5c:3f:e3:d8:d4:9f:25:2b:06:c7:fd:52:c0:91:
         e4:ab:9e:1f:c7:e7:a4:1a:9b:e3:d2:3b:99:e1:fd:d2:e2:71:
         1a:07:00:1d:ad:e5:ef:e8:9b:d2:62:8e:64:a3:79:20:de:a9:
         62:08:93:6e:eb:2c:e0:2d:04:bf:47:7d:03:60:22:0a:5a:54:
         5a:8f:92:52:2c:ce:f6:51:12:35:48:13:48:fc:1f:5b:7a:37:
         b2:99:73:8c:ee:b5:15:67:80:c6:e3:e5:3d:24:cb:3c:89:08:
         8d:ee:a9:74:ad:1f:a2:a1:4b:6c:c6:3d:ee:bc:84:c6:ef:17:
         d7:45:c6:79:61:63:aa:ee:cd:90:97:c1:e9:3d:61:e2:02:61:
         33:ce:38:4a:08:98:c3:e3:b7:cc:0a:70:2d:a3:c0:5c:71:76:
         9f:72:2a:65:35:06:8d:37:b9:ce:7a:44:83:53:5d:7d:de:2f:
         ef:ec:e6:e3:b2:00:ad:29:7a:26:38:6d:d8:4e:0f:51:84:d0:
         fa:0a:5c:ab:f1:9c:cd:ee:b6:bd:b4:63:39:c2:19:57:55:b6:
         60:69:1b:31:8d:9f:65:69:d9:d2:fb:39:81:bb:7a:9f:57:be:
         72:63:8d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:58:31 2026 by rpki-client