Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
File:                     9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft (raw, json)
Hash identifier:          pNZzzLirgz9wJvF1jNTQT3SFApdo0xFfZZ2v4YHILP8=
Subject key identifier:   7C:C6:84:25:6F:CD:0E:D5:11:83:98:D5:99:47:71:9E:62:6B:67:D0
Authority key identifier: F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E
Certificate issuer:       /CN=A9135604/serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E
Certificate serial:       028B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
Manifest number:          0285
Signing time:             Sat 05 Sep 2026 01:44:06 +0000
Manifest this update:     Sat 05 Sep 2026 01:44:06 +0000
Manifest next update:     Sat 12 Sep 2026 01:44:06 +0000
Files and hashes:         1: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl (hash: pAVlXz5G7ipGF8Ji+0TNiWWEV1PlP4NAGfpd/07KQAE=)
                          2: D2528232D2A011ED86EB1F59C4F9AE02.roa (hash: SjpU2DHJY1cKYJ6gFYOmQrsv1wcliGyg64y2iPs/pk8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl
                          rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 01:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 651 (0x28b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135604, serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E
        Validity
            Not Before: Sep  5 01:44:06 2026 GMT
            Not After : Sep 12 01:44:06 2026 GMT
        Subject: CN=6a9b73e6-2e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2a:4b:e8:73:ab:fc:69:aa:75:41:b7:97:9d:
                    c2:c6:71:dd:9b:c0:92:66:07:3a:68:44:d2:3c:8d:
                    2d:1d:22:b3:40:14:08:da:c1:90:5a:e3:a9:99:d4:
                    1f:47:07:37:f1:44:2c:25:fa:73:6c:e6:10:81:33:
                    3a:9e:28:67:e4:d8:9b:82:13:41:5c:88:a1:81:02:
                    3e:7e:19:6c:74:bb:67:88:50:cc:66:f1:30:f4:27:
                    5d:b3:a6:36:3e:89:91:c3:0c:00:e7:16:dd:9d:60:
                    0a:17:a9:29:72:75:98:3a:9c:e3:fa:b2:3e:a7:89:
                    c7:5f:b8:95:b8:87:3e:11:04:3d:b5:93:8f:15:4d:
                    3c:13:e0:0e:42:1c:93:4d:8e:7c:4d:e6:bc:d4:d2:
                    f8:de:17:a0:1c:58:34:05:4c:5c:8f:c7:fb:47:b0:
                    9d:07:cf:17:c8:63:b4:bf:78:73:62:b1:25:69:7c:
                    3d:7f:35:71:21:e4:5b:df:e6:94:e1:ad:42:6d:37:
                    17:2d:4f:62:ee:e8:b1:7c:f5:46:b2:45:a8:46:e1:
                    1c:ae:4b:03:c0:b1:53:1a:97:43:6d:48:6e:43:7b:
                    d4:3c:10:98:02:a6:93:3c:67:85:cf:10:ce:f9:54:
                    ba:14:aa:c1:3e:cd:8a:75:7f:7b:01:0f:ef:4c:f8:
                    32:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C6:84:25:6F:CD:0E:D5:11:83:98:D5:99:47:71:9E:62:6B:67:D0
            X509v3 Authority Key Identifier:
                keyid:F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b9:1e:63:5a:ce:53:69:ce:2d:85:c7:c3:c0:be:35:af:92:
         3d:2f:16:46:e0:8f:39:d8:a6:ef:1e:2b:d8:d0:c6:6b:68:1c:
         2e:92:70:cb:cd:53:ab:5b:5f:c0:f2:71:1d:56:1d:25:ce:50:
         52:1e:82:b3:03:ce:9f:80:40:87:ba:7f:c6:24:29:4f:d6:fb:
         71:9f:11:04:4b:6e:e6:43:c6:05:99:2b:0d:6d:aa:53:c6:0b:
         a4:50:af:de:42:08:a0:2a:bb:4f:44:50:d5:d7:35:1a:76:97:
         91:f1:99:d1:c2:42:05:b3:5c:72:ea:9c:31:30:b6:0f:a5:3f:
         ba:f8:ed:ce:9d:e9:7e:8c:12:1b:ef:a5:d0:95:35:52:81:2c:
         35:82:90:33:c6:a1:10:08:35:f3:67:fe:8b:ab:a3:12:2a:7e:
         68:ee:6e:34:4f:30:40:42:e2:dc:b8:88:9e:1d:cd:1b:f3:d8:
         52:63:b3:f2:cc:95:29:89:25:70:ad:ab:c6:0f:fa:21:83:65:
         c2:b1:bd:0e:da:34:cf:87:6d:c5:3c:da:a1:f2:85:85:2d:bc:
         8d:5f:19:25:94:1f:68:df:70:6a:55:36:e5:b4:6e:80:59:f5:
         49:1e:73:87:49:c7:77:dc:9f:49:9a:90:c1:f5:1a:f7:6c:c9:
         56:42:3a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:41:26 2026 by rpki-client