Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
File:                     n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json)
Hash identifier:          +16j/qFifmmdvI/oa+G4Ra3u6NTH/GDxyFj7faY30Qw=
Subject key identifier:   12:AB:2C:4B:03:C2:4F:B8:D8:1B:E9:8B:53:B9:88:EE:23:FC:A5:88
Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2
Certificate issuer:       /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
Certificate serial:       2C33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
Manifest number:          2BDD
Signing time:             Tue 22 Sep 2026 15:29:27 +0000
Manifest this update:     Tue 22 Sep 2026 15:29:26 +0000
Manifest next update:     Tue 29 Sep 2026 15:29:26 +0000
Files and hashes:         1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: 7I6+e90X/Yjw8sabwAktTY5r4itpbLcV7Lap/LCgc3s=)
                          2: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: 25oLu27CZ0gv2qJnkcUs4150C/CVxdIojsajwReLNXs=)
                          3: BB799DA8844011F09054B049C4F9AE02.roa (hash: VrRFOlut3uTJjQcCOu3xElVoNRFtaOUQQFsO7k9dNnQ=)
                          4: 08074A8A1EB711EF9C248E60C4F9AE02.roa (hash: RaV0EBH4fa+l9u1AYk3sjgFpJfu7SSd3dDIQo14KDEs=)
                          5: 2AAD212086FE11F194514C90ABEE528E.roa (hash: STwQSq8DQE2VS7puIC3LaYb71CLa0EpjXHWsARHQLwU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl
                          rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:29:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11315 (0x2c33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
        Validity
            Not Before: Sep 22 15:29:26 2026 GMT
            Not After : Sep 29 15:29:26 2026 GMT
        Subject: CN=6ab29ed6-daf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9c:97:ab:d9:c3:65:82:0e:5f:ff:0d:8c:dd:
                    c0:e0:f3:fc:40:74:17:2f:87:70:ce:f2:cc:be:68:
                    04:41:53:59:87:83:a6:8d:3b:07:e4:dc:7d:5c:19:
                    a7:8f:d5:81:be:ab:e6:e0:91:cf:74:79:be:71:17:
                    f6:cd:71:66:00:ef:38:8d:ba:0c:5d:54:19:f4:8b:
                    01:b1:ae:5a:7c:d9:72:52:92:04:60:f6:84:9d:bf:
                    5d:00:66:bd:9f:87:86:1c:b4:67:da:f9:0b:12:eb:
                    c9:11:67:4e:f3:57:48:53:c6:0d:85:0c:98:d3:95:
                    06:11:f3:37:81:8c:6b:98:3d:ff:64:0c:32:dd:56:
                    a6:a6:f3:26:28:56:8d:cb:83:83:d9:7e:68:5f:3d:
                    b8:0e:d4:f1:60:4c:53:51:80:23:dd:dd:98:12:bd:
                    d7:2e:59:f5:9c:b3:e6:ac:e4:8d:6c:3d:40:56:e1:
                    aa:72:38:48:c9:88:64:eb:89:9c:9e:d7:e9:d7:be:
                    9b:cc:e1:5c:a3:3a:42:21:99:92:32:23:00:8d:c1:
                    43:28:8b:e0:2f:31:51:cd:81:e9:17:4f:05:7b:c3:
                    3e:32:4a:0e:20:ed:88:be:2c:71:9e:c0:61:12:be:
                    65:b0:f1:f9:19:29:88:82:6a:46:b2:fd:09:5d:af:
                    b0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AB:2C:4B:03:C2:4F:B8:D8:1B:E9:8B:53:B9:88:EE:23:FC:A5:88
            X509v3 Authority Key Identifier:
                keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:3c:f7:5e:b2:52:74:a8:25:ad:d5:fe:e0:74:6d:56:d4:dd:
         cc:3e:bf:57:1c:99:2f:31:29:d1:72:69:27:bd:8a:60:13:3f:
         8b:c2:af:ef:d3:c8:f8:45:29:52:7c:e6:29:42:9c:0e:66:62:
         4f:b9:1d:55:fa:28:e8:25:19:02:8c:2d:f1:e4:2c:bf:f4:6d:
         7a:91:5c:a8:fb:a9:86:c0:0a:6b:75:af:59:6f:8f:72:37:f4:
         e7:d8:6c:de:3e:a2:95:3f:7c:ae:c6:2f:8a:27:23:1d:7f:ac:
         a1:77:bc:80:77:3f:33:bb:ee:f5:b0:f5:4e:ae:f6:1b:87:c9:
         eb:26:96:d8:f1:86:a7:d5:5b:7d:ad:c1:0e:b7:3a:a0:17:dc:
         ac:bf:b8:86:4c:bb:8a:99:bb:a0:ff:37:e9:aa:76:03:ff:3f:
         5b:9b:71:da:9f:18:fc:9c:2c:ca:49:c8:bd:b6:16:bb:82:03:
         23:2b:83:f4:ca:19:e5:7c:64:90:a6:b1:25:3d:2c:e2:8f:37:
         ee:7d:65:3f:8c:94:43:72:5f:58:fe:20:2f:a7:6d:f5:4d:ae:
         50:14:06:45:3b:e2:7e:45:20:3c:13:18:fe:77:b4:a3:26:77:
         40:24:69:dc:83:b2:fa:db:2d:d1:18:34:79:46:69:c5:77:e9:
         84:d0:7f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:58:17 2026 by rpki-client