Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft
File:                     9dBHSQ3jpO3P3Df27KuUk42nxvY.mft (raw, json)
Hash identifier:          WHxrasncUc0G5Ez69YpfCuGpJZLAr1K5bVZmfXdI+Mw=
Subject key identifier:   33:8B:69:3B:71:62:B6:42:F7:DD:8B:A8:00:35:1A:45:FA:5D:2A:40
Authority key identifier: F5:D0:47:49:0D:E3:A4:ED:CF:DC:37:F6:EC:AB:94:93:8D:A7:C6:F6
Certificate issuer:       /CN=A913990E/serialNumber=F5D047490DE3A4EDCFDC37F6ECAB94938DA7C6F6
Certificate serial:       0892
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft
Manifest number:          0887
Signing time:             Fri 02 Oct 2026 21:03:46 +0000
Manifest this update:     Fri 02 Oct 2026 21:03:46 +0000
Manifest next update:     Fri 09 Oct 2026 21:03:46 +0000
Files and hashes:         1: 9dBHSQ3jpO3P3Df27KuUk42nxvY.crl (hash: ElyFYDgX4dyzk+WxC8E0NboXfLdzvgfp7FS6auvUvKE=)
                          2: 86BB53D0105611EB85F56114C4F9AE02.roa (hash: 0FLsVFnSdoOS4qQiWQsx1o6McKf51GhqbIOg2OyHSDk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.crl
                          rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 21:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2194 (0x892)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913990E, serialNumber=F5D047490DE3A4EDCFDC37F6ECAB94938DA7C6F6
        Validity
            Not Before: Oct  2 21:03:46 2026 GMT
            Not After : Oct  9 21:03:46 2026 GMT
        Subject: CN=6ac01c32-0328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:dc:f0:e3:ed:04:ee:27:e3:ab:c1:bf:f3:
                    84:08:15:c2:8d:3d:c3:ec:6f:3f:6f:b6:3b:19:f8:
                    91:a0:95:06:dd:9e:3e:3d:b0:f6:cb:fb:61:6c:6e:
                    45:3b:53:4b:ee:ec:8c:ae:f6:fa:8d:7e:6e:88:73:
                    ba:ee:57:46:d8:29:26:ec:eb:2b:49:bd:ef:04:3f:
                    4d:3f:cd:77:bf:e9:6c:3d:f3:3c:2b:5a:09:0a:23:
                    83:0c:77:94:d3:7f:5e:4f:ea:f9:fe:71:44:1f:58:
                    40:cd:ea:a5:0e:c1:11:92:16:31:9e:0f:25:84:77:
                    18:d1:46:23:22:19:7c:bc:97:2e:1c:7d:ab:6e:f8:
                    2f:38:15:62:69:e9:cd:be:57:9a:c7:f8:99:de:96:
                    03:d5:dc:81:53:03:20:cf:5f:a2:c7:c2:ca:d1:9d:
                    7c:67:0e:a4:3e:d8:73:c0:02:2a:9a:26:55:f2:30:
                    db:15:36:59:37:b3:08:48:e5:42:8b:99:4d:2a:09:
                    7e:8d:e2:7e:24:51:93:4b:21:f8:c9:0e:b8:83:fc:
                    47:09:bc:75:ea:26:3b:88:a1:c0:b8:4c:2b:b8:07:
                    1d:5f:a9:1d:05:a3:73:90:fd:09:ca:14:f6:ef:16:
                    99:13:87:3a:fd:14:02:99:a6:b9:c1:65:f2:f1:7a:
                    5e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8B:69:3B:71:62:B6:42:F7:DD:8B:A8:00:35:1A:45:FA:5D:2A:40
            X509v3 Authority Key Identifier:
                keyid:F5:D0:47:49:0D:E3:A4:ED:CF:DC:37:F6:EC:AB:94:93:8D:A7:C6:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:0d:48:a8:bc:bd:47:d5:17:26:c1:ef:63:d9:7f:f2:2d:c5:
         d3:7b:9b:1f:84:f9:d6:6f:1c:e3:d8:6d:70:c7:00:1f:f3:85:
         f0:b9:5d:d9:7d:c9:46:b4:b9:59:0f:be:62:f9:0b:88:0c:de:
         05:43:a6:f3:93:82:a9:44:a0:26:8f:2f:06:01:67:c3:f1:04:
         54:41:54:13:a0:74:07:62:b0:f5:e0:82:25:1a:39:06:f4:53:
         6f:5f:23:c1:e5:20:ea:d2:1b:71:83:00:a2:a3:d1:32:7b:7b:
         11:94:6d:b5:d3:51:62:48:34:23:4c:e3:4c:a6:ef:30:89:aa:
         cb:49:37:27:df:e9:09:9d:f1:04:a5:8f:60:8d:f7:cf:43:fd:
         02:6a:c1:e8:b9:c9:58:58:f9:8c:9d:fb:bb:52:19:be:70:6d:
         83:20:0a:6c:83:f5:c4:ad:82:14:78:b7:55:75:6a:a2:8d:78:
         ae:99:23:18:1e:62:af:75:2b:a1:e7:10:58:3d:6c:2e:7b:2f:
         24:76:95:0e:e3:69:f0:ca:d6:b6:fa:fe:5a:d7:1c:ae:d4:9b:
         35:e7:23:e9:a9:bc:8a:c6:3a:ff:34:83:46:58:ec:3b:1a:87:
         ca:cd:c1:a1:46:68:3c:88:cf:43:a3:4f:73:69:87:2b:17:14:
         88:18:e3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:00:39 2026 by rpki-client