Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.mft
File:                     _xOUBaa6BoyBp0rTX-yUkYJp2OE.mft (raw, json)
Hash identifier:          5ED9Qn7FeiH/HSTYL6gMTd1nFTj3NDRbYUgAHcL+k+U=
Subject key identifier:   3E:E8:42:95:DB:49:51:4B:FB:4C:4C:E4:D0:C3:22:14:23:08:43:89
Authority key identifier: FF:13:94:05:A6:BA:06:8C:81:A7:4A:D3:5F:EC:94:91:82:69:D8:E1
Certificate issuer:       /CN=A9139D67/serialNumber=FF139405A6BA068C81A74AD35FEC94918269D8E1
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_xOUBaa6BoyBp0rTX-yUkYJp2OE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.mft
Manifest number:          26
Signing time:             Wed 07 Oct 2026 09:26:23 +0000
Manifest this update:     Wed 07 Oct 2026 09:26:23 +0000
Manifest next update:     Wed 14 Oct 2026 09:26:23 +0000
Files and hashes:         1: _xOUBaa6BoyBp0rTX-yUkYJp2OE.crl (hash: UNXXZI3KMBB3+O+ph4QVLj7OmCP78ypafY2rJy+f+Ik=)
                          2: FC3ECAC88BC111F190F2EAA86C11F970.roa (hash: 4889GaDsygj/hBcnFh0j5KUrF53rJ0JxKKaFI2ZWHR4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.crl
                          rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_xOUBaa6BoyBp0rTX-yUkYJp2OE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 09:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139D67, serialNumber=FF139405A6BA068C81A74AD35FEC94918269D8E1
        Validity
            Not Before: Oct  7 09:26:23 2026 GMT
            Not After : Oct 14 09:26:23 2026 GMT
        Subject: CN=6ac6103f-092a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:13:fe:07:d3:83:f5:78:c9:90:21:7f:10:f2:
                    4a:b9:00:d9:97:4e:9a:3c:08:21:45:37:fa:e8:d8:
                    cb:35:5b:37:2a:19:f1:46:24:48:cf:b8:3c:fb:f5:
                    ab:bb:25:73:34:bb:24:18:2c:48:3c:53:c0:8e:99:
                    31:ee:45:a0:58:4f:bc:f9:64:4b:a6:d9:1d:01:45:
                    d7:19:18:a2:2d:c5:17:c0:ba:73:da:81:7a:5b:a6:
                    aa:42:41:7b:b0:51:17:f4:1b:37:62:bd:6e:fd:03:
                    cf:3c:70:18:98:b5:75:b9:2e:62:88:39:83:43:3d:
                    fd:d5:a2:2a:23:35:09:11:06:78:71:44:10:f3:68:
                    f9:5d:39:f6:23:93:a4:11:22:7f:ab:09:88:8b:c9:
                    59:c3:61:fe:e5:06:c2:d4:da:4d:bb:25:85:58:51:
                    b0:4b:3d:3e:49:04:87:12:30:cc:2b:37:76:3f:0e:
                    5b:a9:b0:bf:3d:c3:90:28:43:dd:40:68:12:0f:ab:
                    66:75:e2:16:a1:f2:4f:ee:3d:90:2f:a7:ee:88:64:
                    a6:12:26:35:a0:60:1a:c3:89:d0:6f:f8:87:e5:62:
                    f5:97:8e:37:b3:32:6c:bb:ed:2b:de:6a:e9:51:75:
                    01:56:6b:18:ca:35:0a:a2:45:3e:eb:39:f0:06:48:
                    2b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E8:42:95:DB:49:51:4B:FB:4C:4C:E4:D0:C3:22:14:23:08:43:89
            X509v3 Authority Key Identifier:
                keyid:FF:13:94:05:A6:BA:06:8C:81:A7:4A:D3:5F:EC:94:91:82:69:D8:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_xOUBaa6BoyBp0rTX-yUkYJp2OE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:69:70:b3:ba:c8:75:42:da:bf:16:de:6a:b1:53:0a:c9:34:
         2f:f1:1c:85:08:66:53:57:a1:3b:09:90:21:3d:7c:78:c7:76:
         6f:d8:21:34:0d:46:61:54:bc:59:d1:56:cc:ae:90:fc:9a:b2:
         c7:10:ff:66:5f:87:ba:3c:0a:cb:59:3a:d2:24:8d:f5:cc:c4:
         0e:2b:32:27:65:9a:61:5c:66:3e:82:8e:b4:aa:6e:a5:fb:53:
         89:3b:75:15:8e:fb:f0:5a:25:c2:f7:b8:21:4e:c3:a9:1a:77:
         bb:e2:9f:45:18:84:c6:92:6f:e9:48:bc:4d:8b:23:ed:1a:20:
         e8:be:00:83:20:1c:67:04:70:09:7b:bd:93:75:f2:4d:2a:83:
         0a:87:1a:0b:36:a9:f7:64:1b:32:2f:39:3d:76:85:54:eb:d8:
         91:fd:c9:91:ac:c9:a5:ef:e8:0b:72:7f:38:c8:68:32:af:57:
         d5:43:81:66:d5:93:33:2a:a1:90:71:78:91:11:21:be:80:47:
         dd:4b:e3:02:d1:1f:a7:21:50:e3:0b:46:a1:80:27:0a:54:4d:
         79:36:a2:38:c1:fd:29:c7:b8:1c:b2:63:f1:bb:47:85:3d:83:
         96:9d:7e:33:4d:fa:43:81:b3:ee:63:42:9e:e6:c7:4f:76:58:
         5c:a7:30:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:19:20 2026 by rpki-client