Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft
File:                     v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft (raw, json)
Hash identifier:          lKVFHpvexG1QVJiz2ZoXp8RqFtTpTTGQHHLiHJqp4D8=
Subject key identifier:   35:4E:92:40:47:5B:FD:14:39:E2:B8:63:17:5D:F5:80:67:17:09:B7
Authority key identifier: BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55
Certificate issuer:       /CN=A913DE7A/serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055
Certificate serial:       0AD5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft
Manifest number:          0AA5
Signing time:             Thu 10 Sep 2026 19:31:47 +0000
Manifest this update:     Thu 10 Sep 2026 19:31:47 +0000
Manifest next update:     Thu 17 Sep 2026 19:31:47 +0000
Files and hashes:         1: v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl (hash: Kt2IR0lxpZ8YcJVkoz69ZARLTgdL9+zt1PULK42bGws=)
                          2: D4378BBA268311EE9BB21413C4F9AE02.roa (hash: TiDr6WpJL+EOMyHz0B6+gBTfSVybvdd71lcd+PZGQoA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl
                          rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 19:31:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2773 (0xad5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DE7A, serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055
        Validity
            Not Before: Sep 10 19:31:47 2026 GMT
            Not After : Sep 17 19:31:47 2026 GMT
        Subject: CN=6aa305a3-a0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:f1:12:8f:5e:6d:d6:25:ee:3b:36:2c:16:
                    dc:2f:ea:34:34:b6:f9:a9:f2:eb:cd:f0:bc:5c:7d:
                    90:63:85:7d:6f:1e:82:61:b7:9f:03:6a:a1:e6:5f:
                    33:ad:84:4a:6a:b2:0e:29:cf:c3:06:53:0b:1a:2d:
                    09:7b:78:8e:48:fd:55:69:d0:3c:2a:97:19:05:50:
                    50:6a:85:97:b9:4f:d5:c7:0d:73:21:0f:d7:a6:31:
                    80:38:57:c2:dc:3f:1f:33:12:d4:e9:ee:af:39:8a:
                    84:73:91:db:bb:9b:a4:83:2f:3c:98:a5:9d:b6:dc:
                    a5:db:f1:30:01:9f:d8:98:ac:79:4d:05:07:db:f7:
                    f5:bb:ed:05:c4:de:aa:64:76:03:63:dd:36:f7:3a:
                    09:e3:a1:61:fb:d6:de:c0:c8:f4:f3:bc:d7:1a:20:
                    34:d2:72:70:fc:16:e3:74:9f:c0:8d:92:ae:4d:0e:
                    74:a8:6d:7b:a0:02:6a:d9:ff:83:73:45:f0:06:04:
                    6e:11:1b:62:33:08:17:f9:ac:45:0c:42:f8:75:3e:
                    a1:3e:67:27:ec:71:29:be:10:ed:0f:a0:4c:db:54:
                    03:af:22:1f:66:1d:29:ec:7f:bf:29:6a:43:69:cf:
                    01:ad:3f:7b:7c:48:dc:36:4a:3f:64:e5:ae:a1:86:
                    ed:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4E:92:40:47:5B:FD:14:39:E2:B8:63:17:5D:F5:80:67:17:09:B7
            X509v3 Authority Key Identifier:
                keyid:BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:62:fd:62:a1:24:e3:48:b9:6b:d2:fc:7b:99:b2:e7:7a:38:
         03:63:e3:fa:f2:93:91:f9:f0:75:0a:8f:cf:33:a3:ad:7c:d0:
         84:10:2f:ec:bf:c2:14:39:85:22:71:03:70:26:3a:9d:d0:e6:
         d5:0b:71:39:24:4d:52:bd:93:c3:96:2e:b0:85:f4:bd:9c:10:
         a5:1c:66:22:b9:ce:51:b8:a0:78:e4:ae:16:40:62:45:22:e3:
         86:18:fa:da:2b:1a:95:3f:0a:e0:da:4c:27:18:0f:3b:12:12:
         d0:47:26:f3:2e:59:36:32:d8:f6:bf:49:e5:21:95:1d:2a:8b:
         56:af:86:9a:e8:07:6c:23:7d:0a:c4:5e:51:74:26:79:14:3f:
         76:de:6c:df:fe:09:cb:ba:fe:36:6c:a5:7e:57:04:37:a6:21:
         33:4d:b9:3a:5d:d4:de:f8:bf:33:82:53:2f:29:69:c7:32:13:
         f2:7c:59:9b:7c:7e:87:1d:f6:c5:48:9f:1e:7d:82:13:04:65:
         e1:4c:2e:46:a4:c8:0c:05:98:6a:9e:5a:d2:e6:df:41:33:46:
         94:cf:cf:ec:e2:27:28:eb:2e:ea:df:fd:e2:fc:1d:4a:d9:01:
         79:78:c1:d8:d8:ed:5d:da:2c:f4:a8:c2:3e:c1:80:d8:bc:51:
         f1:30:97:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:56:15 2026 by rpki-client