Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
File:                     4B6dNuokjcH2d8MUv2yRgpDmP_I.mft (raw, json)
Hash identifier:          QSU5R5BfMow+Ajy/9VA75yfyDZqtDF9bd3l/UULYL1o=
Subject key identifier:   19:59:45:1D:ED:75:26:50:81:A9:75:7A:17:8E:B2:41:EA:FE:B3:AD
Authority key identifier: E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2
Certificate issuer:       /CN=A9143B87/serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
Certificate serial:       9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
Manifest number:          9A
Signing time:             Thu 03 Sep 2026 07:31:52 +0000
Manifest this update:     Thu 03 Sep 2026 07:31:51 +0000
Manifest next update:     Thu 10 Sep 2026 07:31:51 +0000
Files and hashes:         1: 4B6dNuokjcH2d8MUv2yRgpDmP_I.crl (hash: bduB4Pvg139P+pOF8BTLO4I4h+ukwhamI6EOhzHtLbs=)
                          2: 2332E938BD3811F0B9AC9752C4F9AE02.roa (hash: j3RcIOxQafJaiJkb6d3Tg7sD8bBgOOkAr8+5HaXc9rU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl
                          rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 07:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143B87, serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
        Validity
            Not Before: Sep  3 07:31:51 2026 GMT
            Not After : Sep 10 07:31:51 2026 GMT
        Subject: CN=6a992268-35fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:af:37:ff:9e:ea:8c:f7:97:a7:4d:a6:d8:79:
                    d9:18:2e:00:15:4d:59:6f:1a:53:71:62:51:08:35:
                    4e:e0:f4:c0:da:b9:ed:60:aa:18:94:f7:8b:46:60:
                    86:6f:85:95:9e:55:93:62:0a:c7:1f:66:3f:8e:8e:
                    7a:c1:b7:c9:f6:77:6e:25:f6:30:e5:a0:0d:b3:34:
                    31:95:2d:b7:e4:e7:bb:b3:03:dc:de:7d:12:38:81:
                    c1:6a:a9:58:ee:eb:92:72:f9:53:dc:3f:1d:47:d1:
                    50:d3:a7:36:a6:a1:f8:66:6d:9d:2a:3a:49:5f:31:
                    14:77:ba:8d:4d:ba:56:27:4b:50:8a:19:eb:44:ae:
                    57:97:f4:06:41:a8:86:5b:bd:49:14:74:c1:6e:81:
                    2a:25:98:d8:3a:c1:bd:ed:a0:b3:a1:a0:4a:1b:70:
                    23:69:9d:bc:59:d0:ab:5f:42:9a:0e:d1:b4:fb:c1:
                    1c:45:45:93:3d:eb:e2:52:c8:12:5d:9a:ce:07:ae:
                    37:d5:b4:ad:3f:75:b5:11:99:4b:5c:4a:ef:4b:24:
                    1d:d9:86:ae:da:f6:45:5a:1e:60:b7:bd:f1:1b:8e:
                    9f:b7:05:34:14:00:21:71:fa:a4:18:b3:b5:d8:8d:
                    3a:03:ba:04:0b:f5:d3:b1:d5:15:56:be:05:85:f6:
                    62:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:59:45:1D:ED:75:26:50:81:A9:75:7A:17:8E:B2:41:EA:FE:B3:AD
            X509v3 Authority Key Identifier:
                keyid:E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:64:39:be:2b:87:13:2c:98:04:ec:2f:09:5b:34:67:99:d9:
         86:b2:bd:fb:b9:3c:de:56:ec:0c:48:05:19:aa:ad:24:94:63:
         ad:76:0e:03:d2:97:38:1c:a5:88:ac:8a:a5:21:55:7c:53:4e:
         0b:e5:55:d3:13:a2:42:d1:49:53:8c:e9:9c:ff:83:af:df:43:
         e2:c4:01:91:1d:da:43:1f:05:3f:41:50:73:70:2e:7a:59:20:
         e6:71:8c:64:bc:df:bf:bc:12:92:3c:44:48:8d:27:77:f0:ff:
         05:1d:89:9d:09:ca:54:05:3c:13:ea:65:cb:27:93:49:08:29:
         cb:d1:88:f9:c7:ba:b6:ee:e4:55:b3:37:70:03:2b:8d:08:e5:
         4c:47:ca:89:1e:f2:9d:9b:0c:3d:21:92:9c:8b:be:c4:3a:f9:
         5a:87:b8:0a:e7:8f:4c:49:5a:6d:56:d2:a3:3b:0b:a5:7b:4d:
         a3:fd:96:27:2c:14:0d:72:51:45:16:ed:a9:43:0a:17:80:b3:
         66:8b:af:0d:71:52:f7:4c:3a:4a:f7:1c:f9:ba:69:25:6e:49:
         f0:1e:e3:69:c1:34:ff:db:67:86:d9:2d:15:0f:ad:a8:7e:39:
         7e:af:e8:0b:13:a7:cc:d6:b8:8b:96:ba:bc:b6:6e:cc:13:9e:
         5b:c7:59:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 13:22:29 2026 by rpki-client