Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
File:                     o9--Ea-KeOViz7RXkAzKuQkMK1k.mft (raw, json)
Hash identifier:          D+blEPojMnGEQJwFN0aI7n0zFYhrMXJ62yt3jw0xsLA=
Subject key identifier:   B6:05:3D:15:D3:86:0C:D1:AE:39:A4:BC:DF:50:EC:7D:CB:B4:90:43
Authority key identifier: A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59
Certificate issuer:       /CN=A9145604/serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59
Certificate serial:       0A23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
Manifest number:          0A1B
Signing time:             Mon 26 Oct 2026 19:43:48 +0000
Manifest this update:     Mon 26 Oct 2026 19:43:47 +0000
Manifest next update:     Mon 02 Nov 2026 19:43:47 +0000
Files and hashes:         1: o9--Ea-KeOViz7RXkAzKuQkMK1k.crl (hash: D3IqRt3JE78rrdGqCDsylHzRzI+eUoMyg21gcpQJYjI=)
                          2: C0A21C70A4A711EA835CCA70C4F9AE02.roa (hash: w0Mg38kqxU56tToSKDuvE9izP1apCE3Ik6yrPGcnebw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl
                          rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 19:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2595 (0xa23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145604, serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59
        Validity
            Not Before: Oct 26 19:43:47 2026 GMT
            Not After : Nov  2 19:43:47 2026 GMT
        Subject: CN=6adfad74-89cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:55:aa:b8:53:d0:e2:4a:94:c8:8b:5b:af:36:
                    2c:a1:86:8a:90:05:ef:e9:7f:cd:bf:38:f5:2e:41:
                    40:42:0e:98:ea:fb:46:c0:35:69:d7:d3:b6:07:b7:
                    9f:37:dc:a6:a8:65:f4:3d:bf:8e:5d:0e:3e:ce:6d:
                    6f:cf:c0:24:09:e0:c9:78:b4:ec:fb:94:a3:c6:c3:
                    2b:61:a5:5c:28:a5:bc:36:dd:6a:b9:57:f6:89:1c:
                    b2:c7:86:b3:14:0c:13:01:94:3b:c1:74:57:3a:67:
                    3c:8b:32:8b:35:ec:fb:bc:16:99:27:ca:16:b7:dd:
                    db:27:b0:3e:73:e6:3c:16:1e:2e:90:00:f9:04:ba:
                    1a:4d:0f:6a:a7:11:5a:81:b7:d6:db:8a:ae:e0:a4:
                    2d:2a:b1:85:4c:16:16:50:af:01:aa:72:75:5f:e9:
                    17:c5:15:fb:9e:53:d8:03:b7:85:07:23:0e:59:50:
                    7a:c3:f6:13:4d:8a:d0:ec:af:16:69:41:b7:fc:22:
                    83:97:7e:e4:15:73:3c:ad:19:84:37:93:31:2e:2e:
                    02:e6:6a:7f:8a:15:9e:c0:7c:0f:13:5c:b5:8e:74:
                    45:2f:c5:7e:f6:1d:1a:41:ff:85:0b:0a:9e:8c:8d:
                    fe:34:81:f7:f2:71:07:43:56:c0:2c:56:2d:3a:26:
                    3e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:05:3D:15:D3:86:0C:D1:AE:39:A4:BC:DF:50:EC:7D:CB:B4:90:43
            X509v3 Authority Key Identifier:
                keyid:A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:6c:b2:83:78:8c:23:d6:2c:af:7a:49:95:91:cb:6e:36:00:
         e2:a8:01:6c:8f:7f:a2:64:13:d9:35:0e:56:8a:6a:c5:d5:73:
         91:e8:82:7f:fb:06:9b:bb:ba:91:ea:e9:56:fb:0a:38:94:00:
         7d:97:c0:93:1d:31:5d:72:e1:ef:45:02:3c:24:6f:94:8a:80:
         92:6c:94:6a:e7:30:14:4e:9a:ff:4b:d5:58:9f:f1:cf:68:f4:
         c6:9b:03:bc:9d:04:be:de:3a:ec:54:81:b4:af:44:cd:a7:f3:
         d7:e3:fc:12:12:f2:f4:ab:6d:20:84:98:a4:28:44:f0:6a:42:
         e6:aa:89:1a:af:a8:07:e3:9e:f8:6a:0c:f7:d5:2a:85:10:79:
         ff:60:f7:07:f4:08:91:8c:da:d2:dd:3f:e8:d5:34:f1:e1:a4:
         84:7d:aa:97:10:e9:29:ae:ba:50:25:60:00:08:7e:68:72:9c:
         59:68:5a:13:68:3e:50:1b:d1:fb:9a:95:e9:35:97:2f:35:e0:
         91:98:62:50:40:37:44:36:b5:ff:e7:9b:f0:46:e8:cb:45:df:
         84:9c:60:98:06:fe:85:6a:f5:c1:5f:bb:bf:b9:b1:b4:70:c4:
         99:58:9d:1c:a6:e2:ce:5f:9f:07:61:fa:17:d0:f8:d0:c6:e5:
         b7:14:16:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 07:21:26 2026 by rpki-client