Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft
File:                     CKORxrOJyBDpW8YTnOyynV05WMQ.mft (raw, json)
Hash identifier:          ZRlq9VJo9ufE8ngArY36ui50UMTbFv7Ij6Fx8zBUQ6Q=
Subject key identifier:   F4:BB:D6:66:FF:B2:A8:7C:75:DC:D3:D7:5D:B2:D9:BB:35:E9:87:19
Authority key identifier: 08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4
Certificate issuer:       /CN=A9145E09/serialNumber=08A391C6B389C810E95BC6139CECB29D5D3958C4
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft
Manifest number:          0111
Signing time:             Thu 03 Sep 2026 06:11:26 +0000
Manifest this update:     Thu 03 Sep 2026 06:11:25 +0000
Manifest next update:     Thu 10 Sep 2026 06:11:25 +0000
Files and hashes:         1: CKORxrOJyBDpW8YTnOyynV05WMQ.crl (hash: O2qK6Jv/DPiMpk+OaLQkIMmeJAbEw39JJkkjJw8Nodg=)
                          2: EE04266A08C811F09F9B7B57C4F9AE02.roa (hash: cNFpk4xvE3+xhetFVsHGb9R/5Z63kJbCCHb2RP80z/0=)
                          3: 06E20316A56011F197ACE01C5211F970.roa (hash: 2+Gng8N75dAVqgFX3kAfFklya5J8uLmGt2uI9NZmzZ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.crl
                          rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 06:11:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145E09, serialNumber=08A391C6B389C810E95BC6139CECB29D5D3958C4
        Validity
            Not Before: Sep  3 06:11:25 2026 GMT
            Not After : Sep 10 06:11:25 2026 GMT
        Subject: CN=6a990f8e-9d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4c:35:3a:90:e6:eb:51:63:f0:05:6b:14:10:
                    e7:31:55:93:07:c3:4f:6b:c5:e5:50:f0:75:9b:d9:
                    d9:7c:86:4f:c0:97:0f:6f:0b:22:ef:cf:69:f5:42:
                    f8:df:d4:94:14:66:33:c8:4f:19:86:fb:91:31:3c:
                    bc:d8:a8:22:0c:f1:9d:c5:58:97:ca:7a:1e:e4:48:
                    9e:17:45:56:6d:65:c3:b1:6c:2d:3b:71:38:61:7d:
                    20:a8:cf:22:0f:e4:a3:fe:1a:d3:1c:24:72:f8:f1:
                    2a:d0:0a:38:62:0b:00:06:ed:97:5c:db:5d:ec:9a:
                    91:19:0d:80:4b:60:48:57:e3:de:fc:27:10:80:c1:
                    c6:f1:74:91:74:4e:9b:b8:b6:a8:97:51:27:c6:7c:
                    c6:0d:6d:30:43:ed:61:92:f3:57:06:ad:1b:69:07:
                    da:9e:ae:a1:84:c0:7f:b6:61:9d:b6:c3:91:d0:dd:
                    43:f7:49:f9:84:c7:e0:80:b1:0d:1e:f1:8c:0d:a0:
                    05:a5:f5:30:fb:da:32:7f:e0:91:9b:09:f6:20:38:
                    5d:3c:54:16:b8:ce:e3:22:e4:0c:95:ec:ff:85:62:
                    84:de:98:8e:77:a9:1b:24:6a:58:9d:d3:0b:1f:3f:
                    0e:b4:72:5c:a2:95:c8:f3:59:95:a5:08:36:9c:34:
                    23:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BB:D6:66:FF:B2:A8:7C:75:DC:D3:D7:5D:B2:D9:BB:35:E9:87:19
            X509v3 Authority Key Identifier:
                keyid:08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:2c:0a:38:c8:73:81:8e:0e:02:b9:95:05:ca:63:df:44:77:
         bc:a2:03:9c:c1:3e:07:a4:99:2d:de:c6:36:55:19:3e:94:2d:
         52:0c:66:cc:39:84:95:ca:32:e1:ab:2a:ff:97:dc:71:3f:07:
         74:55:92:5b:64:dd:43:87:03:05:67:25:68:6e:8a:c0:27:17:
         df:cc:4c:81:19:a3:43:02:d3:17:de:d3:2a:62:b1:09:40:7e:
         c8:94:a5:96:34:5d:ff:1d:24:5e:9a:f5:9e:01:ae:9d:eb:32:
         b8:e9:bf:73:23:52:d6:1c:1c:ec:c1:d9:8b:df:60:4e:0a:48:
         39:b8:7d:2f:70:ed:e6:10:02:1c:2d:06:09:09:16:9e:9e:d4:
         18:70:2f:d0:cc:9f:67:73:2c:23:7a:d6:58:91:a2:63:f5:f1:
         87:45:a7:62:85:91:bb:f7:2c:c1:1a:94:c7:e9:32:4e:8a:f4:
         f8:5a:1b:54:bf:9a:f1:ec:72:0a:0f:f5:4f:ee:54:19:ab:ea:
         2a:36:27:40:84:2b:ca:be:34:18:73:9a:a1:9f:1a:a4:82:ea:
         05:2b:99:12:59:6a:03:ce:e9:b9:92:af:08:1b:2a:1a:64:2a:
         61:6d:78:63:66:e8:38:bf:54:4b:f3:71:14:d5:cc:24:0a:0a:
         17:05:79:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:10:43 2026 by rpki-client