Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
File:                     9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft (raw, json)
Hash identifier:          uYwXtEFv0ar3KZv0AFtgvleaHTaEnXJmX2PPb9+53Gs=
Subject key identifier:   92:76:50:7C:29:A9:DB:69:2F:16:F1:EB:80:D6:8D:19:A1:27:B7:78
Authority key identifier: F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74
Certificate issuer:       /CN=A9153049/serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074
Certificate serial:       0D3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
Manifest number:          0D31
Signing time:             Tue 06 Oct 2026 18:21:58 +0000
Manifest this update:     Tue 06 Oct 2026 18:21:57 +0000
Manifest next update:     Tue 13 Oct 2026 18:21:57 +0000
Files and hashes:         1: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl (hash: UHUvUoVKfeOJySQCWYK9ie5lko+QARA8FmrHdkP9bFs=)
                          2: 4D6224A80C4A11EAABCEF428C4F9AE02.roa (hash: kLfSpY3kUgZtSnGVsreS4YqZQYWqK6EsvelahK7CL7I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl
                          rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 18:21:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3390 (0xd3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153049, serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074
        Validity
            Not Before: Oct  6 18:21:57 2026 GMT
            Not After : Oct 13 18:21:57 2026 GMT
        Subject: CN=6ac53c46-ae48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:f8:bd:22:1a:d3:d1:ab:f1:be:d9:7c:4b:
                    db:ab:53:12:6d:8e:5c:52:95:73:af:cd:4d:c7:18:
                    51:fe:aa:d0:3f:20:f3:e8:ae:22:f8:1a:0e:8b:44:
                    8e:3d:da:da:68:7a:49:75:ae:a6:9d:df:c9:d1:1d:
                    e7:c3:73:21:57:d0:1e:68:88:5f:13:ec:ae:04:97:
                    d2:19:f6:41:8d:52:9e:36:a9:bc:b3:4b:25:5c:8d:
                    21:5e:da:aa:3b:92:6d:78:a3:60:61:70:4d:e9:13:
                    c4:89:82:8b:d5:86:dd:d9:26:86:e4:65:a5:86:a3:
                    c5:c7:35:4b:31:85:d9:a7:50:30:0f:51:ae:a3:1d:
                    e5:2d:08:d5:a7:eb:56:1e:e5:2b:c5:83:9d:46:b0:
                    c0:7c:60:e1:c1:82:c5:c4:f6:28:c6:c6:58:8d:6c:
                    5c:b9:12:d2:b6:04:8e:63:bb:19:4a:2d:d0:99:b8:
                    ee:57:46:e5:60:8f:40:3f:7d:55:5d:9d:22:6d:2a:
                    5a:2c:83:99:93:e1:33:7f:9c:e9:b0:1d:1d:48:b5:
                    a0:14:c1:56:09:e4:94:18:c4:6b:72:58:84:ef:ba:
                    b7:11:7e:43:ee:ad:0e:c6:97:ae:6c:bb:3b:92:54:
                    8f:10:98:c5:af:b8:9d:6b:f6:09:71:d2:09:4a:3d:
                    e2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:76:50:7C:29:A9:DB:69:2F:16:F1:EB:80:D6:8D:19:A1:27:B7:78
            X509v3 Authority Key Identifier:
                keyid:F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:8d:c6:2e:76:4f:5f:1b:28:f6:fa:90:dd:e1:63:18:bc:ae:
         fd:c5:70:37:f3:f2:5c:b6:98:93:6e:19:1d:b7:d5:c1:fe:64:
         e5:fb:11:27:a3:d6:c2:ec:1b:31:0b:f8:a8:55:2c:f8:7d:82:
         1b:f9:d2:64:da:1d:45:15:ae:fc:54:34:b0:7c:9e:d5:52:2c:
         b3:92:81:6a:d9:29:71:2d:ad:62:3d:b6:f5:52:3a:9b:b1:1c:
         e9:87:70:9e:ab:5d:9b:3a:b9:4e:34:60:ea:e2:2f:f9:d1:f2:
         cd:b4:84:9a:2b:da:15:c4:bd:fa:f9:7d:90:c6:35:b1:b4:ce:
         fe:52:80:98:de:58:17:63:58:98:1c:cf:c2:9a:74:d1:b7:15:
         d7:d7:48:a1:e0:c0:7d:64:b8:ef:c0:b6:e4:9c:27:3f:4b:52:
         d5:57:bc:05:ec:e0:0e:e0:63:a1:45:00:c1:04:fb:1b:e1:5c:
         24:6a:e6:2b:a2:32:13:c9:7e:77:1b:2d:29:16:9d:00:fc:01:
         0a:c4:6f:ff:b8:ba:81:0f:3a:99:ea:f3:e9:b1:d4:8d:90:f5:
         7a:40:a8:e8:be:47:1a:19:8d:3e:52:8b:2c:a7:e5:f4:6d:b3:
         58:af:96:f6:db:6a:2b:7a:cf:e4:7a:62:5b:1f:57:09:21:07:
         66:41:5a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 04:27:49 2026 by rpki-client