Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
File:                     9mSsAmv09HwIdXzefyHsPPKk5k4.mft (raw, json)
Hash identifier:          V/O1IPnXSaS6jj2OGuCTqjormDBK61z91/IVGt/nRQg=
Subject key identifier:   1B:B1:7B:BC:21:5E:19:F2:B4:32:0A:F7:E0:42:08:A9:CF:94:62:DD
Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
Certificate issuer:       /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Certificate serial:       1A37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
Manifest number:          19EF
Signing time:             Sun 04 Oct 2026 16:24:42 +0000
Manifest this update:     Sun 04 Oct 2026 16:24:42 +0000
Manifest next update:     Sun 11 Oct 2026 16:24:42 +0000
Files and hashes:         1: 9mSsAmv09HwIdXzefyHsPPKk5k4.crl (hash: r/O5+FZtb/0k11mJolYxmDy/Bns+xOu6tvCjVMn2gok=)
                          2: 0333AD1461FE11ECBD833921C4F9AE02.roa (hash: /shRGgwZ3mbHAgKktUyEwuWZHd2hVreg4D00pNYllXE=)
                          3: 576081D48B3711F18ED45BC74111F970.roa (hash: 6+87EP/7A4r0I8YjA4nzc2PDir7tQmWtumF+t0fLhuI=)
                          4: 118F422C816F11EF9ACB654AC4F9AE02.roa (hash: CxnjJlPVJYgkZHfx3lMqWC7qbUOJonF6D4YbcSkU640=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
                          rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 16:24:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6711 (0x1a37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153AE1, serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
        Validity
            Not Before: Oct  4 16:24:42 2026 GMT
            Not After : Oct 11 16:24:42 2026 GMT
        Subject: CN=6ac27dca-4c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6f:81:5c:d4:13:e3:28:b3:38:97:50:53:04:
                    c4:52:e6:93:bb:81:20:d4:52:25:0a:03:7d:c6:c4:
                    d2:0b:29:ef:2d:f4:07:65:00:5c:28:98:2f:92:f1:
                    da:83:60:97:d9:fc:ad:26:3c:24:68:10:7c:04:82:
                    fb:87:80:ce:2f:c2:2c:39:aa:c8:75:8d:d0:b7:40:
                    61:66:b3:e8:5f:c6:8b:79:f9:c4:c7:1e:e3:68:5f:
                    ea:6c:0f:07:b0:02:d4:1f:5f:39:d3:42:bb:0d:6c:
                    a1:92:4f:31:60:f2:58:90:52:4e:47:d6:21:ad:e2:
                    64:26:ad:34:51:c4:bb:aa:2d:83:f6:17:10:e4:b4:
                    dc:66:ce:7e:4d:4b:4c:da:2d:c9:12:6c:e5:97:43:
                    39:37:eb:2f:34:32:73:e1:0f:83:29:ec:01:15:07:
                    26:09:26:fe:58:14:b8:da:cd:af:51:e2:fc:13:a9:
                    1e:72:79:2a:4b:73:f4:e7:40:fe:70:1d:1e:e8:81:
                    95:15:ef:7e:e8:04:1a:8f:e6:25:2c:ff:70:8a:51:
                    3d:bb:64:c3:83:19:48:57:5e:da:24:46:7d:84:bf:
                    85:1c:46:cc:0e:60:8f:1a:ff:43:16:2f:49:7c:05:
                    33:d0:d9:49:62:c5:e6:d4:14:ce:9c:62:22:d2:34:
                    95:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B1:7B:BC:21:5E:19:F2:B4:32:0A:F7:E0:42:08:A9:CF:94:62:DD
            X509v3 Authority Key Identifier:
                keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:eb:30:e0:59:2b:7b:be:11:7e:1d:29:d3:62:11:7e:fb:27:
         b8:48:7f:ab:19:1d:67:ef:46:6f:74:24:e1:c4:6e:bb:3d:ee:
         c7:af:59:a6:65:5c:2f:2a:63:4e:e3:0d:6d:93:53:47:94:53:
         7e:f0:39:6f:f4:af:a3:88:f9:6f:c7:cd:51:c1:10:9b:93:94:
         4d:b7:a9:a8:b1:6a:2d:5c:54:c5:aa:f9:d2:fb:a6:1a:39:e4:
         e5:63:24:09:b3:25:ac:82:a3:7d:0e:86:cf:62:ba:ec:54:db:
         c3:ff:c3:f2:f5:f4:b8:4d:f3:fc:ef:37:78:62:8b:1f:e9:c0:
         1d:35:0f:e8:87:90:26:c9:56:8d:8f:e2:99:69:73:55:1d:f6:
         26:2b:b8:ff:fb:19:37:ba:4a:80:24:8e:44:d8:d5:bb:7a:d4:
         b9:4d:b1:c2:10:18:49:5f:8d:65:ea:e3:e2:a7:a9:fe:ad:f2:
         71:b7:2e:d7:af:a9:5a:a1:06:c5:30:ba:94:9e:29:65:a2:ad:
         66:f9:c4:0f:8f:ce:d8:e9:1f:13:82:7b:7b:c2:6e:10:f1:f0:
         c7:fa:48:a5:1c:17:10:e0:0b:98:c7:2a:1c:77:2a:9e:09:aa:
         66:51:db:1d:bf:0a:e7:a4:d8:bd:9a:28:48:c8:8d:c2:0d:96:
         4e:2e:a3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:44:24 2026 by rpki-client