Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft
File:                     9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft (raw, json)
Hash identifier:          flLpPwNs+8EW0dYHeYUPC0KihJ5n4i5vnMwP/KrUKAY=
Subject key identifier:   08:09:90:42:7E:30:1E:8C:BB:35:0C:94:C9:FE:0A:A1:C7:E2:4F:C7
Authority key identifier: F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0
Certificate issuer:       /CN=A9165226/serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0
Certificate serial:       0EBD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft
Manifest number:          0EB4
Signing time:             Tue 18 Aug 2026 17:55:18 +0000
Manifest this update:     Tue 18 Aug 2026 17:55:17 +0000
Manifest next update:     Tue 25 Aug 2026 17:55:17 +0000
Files and hashes:         1: 9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl (hash: Rmi0Z2SuhGRdORFkqUYonA0aCyWPuTFvmajbMr8ujrQ=)
                          2: 37EF9AB2B73E11E9BCAF574AC4F9AE02.roa (hash: LM+95GqjtsyvqLmUf+wU2Z1LJHVrYnuCnNyUrFH0YlA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl
                          rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:55:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3773 (0xebd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165226, serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0
        Validity
            Not Before: Aug 18 17:55:17 2026 GMT
            Not After : Aug 25 17:55:17 2026 GMT
        Subject: CN=6a849c85-f291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e7:70:87:5f:ac:f6:2b:44:15:1c:21:81:e1:
                    f6:e2:df:2e:30:41:ff:00:9c:4d:6d:0e:ad:c9:f1:
                    ce:eb:6e:12:0c:bd:13:9d:1a:8a:02:33:bf:a0:eb:
                    9c:3e:17:38:8c:e7:ec:07:33:79:0a:f8:d2:ec:68:
                    e1:8e:6e:fd:08:64:02:2f:8c:7b:d1:c4:a4:11:5d:
                    ff:4d:c2:26:50:fc:12:0f:e1:4c:71:cd:99:83:20:
                    ca:7d:9d:64:e1:f9:44:d2:0b:0d:1b:6e:dc:31:fd:
                    99:eb:99:d5:6c:04:f1:cd:bb:77:2d:1b:7b:ec:aa:
                    93:64:e3:5f:40:d7:1f:4c:bf:35:b0:af:f3:54:be:
                    5d:a6:bc:f1:47:29:ee:39:35:32:19:af:c3:aa:ba:
                    a7:a8:85:93:a0:82:aa:d7:43:01:53:f9:f0:14:ce:
                    9d:41:0b:c1:de:a8:68:ca:55:4e:fb:d6:cb:6d:ae:
                    5e:36:5b:9a:4c:63:4a:01:8c:5c:b3:55:ac:b6:f2:
                    87:6f:82:bf:bd:84:82:53:55:d7:3d:ca:bd:e6:06:
                    08:f4:16:93:9f:cc:66:95:11:ce:f9:66:14:07:ec:
                    eb:05:9f:79:bc:96:0d:51:ab:cf:1b:e3:6a:3e:18:
                    f1:50:25:21:53:f7:91:79:15:be:ea:55:fb:59:b6:
                    e1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:09:90:42:7E:30:1E:8C:BB:35:0C:94:C9:FE:0A:A1:C7:E2:4F:C7
            X509v3 Authority Key Identifier:
                keyid:F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:3f:e5:7e:87:c4:e0:53:5c:f1:99:a9:1b:7c:f2:f7:34:c2:
         79:7c:4c:6c:df:25:be:52:40:a2:32:4d:4c:30:77:42:f5:6b:
         bc:6e:52:ff:2f:54:7a:94:bd:ee:6e:93:2c:dd:8d:bd:8f:a5:
         2a:8e:87:5c:b7:55:2b:24:f3:04:94:b3:17:a1:2d:fd:c4:a3:
         9c:97:22:b7:7e:22:b6:28:98:e6:19:a7:37:e2:06:31:ad:0e:
         cb:7b:03:52:54:8c:c6:c6:59:ae:19:34:55:ee:dc:3c:13:f7:
         41:1e:03:f3:1c:0f:af:a7:7b:31:65:91:fe:67:96:ba:da:01:
         f4:97:1b:2e:fe:7a:f4:f6:67:47:59:bc:cb:87:5c:4a:3e:64:
         2d:e3:94:e7:64:e4:18:f7:45:84:6d:ce:69:3b:c9:11:47:f6:
         df:94:6f:e2:4a:af:76:99:de:5a:79:97:89:0e:af:39:dd:e2:
         9f:e5:5a:80:ee:94:28:fb:96:34:fe:2f:fb:53:d3:bd:4a:11:
         6e:ac:b1:85:65:ea:54:d9:74:2b:3f:82:9c:8f:0c:a7:17:68:
         e4:be:dc:eb:8e:5a:62:f6:40:0c:70:9d:fb:35:6d:cb:53:af:
         a0:7b:98:d5:86:5d:d4:22:79:e8:66:ba:b6:b4:e6:66:0a:e7:
         c0:a4:57:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:48:17 2026 by rpki-client