Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft
File:                     DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft (raw, json)
Hash identifier:          +FOdgoBSYxsLauCsRGatOV4lqxrsjpHx7N4npeiW6xM=
Subject key identifier:   0C:B6:4A:34:80:4B:4D:E9:8C:B8:79:A4:1A:77:35:24:E1:DD:4A:1C
Authority key identifier: 0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80
Certificate issuer:       /CN=A9193B7A/serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680
Certificate serial:       DA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft
Manifest number:          D1
Signing time:             Thu 17 Sep 2026 07:05:01 +0000
Manifest this update:     Thu 17 Sep 2026 07:05:00 +0000
Manifest next update:     Thu 24 Sep 2026 07:05:00 +0000
Files and hashes:         1: DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl (hash: DaZdZ0k5x5EZ5XfV8jq9fF1utBAxFaQ9+HHz5FV0JgY=)
                          2: 62B3880C7E5D11F0ACC14A80C4F9AE02.roa (hash: loa/gmNkqH5emPdqG1mfwNrpi51lh8r/Sh1SgqZBjbo=)
                          3: EBF5F8EC9A1411F1A4DC90745311F970.roa (hash: d4GsGfvnFtBw9POHYCcbpg5xEwjJpsB/1nvw60Ok9Nw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl
                          rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 07:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193B7A, serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680
        Validity
            Not Before: Sep 17 07:05:00 2026 GMT
            Not After : Sep 24 07:05:00 2026 GMT
        Subject: CN=6aab911c-5487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cb:61:60:dd:3e:7e:16:d2:24:b2:78:91:0e:
                    cd:22:db:3e:58:48:c3:a7:79:20:f0:47:df:97:aa:
                    7e:6a:4f:12:80:e5:59:29:8d:e9:0b:3f:82:99:4a:
                    f6:cb:57:98:80:31:87:50:e4:20:8a:75:6e:6a:66:
                    43:d3:95:8b:02:83:29:16:3a:a8:59:2e:6a:73:e6:
                    46:a4:cb:5f:0c:a4:3d:d6:1d:5e:74:66:f0:de:08:
                    64:cd:fe:6e:df:86:92:2a:f5:f6:94:17:c8:22:02:
                    c3:20:4d:89:0b:5e:fd:03:42:92:d9:c3:a8:90:8b:
                    f7:46:53:cd:1b:3f:91:73:3e:38:64:85:33:4b:02:
                    6c:93:72:2c:48:7c:e3:7e:5d:fa:c2:89:de:e3:cd:
                    87:1e:94:fa:26:28:b7:ed:ed:82:31:06:7d:6c:78:
                    d9:36:67:31:44:6a:46:e9:b9:bb:79:aa:a2:2e:ee:
                    12:8c:36:ff:23:e8:22:af:e7:5c:d0:9d:58:35:95:
                    38:61:b5:7c:8a:30:26:99:be:4c:7b:f0:0e:52:32:
                    a7:38:fd:9c:9e:18:11:03:62:41:84:ae:b8:73:15:
                    bd:31:e0:e4:a0:0b:89:33:84:f2:46:ad:58:58:e7:
                    83:f4:70:f0:0e:68:c1:fa:55:e5:15:43:65:98:d0:
                    0b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B6:4A:34:80:4B:4D:E9:8C:B8:79:A4:1A:77:35:24:E1:DD:4A:1C
            X509v3 Authority Key Identifier:
                keyid:0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e6:b7:3a:2e:b1:d3:1d:ce:42:a7:c6:4f:93:17:bf:52:5c:
         d1:fb:52:32:3e:cf:7c:25:ab:8e:33:da:4c:dd:1e:38:ba:e3:
         90:f6:d8:30:96:de:44:85:72:7e:c0:cd:2c:6c:9b:74:32:a3:
         bb:ab:2a:a4:b1:f2:eb:50:e3:48:db:00:46:91:80:82:f6:4c:
         77:4b:93:d5:4c:10:a1:a2:d2:79:57:bb:e1:74:2b:08:ca:83:
         71:91:62:25:b8:ce:23:6b:0f:2e:35:41:6a:d0:a1:45:04:5b:
         e5:f2:69:05:9e:34:84:42:f2:80:d5:05:5d:4a:f4:ac:96:cd:
         cd:0e:b7:42:71:a2:1f:d7:2d:18:04:b0:3b:3e:51:1a:be:b2:
         8b:b3:fd:71:26:ce:91:c5:4e:d0:18:09:a6:e9:65:3e:77:bc:
         e0:bb:60:b0:c4:b4:e1:26:67:84:87:c5:64:16:53:6b:a9:f5:
         d2:44:1e:8e:0b:82:8e:9d:79:be:37:a1:a6:50:5d:24:76:ef:
         56:bc:a6:33:11:6b:a3:0c:a2:04:d9:e8:1e:b4:cd:1f:45:5e:
         35:eb:f7:3e:b0:da:e9:83:a9:ad:06:f6:f9:f8:c1:78:56:f5:
         0c:5a:8d:1f:4f:e9:ab:ad:79:05:6d:3c:65:5b:ca:c3:48:c5:
         dd:0d:64:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 04:47:11 2026 by rpki-client