Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
File:                     9y59Xhu0VCq3_3dzZYg8FgEDTek.mft (raw, json)
Hash identifier:          QPssHEveYNRxYuE4sSlKuLB/GoVxQBL2qVVMzQq0GS8=
Subject key identifier:   EA:2F:89:96:C3:E3:4C:D2:07:45:83:66:9F:A4:BE:2F:0F:41:F8:B3
Authority key identifier: F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9
Certificate issuer:       /CN=A919631C/serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
Certificate serial:       0FBF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
Manifest number:          0FAA
Signing time:             Mon 28 Sep 2026 17:33:59 +0000
Manifest this update:     Mon 28 Sep 2026 17:33:59 +0000
Manifest next update:     Mon 05 Oct 2026 17:33:59 +0000
Files and hashes:         1: 9y59Xhu0VCq3_3dzZYg8FgEDTek.crl (hash: FvmOCCrg/BdS9DIRzRzpnqepBr7ceptH5YS2I/U3avw=)
                          2: DCB2531AC75911EF979D593BC4F9AE02.roa (hash: xeSp+ee2o5QPG9Bonf7PC8aiLXnBIzPrcdEWH1qZB/w=)
                          3: oTEH6z3ABCN8lgSSDl3hb-fhCjM.asa (hash: H8FmF0zW5E6qjk0hm8Xs6cFrLkFF2Pm/oMG+Rv+W97s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl
                          rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 17:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4031 (0xfbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919631C, serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
        Validity
            Not Before: Sep 28 17:33:59 2026 GMT
            Not After : Oct  5 17:33:59 2026 GMT
        Subject: CN=6abaa507-028f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3c:34:bf:8e:50:87:a1:6c:58:5a:28:1a:a3:
                    81:d1:ff:f0:2a:0d:93:b8:20:56:cd:54:6b:14:67:
                    6b:8a:27:36:20:7b:4b:8e:ce:f3:6b:4f:bf:fe:b1:
                    71:44:d2:db:42:e8:d9:88:2b:da:fe:7e:ba:76:4a:
                    61:bf:c9:72:d3:3c:0e:44:c6:cd:87:58:90:22:1a:
                    dd:b4:88:14:c8:d8:a5:71:54:eb:ef:b8:fb:94:e3:
                    7e:8b:5d:23:36:7c:8a:a8:2a:a3:d6:ce:9b:ba:ca:
                    15:1d:02:24:9d:25:84:cb:c7:bb:5e:f2:6c:c8:3d:
                    4c:df:27:f6:16:bd:c9:73:98:c7:a3:85:10:54:58:
                    b2:e3:c9:87:94:21:9c:08:fb:ef:6c:41:15:fa:60:
                    35:78:49:1a:45:90:4f:7c:55:d1:5a:c6:e9:1f:88:
                    ef:9d:04:97:e2:52:c2:fd:c1:e8:91:2a:fd:db:19:
                    61:20:b2:d1:7e:17:31:7b:d3:9a:ec:3b:d6:44:3a:
                    6e:50:f3:57:ce:86:a3:c0:f8:a4:4e:b8:80:36:17:
                    ff:45:2a:24:e9:8d:63:e2:5d:1f:4e:a8:ba:6b:d6:
                    e7:3f:dc:69:f8:a3:21:3a:43:1c:e5:d5:61:de:45:
                    fb:36:cf:0f:5e:31:ad:fc:31:70:02:79:68:72:47:
                    f6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2F:89:96:C3:E3:4C:D2:07:45:83:66:9F:A4:BE:2F:0F:41:F8:B3
            X509v3 Authority Key Identifier:
                keyid:F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:0b:6b:a0:03:0e:83:35:c2:31:e1:b0:64:cf:4d:32:63:83:
         27:b9:56:12:c6:af:e9:ad:7a:fd:30:cb:fd:e9:f2:4a:ec:74:
         8e:64:95:d1:f1:69:cd:9c:0b:16:81:57:cc:dc:42:93:49:9b:
         50:52:4c:cd:d3:be:63:2a:93:61:3a:f9:05:81:3b:e0:8b:42:
         65:ee:f0:5a:64:b5:6f:0b:9b:35:8d:3a:a9:1f:fe:dd:3d:cd:
         0c:8d:bd:50:95:58:92:b2:d4:3a:1c:df:8c:04:c8:e4:50:83:
         f0:47:62:ff:3b:a7:0e:7e:e0:3b:d8:e6:aa:db:49:8f:8e:9d:
         eb:fd:6c:5c:55:aa:b7:81:47:9f:60:f3:3b:7f:0d:0b:1f:a6:
         31:ac:58:c5:2d:7f:e5:6c:e2:2a:7d:fb:d5:07:d1:cc:ba:06:
         34:56:a1:49:69:b4:f8:33:05:a7:1a:c7:ce:4b:8d:55:2b:d0:
         c1:f3:8b:e9:cc:fe:7d:ee:00:00:cf:b6:5c:22:12:b4:b4:44:
         64:b6:21:dc:d9:91:3a:30:01:60:61:f2:eb:2e:8a:f4:e3:c9:
         54:5d:ab:2c:2a:3a:6d:1a:c4:0d:eb:ed:91:b6:08:0b:e3:8e:
         9d:4d:9d:f0:1d:de:35:d9:f3:53:dd:64:0a:0b:7e:0d:2b:08:
         ad:1d:8b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:31:02 2026 by rpki-client