Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
File:                     9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft (raw, json)
Hash identifier:          7eoOg15lTlSxDvVkmZQN7rA5zJfqfebx5murLp12KMY=
Subject key identifier:   5F:69:65:D9:FB:D6:D3:49:DF:15:43:D0:9C:90:03:AD:49:45:F1:90
Authority key identifier: F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7
Certificate issuer:       /CN=A919EAAD/serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7
Certificate serial:       0D3E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
Manifest number:          0D2C
Signing time:             Fri 04 Sep 2026 18:12:50 +0000
Manifest this update:     Fri 04 Sep 2026 18:12:50 +0000
Manifest next update:     Fri 11 Sep 2026 18:12:50 +0000
Files and hashes:         1: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl (hash: hzcVDKuTI7EH9eW6HRPy5GUIkghWcwh7nMpJ9GUWmmg=)
                          2: 97DC58040B5B11EAB69DC64FC4F9AE02.roa (hash: B+4ghGog0RYB7I4E9J/Za4OLQ8QEJpi5G6sC5f+vbXs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl
                          rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3390 (0xd3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EAAD, serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7
        Validity
            Not Before: Sep  4 18:12:50 2026 GMT
            Not After : Sep 11 18:12:50 2026 GMT
        Subject: CN=6a9b0a22-41b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:3b:42:c2:0a:e4:49:f6:38:67:8d:78:89:
                    6d:84:0a:f9:df:2d:06:20:fc:f8:b0:22:7b:c0:15:
                    8b:b0:50:c9:a1:b8:47:fd:12:46:eb:5b:be:1c:28:
                    09:c0:99:a2:7c:62:e0:a9:cc:09:07:b7:99:68:24:
                    fb:49:b1:52:1e:df:67:4b:10:ac:d5:1d:39:45:c1:
                    89:66:67:88:dd:e0:9e:73:76:2f:cd:95:19:00:c3:
                    7a:1f:e8:da:1e:24:9d:1f:fe:52:a0:4c:a7:4d:ba:
                    f9:5f:22:fd:01:41:9b:1b:c4:77:35:c5:f8:72:af:
                    b4:d8:c8:48:b1:d5:c4:a8:fe:b6:58:02:b0:7f:c3:
                    08:ab:53:4a:5c:34:7d:9c:91:f1:45:4d:4d:a3:c4:
                    27:98:d7:ad:2b:3c:78:ac:4b:b1:67:19:9e:d6:36:
                    85:2d:df:40:4d:2a:ed:6a:f4:04:3d:13:19:0d:1a:
                    6d:9b:ac:ed:59:35:35:d8:ae:6f:1e:57:c2:a9:b0:
                    85:da:50:0b:49:c3:2f:dd:56:e7:20:9f:b4:c5:20:
                    dc:cf:9c:d3:f9:9a:1f:04:f6:62:1f:2a:bd:7b:51:
                    6c:af:41:ee:4a:39:aa:20:10:cd:c4:db:40:4a:5b:
                    4b:7f:b1:44:47:b5:56:30:f1:6c:55:ba:13:c5:e8:
                    4f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:69:65:D9:FB:D6:D3:49:DF:15:43:D0:9C:90:03:AD:49:45:F1:90
            X509v3 Authority Key Identifier:
                keyid:F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d8:87:68:b7:2d:09:df:b6:5e:b3:1a:73:57:9d:25:db:13:
         2d:45:68:d8:af:a5:39:d1:9e:ce:8b:43:14:0b:3b:da:24:9f:
         04:0a:62:74:72:74:4f:88:1e:a3:af:f9:b7:dc:54:e0:c3:3f:
         38:b7:27:4a:47:1d:47:f6:a0:68:d8:76:14:ce:14:a7:bb:7b:
         04:46:94:7f:12:c8:8b:0a:9e:fe:d7:98:5d:74:b3:93:a8:ad:
         a1:6a:cd:01:9d:91:23:22:bf:9a:81:8f:f2:11:da:55:5f:d4:
         ae:9e:1e:77:c8:47:60:be:de:7a:52:53:7e:c7:d9:e7:86:b0:
         34:31:39:ea:07:db:d7:a0:08:28:f0:5d:c7:ff:26:33:2a:33:
         d4:f7:97:28:3d:d3:d5:bb:33:e8:ae:b0:0c:db:61:f5:e5:c5:
         50:94:c3:65:4f:df:c5:3d:dc:af:ca:d4:36:20:1f:e4:47:50:
         df:b9:86:60:1f:de:48:57:d2:bc:3d:74:3c:22:56:e8:fc:98:
         cf:a0:80:5e:a4:7f:e6:2e:92:88:84:5e:59:8d:ef:3f:fb:d1:
         63:97:9e:48:08:88:9f:3c:3f:89:02:32:f6:9f:5d:bf:39:04:
         c6:8f:98:fb:59:06:72:a6:a7:b2:a4:26:a6:b1:07:ff:6d:4e:
         3a:82:06:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:28:28 2026 by rpki-client