Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft
File:                     9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft (raw, json)
Hash identifier:          Z59OcUejRSfyo6TaS8LIVKBMLftYDJaIqUx3Vc92R60=
Subject key identifier:   ED:5F:FB:7F:82:3F:D7:60:8E:DC:1B:A9:6B:DE:43:65:37:C6:24:F9
Authority key identifier: F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB
Certificate issuer:       /CN=A91A1B9F/serialNumber=F53E56407698C1FAA75D25765513B507652C97AB
Certificate serial:       0237
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft
Manifest number:          0231
Signing time:             Tue 13 Oct 2026 03:11:44 +0000
Manifest this update:     Tue 13 Oct 2026 03:11:43 +0000
Manifest next update:     Tue 20 Oct 2026 03:11:43 +0000
Files and hashes:         1: 9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl (hash: GlN1hEiVIoRQ9JCVZBEgZAqIhH6fq+5u29TQ+aSwk44=)
                          2: 37E179CC6F0011EEAFD97016C4F9AE02.roa (hash: M6AAsj/qsyc9cMRmg9WVLpvBjMHjZR+jBZMv5tgZYfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl
                          rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 03:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1B9F, serialNumber=F53E56407698C1FAA75D25765513B507652C97AB
        Validity
            Not Before: Oct 13 03:11:43 2026 GMT
            Not After : Oct 20 03:11:43 2026 GMT
        Subject: CN=6acda170-cf34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d3:9c:f8:b3:10:b7:3e:2f:96:6e:5c:62:97:
                    24:7b:00:58:3f:bf:48:bb:e2:5c:11:6a:5e:6f:e9:
                    db:70:8e:1f:64:b6:bd:6a:3d:10:3f:b0:7e:0e:75:
                    a0:b4:37:3a:c5:6e:5d:bd:1a:3f:86:68:1c:63:d7:
                    79:20:e6:57:c2:4e:6c:cb:28:b8:c1:2e:4e:98:ec:
                    28:ef:f3:d3:0d:95:d1:14:9e:93:36:42:79:3d:ed:
                    7a:dc:96:d4:93:39:cd:82:2e:34:ea:7d:70:97:68:
                    f4:1b:38:d5:1a:4f:13:34:34:3a:90:47:8a:1a:85:
                    f7:52:24:ff:80:35:2a:89:19:6a:64:a4:71:3a:1d:
                    53:9a:e5:48:70:1e:5e:4c:db:d8:a3:ed:7a:06:43:
                    92:33:43:f9:08:34:a3:a2:bc:c6:10:d2:f1:5c:20:
                    0a:76:99:cd:3a:bb:43:26:76:04:d8:63:4e:66:5d:
                    19:72:e4:27:a5:81:32:a4:16:21:01:ad:fa:b7:d5:
                    5c:28:5e:d2:d0:1c:ab:0f:1b:e6:96:7c:99:4b:d4:
                    34:c1:45:42:3d:ef:55:a5:23:8c:34:57:e8:0a:52:
                    7c:fe:0d:1b:f4:1d:03:f5:67:23:12:cd:7f:84:5c:
                    38:f8:92:84:af:b8:6b:9a:93:27:84:6a:6f:24:6e:
                    f9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5F:FB:7F:82:3F:D7:60:8E:DC:1B:A9:6B:DE:43:65:37:C6:24:F9
            X509v3 Authority Key Identifier:
                keyid:F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:92:be:3e:86:f5:ac:0b:42:8f:59:aa:af:c9:1b:9f:d6:d7:
         ec:21:7a:f6:eb:c0:e7:01:f2:8f:b0:f4:f9:19:08:c4:8a:39:
         a8:31:4b:2e:9e:0c:aa:9f:69:05:e0:bb:92:76:2d:34:b7:3e:
         ad:9f:1c:41:75:e0:f2:d6:e6:37:74:dd:c0:6b:ff:8f:35:20:
         02:a4:95:11:18:ef:66:f4:07:cb:fb:e7:2b:47:1c:33:93:aa:
         cc:dc:65:4b:c6:dc:ae:bf:15:98:69:99:5b:65:3e:ca:af:ad:
         16:b6:5c:ea:a4:99:a0:f0:c2:13:c6:d7:bb:53:e1:d8:4d:f2:
         3a:03:8a:61:cd:be:94:80:1d:4f:a7:88:c6:c3:8f:f3:9b:de:
         c3:61:4b:c3:fb:25:e8:3c:ad:16:5a:cd:16:86:35:3c:1d:f4:
         52:e1:85:3b:b6:ba:f6:e9:20:49:eb:12:28:f6:5c:50:1a:eb:
         39:33:8c:93:41:ed:54:a9:04:0a:10:98:04:8e:ab:d1:67:3d:
         1b:13:49:a9:ea:74:33:fc:4d:da:b2:ae:1d:fb:d8:9c:cb:95:
         62:08:b2:e6:16:33:16:28:e2:f5:22:7d:4b:54:eb:44:71:30:
         63:5e:02:2a:6f:a6:33:08:e2:46:4c:ec:bd:8c:a3:55:83:97:
         33:bb:bc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:34:47 2026 by rpki-client