Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft
File:                     P9OJWVL9hJqXvBEkdJUChMaGhkU.mft (raw, json)
Hash identifier:          v+rI324H0jRJW+5nFKK1gb/wrUvpEDKd0gMJzN+Fb6Y=
Subject key identifier:   E3:73:93:A5:34:CE:21:48:20:05:70:A8:12:3B:34:F0:65:0E:09:A4
Authority key identifier: 3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45
Certificate issuer:       /CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645
Certificate serial:       08CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft
Manifest number:          08BD
Signing time:             Tue 06 Oct 2026 21:39:53 +0000
Manifest this update:     Tue 06 Oct 2026 21:39:52 +0000
Manifest next update:     Tue 13 Oct 2026 21:39:52 +0000
Files and hashes:         1: P9OJWVL9hJqXvBEkdJUChMaGhkU.crl (hash: rcHAb1mrl7do5D1cO603cchMcrnga45rjvEN8wYQ0xY=)
                          2: A84FB264FD7011EAA1DF3534C4F9AE02.roa (hash: MnCdQL038dasUmpCqlKA38Ela1q3mX6o0N6eIXWh0Ks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl
                          rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 21:39:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2251 (0x8cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C609A, serialNumber=3FD3895952FD849A97BC112474950284C6868645
        Validity
            Not Before: Oct  6 21:39:52 2026 GMT
            Not After : Oct 13 21:39:52 2026 GMT
        Subject: CN=6ac56aa9-8986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fa:b4:db:be:58:37:b7:7a:6e:e5:dd:6d:7d:
                    1a:52:c1:6c:24:d7:f7:43:04:08:85:60:7c:21:f3:
                    22:33:80:5a:fa:6c:a4:57:8e:96:27:54:6f:d5:28:
                    0e:02:50:f3:a7:a5:6d:b7:33:76:32:c2:27:ae:94:
                    27:cb:4b:72:12:3d:a4:6f:35:e0:0c:2e:0b:64:72:
                    63:d1:58:df:62:6d:dc:73:d1:c0:bc:8e:bc:86:a9:
                    69:af:88:b0:2f:d3:0f:ca:46:ea:f8:98:e8:de:bc:
                    bf:4e:9b:21:ea:e4:84:13:4d:1e:24:99:c3:f5:84:
                    4a:b9:63:ba:f2:bc:5c:a7:eb:5e:da:6b:de:30:d4:
                    14:ee:d2:30:e7:11:7f:f0:0d:e1:25:08:e6:89:fd:
                    ff:3c:52:51:01:ce:07:b0:fb:8c:2c:33:4f:34:95:
                    c9:24:da:7d:54:31:7d:fd:e2:fe:1f:ba:1a:d8:57:
                    d8:69:9b:cd:1b:65:28:3f:44:b9:cc:41:8d:35:cf:
                    89:de:6b:d1:9d:7e:bc:71:6f:a7:97:8a:47:20:65:
                    7f:1c:de:55:69:10:2f:b6:7c:f3:f9:0c:47:eb:79:
                    90:4b:77:48:e7:b6:ed:89:dc:cf:8c:2c:df:b9:88:
                    33:ff:57:33:53:50:98:0a:c4:e5:f7:cd:d1:92:fb:
                    38:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:73:93:A5:34:CE:21:48:20:05:70:A8:12:3B:34:F0:65:0E:09:A4
            X509v3 Authority Key Identifier:
                keyid:3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b2:b8:60:00:f3:de:bf:80:a6:f8:c6:14:dd:2f:02:1c:b2:
         f7:2a:9f:d6:4c:2f:63:94:23:e4:02:b7:fa:69:7e:d0:7d:c3:
         01:19:91:ca:d4:bd:ed:ab:e6:b9:e0:eb:e6:a1:fb:18:e7:88:
         e5:2b:7a:3a:8c:3f:2f:34:bd:67:cb:a0:18:de:19:68:25:63:
         c7:a9:8e:86:a4:3b:4e:cd:08:6f:f9:97:b1:f3:29:0a:72:cc:
         d8:95:de:ec:73:87:98:63:27:46:0f:52:af:4a:00:91:50:ac:
         20:c9:64:01:8c:e3:f5:9e:39:1a:10:fe:91:fe:50:39:4e:c6:
         e7:a4:61:f8:c0:cb:d9:34:7c:93:32:e7:49:63:b0:24:2f:cc:
         d6:8a:65:a1:dc:cd:47:57:ca:d1:00:84:b2:7b:7a:26:a4:56:
         98:bb:c2:da:3a:e9:45:ac:c5:da:a7:9f:f4:59:ce:81:d9:f3:
         6b:a7:0b:46:07:25:90:c7:90:39:37:10:37:65:25:b7:a3:b0:
         b4:89:97:64:74:35:dc:84:c4:77:8b:ad:ad:e2:5c:17:84:f6:
         c7:53:9b:2f:d1:fe:6f:89:24:2a:13:5f:41:5f:15:df:57:d4:
         73:95:5e:e8:2c:d9:9a:e0:df:e0:36:e1:a9:19:03:bf:85:69:
         7e:8a:69:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:19:00 2026 by rpki-client