Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
File:                     9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft (raw, json)
Hash identifier:          4JUpif/+9py5akmWEXNpoa0AqIjy6YOKBpL16mnP9bk=
Subject key identifier:   58:5E:9E:72:46:A4:00:8B:F3:46:31:C3:29:22:22:B1:4E:79:39:27
Authority key identifier: F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A
Certificate issuer:       /CN=A91C7AA5/serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A
Certificate serial:       0140
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
Manifest number:          012A
Signing time:             Thu 03 Sep 2026 06:17:16 +0000
Manifest this update:     Thu 03 Sep 2026 06:17:16 +0000
Manifest next update:     Thu 10 Sep 2026 06:17:16 +0000
Files and hashes:         1: 9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl (hash: xmzroVwxvrhSfBnRAP4TSth3aMpvb9bKsQ3JV6Ncfa8=)
                          2: 0AC13D943C5711F0BFBB572EC4F9AE02.roa (hash: /oG+kh2eKtakm2rIYi2rKJyApYpZtiilOJOldegtuSg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl
                          rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 06:17:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7AA5, serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A
        Validity
            Not Before: Sep  3 06:17:16 2026 GMT
            Not After : Sep 10 06:17:16 2026 GMT
        Subject: CN=6a9910ec-94bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:27:23:69:50:7f:c8:4a:e8:3c:75:7d:1a:4b:
                    5d:78:3d:50:10:1a:4c:08:be:bb:a2:e0:26:d3:37:
                    cd:f3:06:22:74:29:03:59:5a:49:1b:4d:0a:96:1c:
                    2f:89:87:5b:92:7a:dd:6a:05:8c:ae:77:b7:a9:9d:
                    1e:3e:85:ca:11:37:da:ef:67:3a:16:a0:da:42:08:
                    9e:46:5e:22:3e:58:b5:da:a9:c2:f0:ed:43:e6:50:
                    47:3e:b0:b6:24:29:7a:7b:90:a9:f4:f6:d2:c7:19:
                    d7:80:04:b2:49:bc:34:69:df:6c:c3:d1:5b:1f:49:
                    d8:5d:98:50:31:df:0e:49:2b:4f:3d:fb:ea:b7:76:
                    7c:ef:31:01:ae:03:e7:da:9e:26:4f:26:b4:01:9f:
                    49:c9:43:30:e5:93:41:97:ae:b0:d8:d6:6e:78:e9:
                    05:77:6d:94:9a:e3:79:87:60:dd:9f:21:ec:c4:05:
                    3f:33:c1:23:93:d6:fa:17:56:fb:09:77:18:fe:4e:
                    27:30:d6:9f:b4:9d:62:9c:62:da:3e:e7:aa:d9:a7:
                    2a:12:18:dd:2f:61:c5:8a:b3:e8:21:52:56:56:70:
                    02:93:83:53:8b:f1:ad:50:48:09:ea:6b:23:82:0e:
                    15:e8:8f:4e:82:7b:ca:2f:16:98:93:0c:bd:76:36:
                    ad:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5E:9E:72:46:A4:00:8B:F3:46:31:C3:29:22:22:B1:4E:79:39:27
            X509v3 Authority Key Identifier:
                keyid:F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:7e:fc:ea:59:1d:cf:d6:83:7d:11:55:aa:51:78:b4:3f:54:
         cb:5e:16:b7:78:e9:2e:d5:3e:1c:cd:9b:95:68:cf:4c:ca:d0:
         e3:8c:2b:82:76:97:4a:a1:eb:8b:8d:4a:e9:ff:b4:16:b0:6d:
         8b:2d:31:38:30:c7:1f:76:8d:3c:ce:01:8e:0d:40:dd:60:29:
         27:29:ca:9c:f8:48:24:19:4a:d6:e8:60:4b:31:b2:3e:c9:b1:
         b3:3d:ad:51:d4:3f:51:13:93:fe:cd:d4:a4:78:0a:62:ff:61:
         85:bd:ae:fc:55:d2:29:d4:41:c9:7e:21:73:b5:b0:6c:af:11:
         9b:19:b8:43:03:1e:7e:44:b3:57:d5:f4:d3:95:b4:dc:0e:3e:
         65:f1:3f:d4:34:84:f8:ce:89:3a:c3:b6:03:cc:f5:61:05:ac:
         c1:6d:13:74:7b:45:e2:d5:ee:07:62:40:1a:1a:10:38:cd:12:
         de:a6:9a:f2:6f:87:74:77:3d:df:74:07:e0:43:1f:a5:37:f2:
         21:64:ca:56:8f:a5:dc:a6:25:36:4e:36:53:29:2e:c3:eb:b9:
         88:69:6e:c2:ae:bb:a2:3b:1c:03:19:80:ef:9a:ca:57:1b:08:
         a4:b5:f9:f8:73:27:01:5d:7d:f2:9e:f2:93:f1:2a:d8:37:ee:
         20:e1:c7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:54:30 2026 by rpki-client