Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
File:                     9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft (raw, json)
Hash identifier:          kDPN2+FjKs25rUhPBL/NccovVdvguT8Vz80OFtNHgzQ=
Subject key identifier:   95:19:32:E4:86:00:D7:4D:63:CB:50:7D:13:69:13:53:2D:A9:B5:A6
Authority key identifier: F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0
Certificate issuer:       /CN=A91D536E/serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0
Certificate serial:       0849
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
Manifest number:          0841
Signing time:             Tue 06 Oct 2026 21:10:26 +0000
Manifest this update:     Tue 06 Oct 2026 21:10:25 +0000
Manifest next update:     Tue 13 Oct 2026 21:10:25 +0000
Files and hashes:         1: 9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl (hash: uR4f39DT/r4WjKBIuf5XIyUZbkeEFMMoWSPgbzYZP3I=)
                          2: 6091D05229FC11EB861CCA7FC4F9AE02.roa (hash: 0iiqZOwTOdunhzu7xr1TU0hPXfMeSWYQaRpR8izF2Uc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl
                          rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 21:10:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2121 (0x849)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D536E, serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0
        Validity
            Not Before: Oct  6 21:10:25 2026 GMT
            Not After : Oct 13 21:10:25 2026 GMT
        Subject: CN=6ac563c2-5e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ba:db:6b:2c:31:7f:da:a2:a0:8c:ae:7c:b3:
                    36:24:96:79:4d:05:35:08:d1:4b:2e:a0:e4:53:23:
                    5e:a8:8d:68:d3:34:ae:0a:56:38:fb:25:97:ad:18:
                    2e:1c:91:35:90:86:c1:fe:4d:e2:c5:1c:0d:61:9e:
                    34:36:76:c9:d0:07:c9:09:f3:fc:69:df:8c:14:86:
                    7b:76:76:35:18:ab:9d:5b:d3:e9:39:3b:0d:99:ed:
                    3e:4d:82:f4:d2:41:59:08:c0:a9:62:44:64:fe:dd:
                    b8:20:7e:b1:f0:00:84:e5:5a:f8:32:d9:78:58:40:
                    71:f6:2b:4a:2a:06:e0:27:c8:dc:c6:08:d2:22:39:
                    d4:de:dd:19:78:e6:db:71:59:ed:f3:07:70:9e:56:
                    a5:69:3c:67:4a:fd:29:2d:d9:f5:4a:ee:15:22:fa:
                    b6:01:9b:eb:43:13:87:09:d5:68:3c:b0:9a:7b:0b:
                    c6:8e:df:50:a9:e0:24:ca:7f:4f:ef:b7:c6:63:1e:
                    9e:b3:fd:76:83:32:0d:ae:ce:32:8e:1e:02:37:61:
                    2d:e8:51:4b:cf:f2:4a:f2:97:32:c5:97:03:25:76:
                    64:ec:4c:87:14:ce:6a:23:54:e4:5e:7c:af:c4:40:
                    d3:2a:f6:b2:0e:b2:a5:3d:da:14:7c:7a:0a:1d:12:
                    58:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:19:32:E4:86:00:D7:4D:63:CB:50:7D:13:69:13:53:2D:A9:B5:A6
            X509v3 Authority Key Identifier:
                keyid:F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:10:16:35:80:f6:07:72:b3:6e:35:ec:5b:38:c0:d6:94:8d:
         fa:78:38:4e:0e:a6:bb:6d:e0:86:db:c4:29:ef:f8:cf:ef:57:
         75:04:ca:ba:72:04:bc:b1:40:51:5d:12:4b:4e:1e:c3:ca:8b:
         0d:8c:3d:d9:ee:e4:e1:69:4c:95:af:f5:65:28:2a:61:ff:38:
         2a:8c:b2:90:89:72:37:10:a1:ba:45:a4:74:92:c9:4c:c4:e6:
         63:79:e7:be:b2:a0:d4:f3:c3:84:59:d5:e7:11:c9:7f:48:de:
         52:95:68:d1:b5:b0:c9:74:ef:72:25:cc:53:4e:d1:e4:96:33:
         4f:3d:d1:6e:32:67:46:98:6a:34:b4:df:ff:c8:2d:8a:72:a8:
         ad:e7:0d:e7:67:e7:70:b7:43:86:3d:cb:8a:87:45:51:91:84:
         c9:43:a2:02:10:2f:cb:39:42:a3:24:91:e6:ce:c7:2d:cb:36:
         f4:ee:c3:6f:0f:75:87:c6:8c:d8:4a:45:6f:65:40:ff:3c:c8:
         a8:61:51:23:e0:44:69:3c:f5:4d:fd:4b:44:a3:78:0a:ce:67:
         e3:3f:69:84:07:90:63:34:0f:d6:62:b4:bf:1c:13:90:75:49:
         d1:2c:e0:f3:40:74:e1:8d:32:93:8e:29:53:19:1e:5b:99:bb:
         21:75:b0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 22:10:10 2026 by rpki-client