Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0DF1/896C8EF4942211F1A451A27A4611F970/9EtTxyCpexppewxHsGJFOmmMRco.mft
File:                     9EtTxyCpexppewxHsGJFOmmMRco.mft (raw, json)
Hash identifier:          QLWr6AzzSu5MrxdwMwHT4pvMRla2N8f0hMW8Hm+3xJQ=
Subject key identifier:   94:C1:55:22:21:05:2E:15:8C:B7:D1:AA:0F:2D:33:15:78:06:3F:BB
Authority key identifier: F4:4B:53:C7:20:A9:7B:1A:69:7B:0C:47:B0:62:45:3A:69:8C:45:CA
Certificate issuer:       /CN=A91E0DF1/serialNumber=F44B53C720A97B1A697B0C47B062453A698C45CA
Certificate serial:       21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EtTxyCpexppewxHsGJFOmmMRco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0DF1/896C8EF4942211F1A451A27A4611F970/9EtTxyCpexppewxHsGJFOmmMRco.mft
Manifest number:          20
Signing time:             Wed 07 Oct 2026 09:30:13 +0000
Manifest this update:     Wed 07 Oct 2026 09:30:12 +0000
Manifest next update:     Wed 14 Oct 2026 09:30:12 +0000
Files and hashes:         1: 9EtTxyCpexppewxHsGJFOmmMRco.crl (hash: dvypy5YCzUcwHaFSRnYM01W/hp3Tb1j/PAZkd3p7bzE=)
                          2: BCEB3F26942411F1AFFB0BD14611F970.roa (hash: iYryFwkjj72eBhpxq/yWPGYfEbEiGh1ZPD6Papc8FgU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0DF1/896C8EF4942211F1A451A27A4611F970/9EtTxyCpexppewxHsGJFOmmMRco.crl
                          rsync://rpki.apnic.net/member_repository/A91E0DF1/896C8EF4942211F1A451A27A4611F970/9EtTxyCpexppewxHsGJFOmmMRco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EtTxyCpexppewxHsGJFOmmMRco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 09:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0DF1, serialNumber=F44B53C720A97B1A697B0C47B062453A698C45CA
        Validity
            Not Before: Oct  7 09:30:12 2026 GMT
            Not After : Oct 14 09:30:12 2026 GMT
        Subject: CN=6ac61125-3928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3e:99:cc:66:7b:ad:5b:d4:b9:4d:00:9f:95:
                    a7:6b:49:45:58:97:d1:cd:5e:40:f9:89:72:31:9a:
                    da:e7:67:74:88:d0:a6:98:fd:72:69:64:8f:1b:97:
                    80:3f:70:82:2f:34:67:de:f5:00:2e:f2:7e:08:61:
                    ea:cf:6b:eb:25:95:2c:b2:9f:6e:fb:57:6c:b0:92:
                    da:3d:23:e4:b7:1e:f4:cb:e9:11:58:fd:63:80:09:
                    56:4b:27:2b:ba:0f:29:59:4c:9b:10:e7:72:38:2b:
                    99:46:1b:92:cf:d8:b9:36:2d:58:05:7a:02:53:49:
                    f8:bb:1f:95:53:7d:5b:b4:13:39:cc:ec:e1:a7:28:
                    8e:68:ed:4a:81:13:aa:dd:5e:39:62:0b:43:c8:95:
                    ff:af:b8:31:21:89:60:72:6b:79:e8:15:0d:b0:b9:
                    50:24:a2:7c:af:3d:e2:de:07:08:e3:2a:a1:35:38:
                    76:96:91:2b:47:af:bf:ee:17:2b:4d:1b:2b:66:28:
                    4b:46:f4:17:9d:18:54:9a:ce:19:e2:e9:63:73:29:
                    05:30:aa:dc:db:7e:58:f4:f0:9a:d5:e6:22:17:40:
                    9f:f7:81:e1:80:e8:ea:63:50:41:c6:ca:33:0b:a8:
                    20:4b:04:92:35:04:20:09:cc:ff:9e:76:4c:f8:21:
                    17:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C1:55:22:21:05:2E:15:8C:B7:D1:AA:0F:2D:33:15:78:06:3F:BB
            X509v3 Authority Key Identifier:
                keyid:F4:4B:53:C7:20:A9:7B:1A:69:7B:0C:47:B0:62:45:3A:69:8C:45:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0DF1/896C8EF4942211F1A451A27A4611F970/9EtTxyCpexppewxHsGJFOmmMRco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EtTxyCpexppewxHsGJFOmmMRco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0DF1/896C8EF4942211F1A451A27A4611F970/9EtTxyCpexppewxHsGJFOmmMRco.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:2b:4b:e2:4c:6c:20:2f:9f:a8:df:9f:d7:34:73:2d:48:81:
         d7:d3:77:e3:db:47:40:49:8b:52:4c:65:de:83:40:c0:67:7e:
         22:34:59:20:71:8d:09:4c:eb:86:41:69:66:1a:aa:71:46:ea:
         34:b2:b1:de:18:f9:a1:66:14:e2:7e:a4:31:03:f8:d0:10:91:
         6b:22:99:2e:03:dd:db:d1:5c:a1:1c:2d:96:60:98:ef:a5:e0:
         3a:1c:1d:bd:c2:d5:9d:7f:d9:44:fb:3f:56:c4:49:50:a3:ae:
         94:44:c6:47:8b:4e:03:23:16:69:10:19:f5:c6:bf:7f:75:af:
         b6:d6:c1:06:58:98:29:d8:46:da:2c:49:ba:71:10:fd:1c:f3:
         59:51:34:81:4b:c7:2a:31:b5:0a:53:02:98:51:38:5b:e9:42:
         3e:04:df:e6:fb:ef:88:1b:6b:99:af:c9:42:4b:9d:23:ed:c8:
         67:fd:4d:3d:5d:4b:f9:e9:8b:7e:56:16:31:bd:4b:56:4e:9b:
         a5:da:9e:8c:f2:84:fc:0f:1b:e8:21:f9:e1:23:08:86:dd:39:
         eb:74:19:0e:87:01:89:aa:a3:e5:62:3f:5a:2e:0b:e2:d6:e2:
         cb:49:f4:42:05:eb:85:9b:fd:03:79:0a:e2:60:a4:ff:45:22:
         a1:28:45:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 04:06:02 2026 by rpki-client