Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
File:                     p9_UyRMyvR5BzybbGCIdHXBY_dU.mft (raw, json)
Hash identifier:          XEZHPBL96C4IuxXT9OzZ3+/UrYfSw80a2DNgVpN3Pkg=
Subject key identifier:   47:8B:23:1F:A2:0D:DD:0D:84:06:A2:DA:22:B2:58:2E:D8:61:02:1A
Authority key identifier: A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5
Certificate issuer:       /CN=A91EC9AE/serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5
Certificate serial:       047D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
Manifest number:          0463
Signing time:             Wed 07 Oct 2026 00:15:54 +0000
Manifest this update:     Wed 07 Oct 2026 00:15:53 +0000
Manifest next update:     Wed 14 Oct 2026 00:15:53 +0000
Files and hashes:         1: p9_UyRMyvR5BzybbGCIdHXBY_dU.crl (hash: wnrPIlRfxO8fDDHfSAELkGT4Riaz4T3HyZUIMG5rBo8=)
                          2: 1D30B9BEA7A411F192B38F0D4C11F970.roa (hash: S2r3R58U9HZx8Oj62ub3ESAs357F2eSsSbNvAZ9A3m8=)
                          3: 2DE26240B2FC11ECA5096770C4F9AE02.roa (hash: nSCtkyME0OPFIQuGYl4VSkayTNuGmQDZdJ+nhdKyDqA=)
                          4: A0A6A84EB5B911EC8AADD413C4F9AE02.roa (hash: s8YJHb+stY5uowp1aYz9CMh3CieUulWCEWzyjMliPJ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl
                          rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 00:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1149 (0x47d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC9AE, serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5
        Validity
            Not Before: Oct  7 00:15:53 2026 GMT
            Not After : Oct 14 00:15:53 2026 GMT
        Subject: CN=6ac58f39-84da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c3:58:c2:fa:00:e3:25:e4:48:5f:ac:4d:d2:
                    be:f0:26:3c:2f:63:21:d8:ac:28:1f:b6:b3:0e:37:
                    60:55:52:dd:67:1d:f1:5f:35:fc:3f:4f:e0:96:55:
                    84:7d:7e:2c:2a:ef:42:4a:af:13:6d:22:f3:42:12:
                    0e:1c:ee:84:40:89:1a:6c:19:2b:4a:74:26:63:fd:
                    47:83:6d:ce:72:b1:b7:91:da:0f:7f:4c:4a:00:6a:
                    d0:a2:49:1e:aa:23:d0:46:8a:72:18:e6:c2:89:53:
                    d1:e0:69:5c:e2:a3:f6:65:c1:58:55:2a:24:c0:0f:
                    ae:01:b6:a4:e1:30:06:3b:2f:4c:6b:49:78:23:45:
                    cf:35:db:29:5a:03:10:e8:c4:7e:7a:ab:26:61:d5:
                    47:c4:41:13:5c:60:08:35:30:8e:ba:4a:ed:8c:72:
                    2a:7e:85:46:d6:01:07:9e:ab:7c:59:91:17:b4:2a:
                    61:cf:6a:ce:4e:a6:b9:d0:2d:e5:f2:cf:24:94:de:
                    71:65:2f:c6:e8:dc:68:d7:9a:09:d2:f7:66:c4:9e:
                    08:c9:c1:90:93:10:a3:bc:ea:f9:22:58:25:98:f2:
                    a3:e9:6e:5b:d2:05:d4:e6:4d:ee:63:b7:66:a3:74:
                    b2:f0:e8:4a:30:b7:fd:20:8e:e0:2a:1d:fb:cb:84:
                    7c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8B:23:1F:A2:0D:DD:0D:84:06:A2:DA:22:B2:58:2E:D8:61:02:1A
            X509v3 Authority Key Identifier:
                keyid:A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:fd:5f:bd:b9:ef:b9:c2:f4:b3:da:bc:13:4e:95:73:fe:7d:
         1d:03:e6:bb:09:8a:ec:ec:91:94:67:fc:8b:2b:38:6f:09:fb:
         81:6f:62:a4:83:39:fc:b5:17:49:29:f2:20:70:38:0b:93:a8:
         ac:2f:32:21:8f:3a:6c:72:f0:d6:06:1c:63:7e:cc:2d:93:70:
         2a:b8:d0:86:a3:2d:d7:41:b8:7d:20:80:cf:8c:da:ff:6b:ee:
         2f:c6:cc:53:51:99:fb:07:b7:82:0d:1d:6c:c9:16:cf:17:45:
         f1:3b:fe:fd:1e:44:e8:c9:3d:c9:92:1e:da:b1:64:67:92:9e:
         a6:ef:5f:9d:d8:9d:ce:50:3e:12:6e:b3:87:3c:7b:9b:be:d5:
         13:06:f7:be:a5:dd:be:8c:22:db:86:5c:0a:cc:fd:3b:dd:f1:
         c0:2d:9b:54:9f:66:36:62:fd:f3:1a:4e:ed:6c:7c:b8:24:40:
         34:78:e7:ea:1e:56:71:3d:b3:b0:ea:6a:b3:48:75:70:86:31:
         ba:8f:20:f1:07:91:1d:5c:41:ec:68:34:bd:dc:a2:ff:03:c2:
         83:45:20:6c:f5:72:9f:af:9c:c4:08:55:3f:5e:50:4c:ea:84:
         a2:4d:11:05:fe:68:a8:33:ad:ac:00:d3:ec:1c:e7:51:7a:d4:
         1b:ff:db:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:08:19 2026 by rpki-client