Manifest

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
File:                     C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json)
Hash identifier:          VdSGP97mxPk35ZrUdEwR69eL4k1N2EN9tWtM9mTDI4E=
Subject key identifier:   12:6B:86:5C:6E:B3:C8:94:7D:6A:62:96:55:E8:DB:A2:88:A4:2C:10
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Certificate issuer:       /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial:       1464EEA2514A3AC9DD039C0FE45CB58974735014
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
Manifest number:          0352
Signing time:             Fri 18 Sep 2026 12:21:32 +0000
Manifest this update:     Fri 18 Sep 2026 12:16:32 +0000
Manifest next update:     Sat 19 Sep 2026 14:08:32 +0000
Files and hashes:         1: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: 1srxNLkDySS6fiifB4DPOaG5PvvAtOGaPaRHXwTpNyo=)
                          2: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: ctysLw7Hc2mshd96RxHLTjD3pqemHoQbJDHNNxHkTqA=)
                          3: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: KWhrBV/zjumpPUyS3bkIhwSt0IKmcrtP3SgZZsS+/20=)
                          4: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 7e1q16oVO9npHirMK4v5g3vSkY20JTKKgzdAw4kY6GE=)
                          5: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: S7WsIsK6ViMEMbud6Qfi8tnNCEiIdCO/5Os6gk5h8V8=)
                          6: 3130332e32352e3132342e302f32342d3234203d3e20313937353337.roa (hash: OcqsdLDtMbRRfAMVaO1K99xhO+aLsojGYCO5peADbbA=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
                          rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Sep 2026 14:08:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:64:ee:a2:51:4a:3a:c9:dd:03:9c:0f:e4:5c:b5:89:74:73:50:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
        Validity
            Not Before: Sep 18 12:16:32 2026 GMT
            Not After : Sep 19 14:08:32 2026 GMT
        Subject: CN=126B865C6EB3C8947D6A629655E8DBA288A42C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:53:05:00:97:bf:0b:35:e6:58:a9:d1:ca:9e:
                    2c:ca:9d:d4:a9:24:d6:4d:a1:7b:09:e9:d7:d5:52:
                    47:31:98:b6:ff:9d:40:51:d5:1e:07:c8:14:14:2a:
                    e8:c3:38:4d:a3:b2:c5:a7:da:57:5a:45:f6:6d:41:
                    8c:22:6e:ac:9d:f5:da:5f:6a:c6:c6:64:76:bd:66:
                    e7:ef:56:44:f9:17:68:55:50:92:98:ca:9e:1c:6a:
                    05:96:4d:d6:06:5b:af:e3:bc:50:b0:90:b3:9f:90:
                    13:9e:68:c4:09:4f:4c:ff:dc:81:e2:e5:0a:bd:ab:
                    50:48:e4:9a:f0:64:9e:07:47:52:de:e9:60:18:d5:
                    24:34:ee:fb:bf:1d:fc:b9:b6:19:21:64:f8:80:ae:
                    99:ee:55:f2:14:a0:bd:b1:b0:06:e6:b8:d2:c6:f2:
                    ba:1f:c9:a2:3a:8e:c3:36:2b:58:b5:7e:fd:25:84:
                    70:1a:a0:25:d5:c9:88:79:52:ff:c3:24:18:52:db:
                    59:aa:bf:8a:b5:cd:4a:68:81:1d:10:73:aa:4e:d9:
                    35:d7:bc:ad:85:af:26:8e:6c:43:e0:fa:78:dc:94:
                    cf:06:58:0d:7e:ba:48:33:f4:96:15:be:06:30:47:
                    1c:25:97:f2:94:68:0e:aa:ba:6e:b4:db:ba:30:d6:
                    a5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6B:86:5C:6E:B3:C8:94:7D:6A:62:96:55:E8:DB:A2:88:A4:2C:10
            X509v3 Authority Key Identifier:
                keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ea:df:90:4c:47:26:63:59:db:a0:21:0c:aa:49:4c:9a:22:
         d4:7f:95:76:59:9d:42:ed:ac:24:24:97:12:52:aa:dc:3e:4d:
         ec:74:25:e9:41:57:bc:65:0c:71:1c:ec:57:ab:c1:fb:17:fe:
         dd:36:3c:26:84:cc:53:2d:94:1c:b7:1a:ea:cb:d8:2f:7d:41:
         c2:66:73:7a:76:d2:82:60:af:68:1d:ef:4f:ba:48:0d:a7:8f:
         96:b2:36:ca:64:b4:b0:41:1f:fc:11:3b:2a:02:e5:1f:0b:24:
         98:1b:38:35:35:02:e7:18:b9:cf:2c:29:b7:87:5e:47:95:5b:
         30:a7:e4:3f:8a:63:4e:54:da:9d:c8:84:6b:01:c7:01:fa:10:
         fd:eb:c8:47:c1:ff:c5:0c:d2:97:f5:f3:1d:20:6f:c6:82:f6:
         37:6f:93:11:71:f8:a5:01:00:3e:e8:d7:94:88:9d:6f:36:6b:
         98:3d:e7:a6:0e:b3:2c:25:a8:91:21:ac:d1:0b:ad:e4:a2:94:
         2d:95:fa:d1:b1:5d:86:52:3f:82:8d:60:44:08:80:1b:23:53:
         79:1c:40:26:ef:21:44:07:13:6d:bf:ea:6d:14:d8:a6:f0:7c:
         9c:b2:61:2c:56:12:47:f3:b1:fc:91:9c:46:c3:01:03:0e:a6:
         c2:5c:06:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:58:07 2026 by rpki-client