Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft
File:                     t9SqT11yMa9OdH93IkWsA3ECEPA.mft (raw, json)
Hash identifier:          8i80xfwX7hjaxnmLMFC2rxlXNR7RS4pfZ7TSL2O9zaM=
Subject key identifier:   B8:B4:01:50:49:8A:C9:38:44:1D:DD:B1:76:0D:CF:48:71:AA:18:89
Authority key identifier: B7:D4:AA:4F:5D:72:31:AF:4E:74:7F:77:22:45:AC:03:71:02:10:F0
Certificate issuer:       /CN=A91175F6/serialNumber=B7D4AA4F5D7231AF4E747F772245AC03710210F0
Certificate serial:       0316
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft
Manifest number:          030F
Signing time:             Wed 23 Sep 2026 00:43:06 +0000
Manifest this update:     Wed 23 Sep 2026 00:43:06 +0000
Manifest next update:     Wed 30 Sep 2026 00:43:06 +0000
Files and hashes:         1: t9SqT11yMa9OdH93IkWsA3ECEPA.crl (hash: 3ItrZWsT5hTQZRcbfFnXcex2UREK/2ulCX1m7b+GLF4=)
                          2: 5D5B0F7C34CA11EDA301482BC4F9AE02.roa (hash: vF0Xep5rMnkqhhbU8FmKPsAzCnUUJ1w3mXYEGGvLr3M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.crl
                          rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 790 (0x316)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91175F6, serialNumber=B7D4AA4F5D7231AF4E747F772245AC03710210F0
        Validity
            Not Before: Sep 23 00:43:06 2026 GMT
            Not After : Sep 30 00:43:06 2026 GMT
        Subject: CN=6ab3209a-ef8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ea:f4:7c:c4:55:89:58:ad:f8:94:92:10:7a:
                    0b:d6:9c:1e:4c:34:4b:5c:d5:43:56:bc:d4:dd:a9:
                    7c:3b:02:43:f9:56:78:5d:af:09:23:ea:69:61:9c:
                    cd:82:5d:10:3f:09:c5:d4:da:ce:fc:ee:99:70:9e:
                    4c:58:d3:72:d4:c2:5f:bd:eb:23:96:b3:36:3d:f6:
                    57:fe:60:bc:8c:7f:76:55:72:35:bf:e2:a8:f1:87:
                    fe:75:b0:da:00:91:0e:7a:84:98:9a:5a:17:a5:a3:
                    73:4f:b4:8b:50:d6:c0:b8:c6:6b:5d:86:55:45:35:
                    9b:51:8f:3c:e8:30:52:f4:35:c5:d0:21:ef:7a:d9:
                    15:25:e8:60:f8:6b:9c:5f:44:2e:89:63:a8:28:89:
                    e6:92:4f:fc:4d:6c:d4:c6:06:39:36:1f:47:d9:ee:
                    19:a4:0b:1d:83:54:f8:d4:76:24:9c:d1:ae:37:d1:
                    d9:52:d7:7a:55:bf:50:71:4a:b6:42:e9:f6:ad:5f:
                    bd:fa:12:a9:69:b3:2b:9a:8c:1a:18:31:21:41:f4:
                    5c:c7:e7:14:94:d2:f8:e2:5e:22:4b:b9:0c:28:6b:
                    22:33:83:cf:05:66:c9:a6:a1:3e:cd:0a:55:20:51:
                    75:84:5a:d6:9b:3d:bb:68:e3:13:9d:88:7e:e9:6b:
                    a2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B4:01:50:49:8A:C9:38:44:1D:DD:B1:76:0D:CF:48:71:AA:18:89
            X509v3 Authority Key Identifier:
                keyid:B7:D4:AA:4F:5D:72:31:AF:4E:74:7F:77:22:45:AC:03:71:02:10:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:b0:c0:0b:42:8b:37:15:2e:0c:86:50:dc:8b:0b:ba:85:fd:
         c9:16:a6:74:8e:b9:c8:11:1a:57:bc:94:6c:f8:e7:a6:3a:09:
         eb:66:40:6c:d1:f4:d9:fd:b0:aa:70:1d:21:b5:74:49:c2:e6:
         19:c7:b5:b5:0e:b8:f1:08:ee:20:7d:46:6c:b3:56:13:b4:6d:
         f6:d9:0d:47:40:99:73:ab:37:c9:78:d9:02:a3:d1:4c:b4:0e:
         be:fd:0e:3b:f9:94:c4:d4:29:13:ec:83:75:05:76:4c:77:7f:
         f0:ee:b3:fb:e4:5e:46:8a:8c:54:8c:88:65:e3:dd:32:8f:0b:
         16:25:65:82:5a:b4:7b:65:2a:f5:6b:cf:bb:b5:70:5e:4c:00:
         49:9e:d7:c8:e4:4c:cf:ff:25:3b:66:a2:3e:7b:52:ab:a1:37:
         a9:38:80:08:2c:49:5d:3c:c8:f0:6c:1d:84:93:1b:e0:3c:68:
         dd:ee:c8:ba:e5:35:55:e3:8a:ec:f1:cb:d9:4b:8e:10:f2:bb:
         10:8a:31:1e:de:18:ee:32:25:25:72:9b:be:b8:20:87:4a:c0:
         69:79:ed:dd:84:b4:b5:de:f2:2e:97:c2:50:fa:70:0f:ae:a7:
         df:2e:57:28:2d:06:6e:1e:d9:7d:df:a3:35:e9:43:ec:d0:b7:
         9e:6e:2a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:14:07 2026 by rpki-client