Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
File:                     Os9EXPzs-7KROzR9Z6go4EChWh0.mft (raw, json)
Hash identifier:          txgNSvzAXtq48vX9vjC8jDVvusREcDJFEgEE0JSCFnA=
Subject key identifier:   53:B9:2F:9D:D8:86:48:CD:3C:30:CE:62:E8:28:58:C0:1F:A0:CA:DC
Authority key identifier: 3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D
Certificate issuer:       /CN=A9117CD5/serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D
Certificate serial:       E5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
Manifest number:          E2
Signing time:             Wed 23 Sep 2026 06:19:11 +0000
Manifest this update:     Wed 23 Sep 2026 06:19:10 +0000
Manifest next update:     Wed 30 Sep 2026 06:19:10 +0000
Files and hashes:         1: Os9EXPzs-7KROzR9Z6go4EChWh0.crl (hash: g3d5Fw7kOEN1P4TmJZrCcXWs88S7IxTtm6kui1t7Sdw=)
                          2: 0B51CEDE5FA911F0BE187C31C4F9AE02.roa (hash: WRz1Amhg1eLxzvJe34a5Oo/mdHZDgY00iZZMnOor6VE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl
                          rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:19:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117CD5, serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D
        Validity
            Not Before: Sep 23 06:19:10 2026 GMT
            Not After : Sep 30 06:19:10 2026 GMT
        Subject: CN=6ab36f5f-33da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ff:ac:3a:b2:6f:20:9b:4d:6b:25:4e:74:e3:
                    0f:54:41:39:ea:7a:7d:df:3e:7e:3e:e2:0e:51:f5:
                    b8:82:d0:cb:4e:08:b3:c4:03:e6:b3:6e:38:ea:8c:
                    86:33:c0:90:31:0e:79:d2:77:a2:22:ff:ac:22:3e:
                    c5:e7:35:36:37:c7:e7:08:ca:56:8f:f5:e6:17:10:
                    65:a0:03:0c:e3:cd:14:cd:c6:69:ed:01:6d:f3:94:
                    b6:37:88:bc:07:1d:2b:6b:83:6c:07:77:bc:f6:1f:
                    83:b2:a5:8c:46:21:b1:3b:c4:f5:20:39:88:6c:29:
                    37:d8:f5:db:6c:55:a0:19:ff:d6:50:ae:95:00:23:
                    0f:67:e0:10:e6:6e:ce:4d:13:2f:a9:ed:c1:7a:b2:
                    43:a7:1f:70:ca:75:61:3d:ad:fb:3a:c0:cb:3c:cf:
                    a0:6f:df:44:d9:70:3e:06:87:c4:35:3b:b6:9b:04:
                    9d:90:90:ff:88:6c:10:51:5b:e7:0f:fb:59:ea:f6:
                    fe:aa:96:79:d0:89:48:00:0a:9d:80:51:2b:f3:ed:
                    a7:3a:0e:73:0e:b3:a0:72:e7:2f:b4:cd:3e:78:51:
                    c7:89:36:45:38:89:e2:9b:d5:5b:0d:69:f7:f3:b1:
                    f9:35:e9:13:15:3c:6e:4e:4d:ba:a6:a9:73:00:db:
                    d2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B9:2F:9D:D8:86:48:CD:3C:30:CE:62:E8:28:58:C0:1F:A0:CA:DC
            X509v3 Authority Key Identifier:
                keyid:3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:9c:24:59:2f:3d:da:c8:4c:d4:68:5f:b8:25:4b:c7:a7:d0:
         a0:1a:62:3f:d6:ce:9c:4c:19:01:2f:b2:0c:42:a1:27:b2:a0:
         3e:ea:68:81:80:ae:79:c5:76:f2:2d:26:a8:88:9d:08:16:6a:
         d0:dc:95:5c:29:50:ff:3e:81:37:37:45:af:2d:57:73:28:30:
         a6:96:43:84:68:c9:32:16:1b:ed:ca:8a:9f:f2:d1:c0:48:b0:
         76:7e:bd:ff:6d:91:79:d7:38:fe:69:58:80:b0:b7:6a:02:cb:
         fc:9c:06:0c:b2:aa:3e:f2:2f:aa:3b:1a:7a:7d:99:17:50:a8:
         8d:1f:dd:72:d7:a8:d8:c8:5e:3c:dd:15:b2:ff:5e:13:95:cd:
         41:5f:a6:83:5c:63:cc:41:0a:d7:e4:de:64:5b:28:9b:3b:ba:
         4e:c6:b7:d5:73:91:aa:bc:5f:9a:5f:6b:d7:89:c4:9f:b5:b2:
         3d:3e:e9:69:be:00:67:95:9e:c0:88:d3:fb:56:5d:0e:34:55:
         6b:16:ae:b4:fe:79:8b:e8:1f:c1:c2:a7:66:94:88:53:cf:c7:
         00:59:02:f1:0a:4d:e6:33:fd:6f:72:1f:98:ed:b6:6f:31:64:
         1e:ca:e0:f9:94:56:ef:bd:ea:ed:9c:93:e2:01:c5:4d:5c:07:
         0d:d9:fe:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:39:58 2026 by rpki-client