Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
File:                     Sr9max48bHEsS0dwG_3RV94Djy8.mft (raw, json)
Hash identifier:          q6DHI7n33CzaRYGH3E8eG3aS1pi27w/t0Zf2825NxMs=
Subject key identifier:   27:2D:96:92:2D:3A:12:D9:CF:BC:C2:3C:71:1D:07:AC:68:F9:82:32
Authority key identifier: 4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F
Certificate issuer:       /CN=A911EED9/serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
Manifest number:          52
Signing time:             Fri 25 Sep 2026 08:27:04 +0000
Manifest this update:     Fri 25 Sep 2026 08:27:03 +0000
Manifest next update:     Fri 02 Oct 2026 08:27:03 +0000
Files and hashes:         1: Sr9max48bHEsS0dwG_3RV94Djy8.crl (hash: dgnro+v7v9B4PbbZ/MDHUlzOt91E1I4lEoyCAteflz4=)
                          2: 1EC9E19C7AD111F188194D1271A30FBC.roa (hash: +9AXgCQZHA/qQnY6/zfwgsV6IjHJCtO7mBqzVtouNxg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl
                          rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:27:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EED9, serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
        Validity
            Not Before: Sep 25 08:27:03 2026 GMT
            Not After : Oct  2 08:27:03 2026 GMT
        Subject: CN=6ab63058-3bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fd:01:ec:25:36:e4:87:0c:ba:bd:f4:cf:fa:
                    02:3f:be:13:72:c7:1f:8d:1b:9a:08:86:f3:f9:92:
                    0c:e6:1e:76:14:7b:fe:3d:04:83:d4:38:ec:7c:af:
                    39:e5:b4:f4:fc:5c:94:5b:42:77:7a:c1:f6:a9:09:
                    b9:6c:61:82:2f:8d:32:69:c2:11:93:37:3c:6d:2c:
                    79:f3:0b:18:c3:3d:7f:8f:8d:54:37:00:58:7b:5c:
                    8a:48:7e:af:f2:44:84:3a:b9:63:80:1a:3a:34:05:
                    76:2b:35:83:97:a0:7c:4b:c7:02:af:44:a2:39:14:
                    94:95:fd:6e:ba:72:db:18:f8:a5:a5:9c:a5:b5:de:
                    77:bd:e5:a1:13:d6:30:4e:b2:d5:92:1d:2b:fb:67:
                    be:de:59:23:a6:10:9c:cd:a2:73:87:33:4c:c3:6b:
                    54:96:84:87:6f:3f:55:a0:70:a4:b0:46:ef:40:55:
                    7b:31:f7:b4:18:bd:1f:f6:fc:8f:16:22:78:80:ca:
                    c2:e2:01:8e:92:75:3e:85:b8:f7:58:a9:c1:76:71:
                    15:d2:b6:de:33:3b:53:17:02:55:f7:b3:f0:13:11:
                    51:6c:79:c1:08:bd:f1:b6:51:74:fa:5b:eb:0f:3f:
                    22:9b:32:14:de:71:6c:0a:54:a3:9d:27:0e:3b:9a:
                    2c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2D:96:92:2D:3A:12:D9:CF:BC:C2:3C:71:1D:07:AC:68:F9:82:32
            X509v3 Authority Key Identifier:
                keyid:4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:1f:cf:a6:93:0e:5c:15:86:82:88:a5:e0:60:af:60:06:41:
         40:0c:a0:03:2e:02:66:4a:4d:27:b1:f4:3d:bb:54:46:da:54:
         e4:62:83:3d:0e:f4:a3:82:f1:6e:29:a9:0d:35:90:a3:79:4a:
         67:19:cb:08:7c:01:0e:e0:9b:ba:59:11:e3:19:59:36:ce:3d:
         1e:02:1f:c4:a6:bf:9b:78:4b:d9:b3:0c:65:63:be:84:1f:55:
         03:a8:4d:e1:2d:4e:83:35:ff:e4:83:2e:36:78:40:8c:16:e4:
         c4:9f:ed:a7:1f:00:07:10:69:af:28:76:f0:ad:6d:56:e4:cf:
         f1:23:0f:5b:02:ae:cf:b5:cd:13:c1:fe:3f:65:8c:c4:1b:a9:
         4a:82:c7:00:de:e6:85:e5:86:a2:d4:bd:14:04:ec:2c:32:82:
         a5:d2:46:a7:18:43:1f:d5:bb:37:d3:ea:9e:e0:83:05:c7:40:
         95:45:f3:1d:f5:e0:78:5c:25:ad:40:98:35:bc:b3:bb:d2:02:
         31:9b:85:aa:be:2d:44:6a:ed:8e:6a:b1:71:21:92:20:5b:b0:
         00:19:49:a4:6c:f0:12:2f:99:dd:58:dd:3c:26:c3:9f:b6:bd:
         a2:a0:11:b9:76:7e:4f:d2:9a:de:f4:3c:af:b3:f3:bc:a6:bd:
         e3:ad:60:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:37:12 2026 by rpki-client