Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
File:                     mkQDBAPVC3G5mEY7OuVoQ7klleE.mft (raw, json)
Hash identifier:          Ejfl38XlCtFG0HixAuCLN7eHBRQDlUbGxmWYVHJiNNA=
Subject key identifier:   E4:2C:F5:A2:1F:F1:41:89:C7:9E:6F:11:B5:75:CA:B7:D8:96:6C:9A
Authority key identifier: 9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1
Certificate issuer:       /CN=A9120119/serialNumber=9A44030403D50B71B998463B3AE56843B92595E1
Certificate serial:       08F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
Manifest number:          1AE7
Signing time:             Tue 22 Sep 2026 17:04:05 +0000
Manifest this update:     Tue 22 Sep 2026 17:04:04 +0000
Manifest next update:     Tue 29 Sep 2026 17:04:04 +0000
Files and hashes:         1: mkQDBAPVC3G5mEY7OuVoQ7klleE.crl (hash: E/B6qhQ8zZuBm1EDaNIQhFliSHe97+Aa4sAcHzc6FSQ=)
                          2: AD46C158EDA911EA977E1C36C4F9AE02.roa (hash: pFivcl6/2LaS0iSbDcUyygHwyMDGedaAY+O1WaW+9u8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl
                          rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 17:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2289 (0x8f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120119, serialNumber=9A44030403D50B71B998463B3AE56843B92595E1
        Validity
            Not Before: Sep 22 17:04:04 2026 GMT
            Not After : Sep 29 17:04:04 2026 GMT
        Subject: CN=6ab2b505-eae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8a:ce:ed:63:13:94:75:57:37:a7:f1:37:9f:
                    58:ed:36:45:0e:76:7d:ef:d2:ad:b4:33:0a:8b:51:
                    16:5e:91:45:ed:a1:e2:9c:68:30:65:39:69:2f:4e:
                    24:ed:2e:39:e0:86:aa:33:18:0f:0b:75:17:e1:55:
                    94:3d:e4:60:79:f2:ea:3a:d1:49:90:36:ba:17:d6:
                    33:d4:8f:78:0d:0c:ff:41:a1:24:89:1b:1b:e1:1c:
                    a2:dc:82:98:7d:25:39:91:ea:4b:8e:08:20:02:f8:
                    d0:00:b1:10:14:47:55:71:7a:a3:12:90:3f:09:be:
                    63:03:98:dc:a0:71:5a:7a:d9:95:32:36:b5:b8:06:
                    2d:dd:53:0d:01:f6:fe:a3:86:93:a8:df:1e:db:81:
                    ec:78:a3:71:38:87:5f:7c:90:0f:78:97:ee:93:ba:
                    5d:a1:ba:31:6f:79:7b:5e:01:0e:26:05:ab:44:70:
                    73:ec:61:aa:99:e9:f8:02:fe:91:08:df:0d:21:4a:
                    b2:04:61:13:82:3e:13:df:cd:70:e5:67:f5:64:36:
                    cf:8d:80:ec:82:e3:c0:d4:98:73:37:da:53:d7:89:
                    19:81:78:94:48:bf:27:46:90:d0:e7:1c:c1:57:b6:
                    de:45:ce:a9:2a:89:6f:62:31:7e:ec:c5:25:9d:a9:
                    e3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2C:F5:A2:1F:F1:41:89:C7:9E:6F:11:B5:75:CA:B7:D8:96:6C:9A
            X509v3 Authority Key Identifier:
                keyid:9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:b7:1a:9e:19:5e:a4:27:bf:a2:1f:be:77:4d:43:37:55:3f:
         21:e8:fa:54:30:63:eb:ca:96:09:9c:0e:ac:9b:7b:62:df:00:
         aa:c3:f7:84:db:5b:7d:49:50:57:11:ea:86:6b:7a:fe:cf:43:
         cc:15:26:3a:f5:37:61:4e:88:de:08:c8:b7:c5:b5:57:cc:4d:
         0f:b7:7e:18:64:96:10:8e:36:34:fd:94:a6:dc:e8:62:50:57:
         8a:f4:06:cc:6a:47:0e:5b:87:87:da:64:90:45:41:fc:8f:50:
         79:f0:8d:0d:e7:0b:88:e0:b4:03:56:c2:9a:8a:3a:52:fc:e4:
         a7:0b:12:22:15:f4:ad:f1:08:13:52:30:42:6d:0a:9f:3e:4c:
         06:b2:e1:65:39:cd:73:75:ca:23:79:3f:98:11:ce:3e:46:74:
         0c:ad:a4:14:88:15:60:50:3c:1d:fa:03:6f:79:fd:87:4d:d8:
         f4:af:7f:8a:74:6d:18:49:33:f7:82:a7:05:cf:b4:55:ee:a7:
         bf:51:0a:42:93:a5:90:fa:8b:cd:d6:76:15:d6:36:4f:69:42:
         8c:08:b8:d6:26:72:55:22:9c:55:99:76:3b:1d:58:99:63:33:
         9a:97:f7:d1:f7:31:3d:42:5d:2b:0f:9d:8f:01:92:67:64:82:
         ac:ca:32:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:18:29 2026 by rpki-client