Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
File:                     M3tFD93J_HAiHaXKCXhYhbHRt8w.mft (raw, json)
Hash identifier:          LxVn+6B5PiGh7Co5R1D9HYksP8NfA1ua8UTK/XyjqLs=
Subject key identifier:   19:85:80:F1:AA:FC:38:FE:49:07:33:04:F3:15:6F:15:84:E2:A8:FD
Authority key identifier: 33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
Certificate issuer:       /CN=A912981B/serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
Certificate serial:       020C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
Manifest number:          01F9
Signing time:             Wed 23 Sep 2026 03:17:11 +0000
Manifest this update:     Wed 23 Sep 2026 03:17:11 +0000
Manifest next update:     Wed 30 Sep 2026 03:17:11 +0000
Files and hashes:         1: M3tFD93J_HAiHaXKCXhYhbHRt8w.crl (hash: eoWKgObdJeolO9vRa6G4FmYOTAooj3IAOn5E1CX2a30=)
                          2: B62EB8B8810311F19140D3D06AA30FBC.roa (hash: yrlm89UITOQeEQb//8fs853uuFCWdfVzgxpgMA+QA4o=)
                          3: 9DD56C2A3FD311F08A76B677C4F9AE02.roa (hash: 0apNe0l5FgQvHElgMHv4f+0Whu9gEz8dqP8QgQpe1fU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl
                          rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912981B, serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
        Validity
            Not Before: Sep 23 03:17:11 2026 GMT
            Not After : Sep 30 03:17:11 2026 GMT
        Subject: CN=6ab344b7-0f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a5:e2:88:cf:1f:76:d6:ca:03:48:fb:45:e9:
                    2f:b5:22:de:c3:cf:a7:4a:c0:b1:1e:71:3d:f2:e4:
                    20:eb:3c:3e:cd:fa:ac:3e:86:eb:15:67:cc:a5:c8:
                    c2:79:18:49:ba:c1:8e:68:ad:4b:b4:cf:bd:6b:5a:
                    d0:3a:f1:5a:7a:44:e0:21:45:98:e5:0b:c4:bc:fe:
                    de:4d:d0:a1:e8:f9:45:de:c3:eb:13:ef:a7:bf:32:
                    d1:a9:80:9b:97:1e:f8:b5:f4:4c:84:64:21:63:0f:
                    da:4d:0e:08:dd:af:cb:a0:81:c4:a2:74:fc:95:cf:
                    c3:29:4f:e9:2c:a2:f8:31:4f:2a:c6:3b:91:9b:b5:
                    5f:ba:78:9c:03:2c:e6:b3:a2:e6:bf:2c:47:ec:3c:
                    e8:60:6f:60:88:22:43:77:b9:53:62:b7:5c:41:82:
                    e3:35:26:f3:93:3b:1c:e0:6d:84:4e:c3:3c:d5:be:
                    ad:7b:d3:a3:99:36:d9:0c:dd:ea:86:74:20:f1:a4:
                    fc:a4:0f:42:0e:63:d7:12:80:e2:73:e2:59:ee:66:
                    7e:c4:a1:ec:7f:07:80:b6:4f:24:39:50:89:df:36:
                    a9:02:66:69:6a:84:57:30:07:bf:c2:d3:ff:d3:00:
                    65:7a:7f:ec:7f:7f:46:cd:88:f4:30:44:b8:48:13:
                    01:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:85:80:F1:AA:FC:38:FE:49:07:33:04:F3:15:6F:15:84:E2:A8:FD
            X509v3 Authority Key Identifier:
                keyid:33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:d5:c3:67:d7:0f:6e:27:fc:47:da:c4:dd:9c:0b:3e:5e:2b:
         e6:bc:79:4d:07:59:57:35:1e:17:62:22:bf:a6:87:7d:48:4c:
         5f:f7:58:b1:2e:1a:8e:01:74:0f:99:67:06:69:4d:a4:d6:02:
         83:80:8a:e2:a7:c8:da:2d:54:9b:d4:f6:d6:94:b1:0d:84:0d:
         e0:ae:3c:b6:61:eb:df:da:3a:cd:73:1f:7b:73:d2:6f:65:7c:
         f2:ef:25:eb:52:c9:a9:06:4c:7b:09:45:17:26:20:cd:0f:65:
         99:d5:ed:14:cd:dc:da:67:bb:6a:e0:5d:fd:a4:4a:d9:b7:b3:
         0d:89:6b:b9:13:e4:3a:4a:51:ab:14:ff:d5:a2:bb:ad:ff:8a:
         1c:e6:bb:e8:0d:c6:af:5c:a4:3f:b7:c9:85:de:c9:aa:49:4e:
         b6:01:d1:ea:69:24:ee:15:64:f9:d0:8a:9c:69:61:91:e9:7d:
         6b:5b:1b:fd:e0:b6:bc:d3:da:4a:3d:71:33:38:91:45:13:4c:
         57:24:e7:41:ea:6c:1c:aa:ce:50:01:1c:73:6a:f9:8a:8d:70:
         ab:74:8c:4f:d1:81:bc:5e:d4:e0:8d:d2:73:da:52:24:db:bc:
         d7:19:ce:36:bf:3d:0a:51:fd:62:11:ca:bd:d1:55:72:b9:37:
         91:a3:16:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:22:29 2026 by rpki-client