Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F441/A58BE4683E0A11F19633AD1DA8833773/9XVLkqq8JoHf84hg3Om63UQAE5s.mft
File:                     9XVLkqq8JoHf84hg3Om63UQAE5s.mft (raw, json)
Hash identifier:          DgKooZIqVFBFL8Uq0LQHLa3dUssGuGql8Bm6Pqgs1oc=
Subject key identifier:   BD:11:69:41:23:8B:14:A8:42:A2:4F:D1:BE:66:55:E4:76:6F:11:6B
Authority key identifier: F5:75:4B:92:AA:BC:26:81:DF:F3:88:60:DC:E9:BA:DD:44:00:13:9B
Certificate issuer:       /CN=A912F441/serialNumber=F5754B92AABC2681DFF38860DCE9BADD4400139B
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9XVLkqq8JoHf84hg3Om63UQAE5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F441/A58BE4683E0A11F19633AD1DA8833773/9XVLkqq8JoHf84hg3Om63UQAE5s.mft
Manifest number:          56
Signing time:             Mon 05 Oct 2026 08:38:30 +0000
Manifest this update:     Mon 05 Oct 2026 08:38:30 +0000
Manifest next update:     Mon 12 Oct 2026 08:38:30 +0000
Files and hashes:         1: 9XVLkqq8JoHf84hg3Om63UQAE5s.crl (hash: CvSqE5uovUpBvEEkmyV5PvjNRWvWCpD7EAksvT/liBs=)
                          2: 9019A36C3E1511F1A306071DB0833773.roa (hash: qFpaUvNcy06CyqhmCRJk7avcwKJJ8xKplcr6b79/BGk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F441/A58BE4683E0A11F19633AD1DA8833773/9XVLkqq8JoHf84hg3Om63UQAE5s.crl
                          rsync://rpki.apnic.net/member_repository/A912F441/A58BE4683E0A11F19633AD1DA8833773/9XVLkqq8JoHf84hg3Om63UQAE5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9XVLkqq8JoHf84hg3Om63UQAE5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 08:38:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F441, serialNumber=F5754B92AABC2681DFF38860DCE9BADD4400139B
        Validity
            Not Before: Oct  5 08:38:30 2026 GMT
            Not After : Oct 12 08:38:30 2026 GMT
        Subject: CN=6ac36206-f521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6a:d2:8b:52:c0:e7:14:00:26:6d:51:e0:96:
                    d9:8c:79:74:3e:da:bd:a5:50:07:fb:bf:d5:1d:b4:
                    a8:8a:3b:99:1a:2f:5c:ed:b4:cc:28:8e:8a:9b:ed:
                    8b:08:34:07:df:27:94:fb:34:81:fd:3c:1d:6f:24:
                    0e:8c:87:33:d2:f5:c0:03:0b:7b:b6:dc:fc:f3:a3:
                    71:a3:78:d9:bf:54:7d:65:cb:e2:34:07:83:e4:4c:
                    62:28:16:ad:de:cc:5c:a0:e2:37:24:0d:72:8a:1a:
                    40:90:f8:20:f7:59:cc:e3:05:6a:32:1e:a2:dd:25:
                    64:63:64:d0:2c:19:6c:42:e3:f5:4f:9e:75:4a:de:
                    76:3c:31:ab:70:0a:ce:a7:2e:b5:e7:af:f3:78:8b:
                    75:ee:10:8e:0c:c8:fe:59:a5:b7:56:99:ca:03:37:
                    f1:54:c9:a2:1e:a1:f6:2b:2b:99:cc:40:9a:6a:a4:
                    be:12:8f:dc:4b:b3:d9:60:2b:f2:eb:67:7a:1c:ec:
                    4d:91:15:02:25:42:ae:00:6a:f8:89:75:ed:02:87:
                    95:1b:df:df:9d:d3:94:db:50:45:6e:d0:e1:4f:21:
                    47:24:18:29:19:bc:3c:d1:b2:72:c0:fa:89:33:88:
                    52:dd:6d:c1:14:e8:97:cf:b5:3e:d3:28:b1:92:5a:
                    e4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:11:69:41:23:8B:14:A8:42:A2:4F:D1:BE:66:55:E4:76:6F:11:6B
            X509v3 Authority Key Identifier:
                keyid:F5:75:4B:92:AA:BC:26:81:DF:F3:88:60:DC:E9:BA:DD:44:00:13:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F441/A58BE4683E0A11F19633AD1DA8833773/9XVLkqq8JoHf84hg3Om63UQAE5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9XVLkqq8JoHf84hg3Om63UQAE5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F441/A58BE4683E0A11F19633AD1DA8833773/9XVLkqq8JoHf84hg3Om63UQAE5s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:67:e0:ee:17:5a:7a:a8:41:e9:76:c7:b5:59:29:67:02:b4:
         cf:46:08:05:17:fd:c8:7d:2b:01:7d:6c:5c:d1:d5:65:04:44:
         8e:46:aa:1f:e4:47:a0:e5:95:7a:ba:66:3b:0b:d1:5d:30:21:
         ce:22:71:a3:d4:a8:08:8b:1e:4b:15:58:26:a2:69:ff:0b:d9:
         42:b2:0c:20:c8:e8:3e:1b:6c:76:68:f0:1f:2f:af:25:e3:59:
         ea:49:2f:97:ff:3f:04:5a:d8:c6:f6:de:9e:c8:cd:e7:c7:ce:
         aa:48:eb:75:74:2a:24:a3:8d:62:e4:e0:5a:e8:a4:4e:2e:5a:
         96:37:4d:65:27:1e:22:22:f5:26:0d:54:45:c6:9c:e3:b7:37:
         18:85:f7:97:d6:ec:e9:3b:54:a2:81:61:f9:03:2b:1b:eb:c8:
         8c:f4:dc:bd:69:a0:cc:0b:28:3a:30:49:bc:43:75:55:72:83:
         c0:0e:f1:d4:e6:e4:05:23:8b:0e:26:dc:5b:ed:fa:fe:bc:bb:
         92:4c:b7:6b:e3:14:c5:ba:ec:05:97:c6:aa:1d:c0:03:05:b9:
         9f:b9:0a:36:9e:6a:8f:21:83:c6:e0:5f:56:69:a0:86:eb:a5:
         05:dc:72:b0:a1:f2:a9:75:31:f6:7b:22:6c:7e:cd:ef:62:50:
         b3:83:c3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:24:43 2026 by rpki-client