Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft
File:                     fF1W_s9Nolmhwq4euK8HmiqpB7g.mft (raw, json)
Hash identifier:          tAGZo1n9LcLivEkPDkiAvE69PtTpPggnH+awDEUo4qk=
Subject key identifier:   D2:5A:18:DB:D2:F9:DE:1D:FE:6E:44:68:D2:B3:A8:AB:19:57:03:55
Authority key identifier: 7C:5D:56:FE:CF:4D:A2:59:A1:C2:AE:1E:B8:AF:07:9A:2A:A9:07:B8
Certificate issuer:       /CN=A9130AC8/serialNumber=7C5D56FECF4DA259A1C2AE1EB8AF079A2AA907B8
Certificate serial:       11C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft
Manifest number:          11B6
Signing time:             Thu 24 Sep 2026 17:08:13 +0000
Manifest this update:     Thu 24 Sep 2026 17:08:13 +0000
Manifest next update:     Thu 01 Oct 2026 17:08:13 +0000
Files and hashes:         1: fF1W_s9Nolmhwq4euK8HmiqpB7g.crl (hash: XYFDFPpAdqOWCChWR6fdvkY9Tw/xxWaVDAdeVLuB28M=)
                          2: 39D0B1102F7911E9A4F69342C4F9AE02.roa (hash: wzwPxjokrn9uxkNklI9+ypdJo0cokVdmN0yENyG/JSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.crl
                          rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 17:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4546 (0x11c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130AC8, serialNumber=7C5D56FECF4DA259A1C2AE1EB8AF079A2AA907B8
        Validity
            Not Before: Sep 24 17:08:13 2026 GMT
            Not After : Oct  1 17:08:13 2026 GMT
        Subject: CN=6ab558fd-10ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:db:d2:2f:e6:de:46:42:66:96:3e:ba:4f:f0:
                    26:ab:85:91:12:10:21:ee:25:c6:72:b3:e5:85:70:
                    59:f3:a3:09:e8:85:bd:db:61:ed:9a:94:ea:5a:b3:
                    67:cc:54:59:99:f0:18:86:bc:4d:af:07:29:9a:51:
                    04:6e:7d:2a:b7:80:a9:20:79:c6:e2:02:01:7c:f6:
                    02:e8:a9:96:c1:0c:71:9d:06:44:a8:1f:e9:e9:57:
                    41:9b:8e:b8:85:13:d2:aa:f1:53:1c:84:ee:10:84:
                    a7:cf:da:6e:07:c2:22:5e:69:e5:39:9a:b6:4b:9a:
                    45:a6:f3:49:73:05:f6:23:70:2f:36:74:ca:19:e7:
                    75:5c:2a:f7:a2:b3:68:87:d0:7c:e5:eb:99:89:af:
                    c4:a8:0d:7f:bb:49:7d:f7:ce:e2:60:39:9e:b5:9c:
                    b8:96:4b:5c:46:86:49:5d:a7:37:88:e9:76:d4:6f:
                    6c:8b:47:60:75:65:9c:50:61:9e:23:a1:1d:03:eb:
                    63:e3:a5:fd:fd:f3:b3:23:d0:7b:57:b3:76:87:bc:
                    44:c2:97:0e:06:f2:00:8f:ee:06:fc:32:b4:0e:a0:
                    4d:6a:f8:e0:86:4a:d7:ab:a6:7d:41:86:fc:21:73:
                    e3:c9:02:1e:d9:83:b0:58:d3:40:cd:d1:09:10:00:
                    99:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5A:18:DB:D2:F9:DE:1D:FE:6E:44:68:D2:B3:A8:AB:19:57:03:55
            X509v3 Authority Key Identifier:
                keyid:7C:5D:56:FE:CF:4D:A2:59:A1:C2:AE:1E:B8:AF:07:9A:2A:A9:07:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:62:10:02:4c:94:e6:0f:a6:26:ab:b0:03:fa:31:15:b2:e1:
         ed:cc:8c:05:b4:84:22:f8:4c:b2:1c:56:e3:f6:49:20:32:42:
         b9:fe:8b:c6:b0:d3:0d:62:23:64:63:aa:3b:1a:58:00:12:06:
         89:ab:f6:71:93:31:75:3b:30:d8:b2:41:ae:3d:d9:dd:61:db:
         79:ed:46:98:fd:94:0d:e3:bf:72:db:f2:33:53:bf:07:6c:40:
         94:fb:78:37:7f:d2:8a:0f:c9:84:74:21:94:3c:4b:d8:88:cb:
         55:f4:9a:35:7c:c2:0c:6a:f8:40:05:68:cd:e7:40:27:a0:50:
         51:06:53:43:5d:21:3b:14:88:7d:77:05:7d:67:07:d1:98:bc:
         7f:c8:d1:95:6c:61:67:17:a5:05:58:68:53:f6:bf:70:e5:f9:
         29:6e:bb:ea:3a:61:b0:cc:e7:91:0b:48:b2:94:09:fa:15:64:
         e5:d5:04:3c:4d:0d:41:da:83:e6:26:f5:0e:a9:24:8a:1f:e4:
         81:52:78:ee:b2:a9:52:e6:61:19:37:2b:01:b7:c6:3f:58:07:
         c0:84:d0:49:4b:1b:7a:90:1c:22:5f:f6:95:42:6d:21:dc:0f:
         62:9e:27:8f:65:07:1c:84:e0:94:be:50:2e:f3:ae:43:35:79:
         0a:67:00:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:43:57 2026 by rpki-client