Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
File:                     tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft (raw, json)
Hash identifier:          q6M8UVL2lWdya1Ydpif7CueSL8Ux8LrNDvg81lA1a2E=
Subject key identifier:   9D:56:33:41:DD:19:E2:96:1A:F3:F9:12:36:46:39:CB:8A:0F:37:31
Authority key identifier: B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F
Certificate issuer:       /CN=A9131181/serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F
Certificate serial:       0123
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
Manifest number:          011B
Signing time:             Fri 25 Sep 2026 05:59:31 +0000
Manifest this update:     Fri 25 Sep 2026 05:59:31 +0000
Manifest next update:     Fri 02 Oct 2026 05:59:31 +0000
Files and hashes:         1: tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl (hash: ACnXQJN1sOLqf49j9dmSmmZG83OZhl87YYnfxxeYnH8=)
                          2: AD57493E0B7B11F09EB3322EC4F9AE02.roa (hash: kJueAKUE3Sd3o6wDYoPNiGbGdW9zWY3YeQpVU6pBXdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl
                          rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:59:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131181, serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F
        Validity
            Not Before: Sep 25 05:59:31 2026 GMT
            Not After : Oct  2 05:59:31 2026 GMT
        Subject: CN=6ab60dc3-b08e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:95:01:14:67:2e:38:79:83:73:3f:5b:c2:95:
                    74:7f:ef:8c:78:1a:79:a5:9f:89:19:35:eb:54:06:
                    f2:a7:3b:a4:52:d7:2d:95:fa:15:92:7c:1b:02:00:
                    67:f0:31:2f:fb:46:63:cb:31:dd:4f:35:19:39:79:
                    4f:3d:49:8e:0f:2b:31:03:3e:53:bb:6e:3f:a0:97:
                    e7:38:8e:7e:83:82:7d:f4:82:88:1a:f0:36:5d:bb:
                    0c:27:f9:4c:e2:9e:6b:0e:6d:a7:a8:c8:cc:a7:9a:
                    b1:e2:bc:a8:82:05:7e:29:7e:e2:d5:d3:44:7e:11:
                    8e:8c:d1:e2:3c:15:35:6f:9f:09:29:36:fa:80:c0:
                    a4:27:fd:d1:62:a6:56:30:a1:d8:32:d6:62:a8:2f:
                    1b:71:a2:58:93:59:55:6a:fd:be:a7:8e:f8:45:1a:
                    2e:23:4a:0d:65:b7:a7:61:46:62:6c:0e:90:a3:45:
                    1e:11:e9:38:5c:9c:a0:e0:bf:56:c7:93:42:77:fd:
                    6b:81:95:19:92:10:97:82:a9:e7:f0:d0:0a:70:5f:
                    41:4b:ec:6f:92:11:2a:08:da:d0:78:5d:c9:a5:f8:
                    a7:06:4d:4d:2a:68:28:c4:90:22:f2:67:4b:a0:03:
                    f1:e6:1c:df:43:01:1d:50:38:65:7a:40:db:5b:e5:
                    bd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:56:33:41:DD:19:E2:96:1A:F3:F9:12:36:46:39:CB:8A:0F:37:31
            X509v3 Authority Key Identifier:
                keyid:B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:14:dd:6d:aa:08:01:df:b7:8a:2f:96:d3:e4:54:62:62:15:
         bc:82:7b:d1:26:29:6e:ab:69:0f:0a:57:13:ba:b4:02:01:68:
         16:dd:f2:7f:4a:49:ca:03:48:2d:fa:62:8c:ab:d3:05:99:0f:
         84:3c:2e:21:cd:e9:64:01:0c:a1:c1:36:a2:47:7b:b6:40:8f:
         9f:a3:40:fd:e4:f9:6a:d3:d4:c3:56:07:a1:ea:29:7f:e8:f5:
         a8:68:0e:16:5b:2d:8b:03:60:fe:0d:0b:b0:00:89:30:ea:77:
         2f:ac:ca:32:47:5f:70:95:d0:26:41:08:fb:0e:58:7c:0c:74:
         b1:67:31:4d:b9:15:9f:3a:49:43:7b:e4:81:34:de:08:c0:0f:
         06:f3:61:6b:a4:5d:74:5b:80:75:47:d7:f2:70:36:98:39:6a:
         38:fd:6e:72:21:00:26:df:13:5b:3b:93:67:82:4d:8f:64:fe:
         ff:d8:94:2b:b4:ed:33:d7:d5:21:88:ce:31:60:76:a9:99:c4:
         75:e2:3e:c4:f8:63:bb:cb:12:cf:ea:29:8e:48:af:c7:54:88:
         b3:4e:77:17:dd:3c:8e:de:f7:32:27:a0:9b:6f:81:d4:40:dc:
         d5:01:60:c4:79:d2:40:54:34:88:b3:10:9b:0c:97:b9:16:df:
         ea:9d:dd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:21:17 2026 by rpki-client