Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
File:                     9FQft3ll3hSln57yM94Z-SBfX5g.mft (raw, json)
Hash identifier:          JNvSGQaOR+7M0j1JdjyhynnH5ta8pb9pMEC4hqRHCkc=
Subject key identifier:   E6:60:53:DD:7E:33:C5:3E:EE:2D:B3:EF:1A:E1:62:56:82:8C:E7:D4
Authority key identifier: F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98
Certificate issuer:       /CN=A9137917/serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98
Certificate serial:       08B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
Manifest number:          0895
Signing time:             Sat 14 Nov 2026 20:51:53 +0000
Manifest this update:     Sat 14 Nov 2026 20:51:53 +0000
Manifest next update:     Sat 21 Nov 2026 20:51:53 +0000
Files and hashes:         1: 9FQft3ll3hSln57yM94Z-SBfX5g.crl (hash: FI4eW+Bq/0OjHxWIIfp092Urix35NACnpq12LRcxDfM=)
                          2: BB0569102A0411EB992DD32EC4F9AE02.roa (hash: HkzCk2HljndiEq4GBL2zGsRRu25qjHkzwRnuz6BJbuM=)
                          3: DF8912BEB1E511EB90B9DD25C4F9AE02.roa (hash: s0JtQjaquy1haDTdVO3sJ1UiTrHlMay3DOPS02FW8WQ=)
                          4: 992104CE2EA211EBA8D67685C4F9AE02.roa (hash: Mq0l/N1vCUMtxfQV/uhAAkIAGBUYqoCXgKbxS8XYpMA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl
                          rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2230 (0x8b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137917, serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98
        Validity
            Not Before: Nov 14 20:51:53 2026 GMT
            Not After : Nov 21 20:51:53 2026 GMT
        Subject: CN=6af8c9e9-22f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:47:ee:22:d3:d9:ad:a0:07:f0:d0:b0:9d:14:
                    fc:35:26:8e:6a:96:2b:2a:6d:06:c5:fe:96:ea:2a:
                    4e:f9:bc:e4:5c:f9:55:ed:09:18:c0:07:78:88:c3:
                    05:20:90:49:76:f9:a4:a3:66:46:22:6f:d0:5b:c8:
                    ab:0b:b9:c6:e7:87:2e:67:df:07:1d:42:67:65:a5:
                    24:42:5c:2e:01:21:9a:eb:6c:dd:61:e7:f5:e3:94:
                    5b:5f:cf:86:0c:f5:17:7d:de:51:45:41:41:83:d9:
                    c8:7b:58:a9:55:2d:34:02:d6:b0:cf:7c:8e:fb:78:
                    04:ba:8b:11:b1:09:ce:f7:03:5f:77:45:ef:80:c1:
                    e6:b2:14:ab:a7:c3:ab:b6:49:55:94:82:4b:48:df:
                    ae:61:ce:ee:0c:97:82:eb:40:b7:8b:48:2e:c3:89:
                    8d:6b:77:11:bd:28:b0:ee:d2:ec:55:3a:89:fa:ef:
                    7c:ab:3f:6f:2a:e1:63:8c:6b:3a:ce:2e:fc:f2:dc:
                    e2:81:d4:8a:5a:4d:91:91:bd:39:e1:92:8e:e3:24:
                    89:71:aa:60:2a:6f:fb:00:e5:13:1a:cc:75:a8:7a:
                    fa:56:dc:55:30:b8:b8:0e:25:6e:eb:ef:f4:38:8a:
                    01:da:44:88:9a:70:9a:7b:22:9f:7d:01:3d:ca:d3:
                    d1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:60:53:DD:7E:33:C5:3E:EE:2D:B3:EF:1A:E1:62:56:82:8C:E7:D4
            X509v3 Authority Key Identifier:
                keyid:F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:04:bd:1b:1e:17:36:13:0e:aa:73:28:49:6f:c4:ce:ff:7c:
         f5:5f:1c:5e:8c:6e:5a:92:d9:f8:05:e6:50:73:b7:1b:97:f7:
         89:a4:a7:ef:46:e8:72:97:df:2d:0d:8a:6f:ec:3f:ff:0a:89:
         d7:d6:5f:29:df:8d:9a:02:3b:f1:6c:fa:43:c0:87:f5:76:15:
         a5:40:4f:8e:33:bf:fe:db:8d:f3:9d:8a:9e:be:89:e6:f8:37:
         59:21:a3:b7:5a:97:f8:7e:6c:f5:5d:46:69:5e:f4:6b:d8:d4:
         9a:3d:8b:57:4b:b0:b1:94:f8:5f:1c:51:8a:83:08:ce:3e:86:
         cf:f7:ca:f5:2f:ab:45:65:10:45:99:c3:58:69:fa:7b:78:44:
         7d:bf:21:ec:8e:f8:9e:d5:b3:ed:e9:77:8f:b7:0b:bb:90:03:
         c0:cd:57:7d:a6:a3:9a:83:2b:c9:c5:a7:84:13:74:18:0d:3c:
         38:e4:19:32:b2:49:be:cb:e5:ae:87:2e:e0:4b:d9:5f:11:31:
         59:8a:fb:84:4c:ea:5d:f1:17:32:91:cd:9e:74:af:9d:42:2d:
         de:6a:83:f9:0b:5b:a4:76:34:5a:99:1e:f9:00:12:ad:d7:6a:
         cc:3c:46:c6:0e:4f:ac:03:b7:1d:b8:f1:28:c5:e7:e5:d3:5b:
         54:e2:c7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:13:39 2026 by rpki-client