Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft
File:                     9pdbCtxHKKQNClkNM23U-ro5DwA.mft (raw, json)
Hash identifier:          HLWQ1nwbjcuZWIlz6BBEnaU8lqdLXB94N1R2BVwexWU=
Subject key identifier:   FC:14:F9:22:A5:EA:72:DB:8E:1F:FF:BE:AC:F6:30:36:3A:09:86:94
Authority key identifier: F6:97:5B:0A:DC:47:28:A4:0D:0A:59:0D:33:6D:D4:FA:BA:39:0F:00
Certificate issuer:       /CN=A913FA2D/serialNumber=F6975B0ADC4728A40D0A590D336DD4FABA390F00
Certificate serial:       9C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pdbCtxHKKQNClkNM23U-ro5DwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft
Manifest number:          99
Signing time:             Wed 23 Sep 2026 07:10:21 +0000
Manifest this update:     Wed 23 Sep 2026 07:10:20 +0000
Manifest next update:     Wed 30 Sep 2026 07:10:20 +0000
Files and hashes:         1: 9pdbCtxHKKQNClkNM23U-ro5DwA.crl (hash: 445D1qfXqqmDnv/58ByZ5nYnf8oWb4gYRJRtzhMtCgo=)
                          2: F82BF6A8D3FD11F08BA98C7BC4F9AE02.roa (hash: 6WkyvNNnzEKbhZLPxsCnSzPE8ILtaJ60SG7+lHKUE78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.crl
                          rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pdbCtxHKKQNClkNM23U-ro5DwA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FA2D, serialNumber=F6975B0ADC4728A40D0A590D336DD4FABA390F00
        Validity
            Not Before: Sep 23 07:10:20 2026 GMT
            Not After : Sep 30 07:10:20 2026 GMT
        Subject: CN=6ab37b5d-08d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6d:9a:d4:9e:52:fa:62:e3:87:56:a7:8f:02:
                    bc:44:10:56:c9:96:fc:55:f8:75:fe:89:68:ab:00:
                    13:81:20:1f:67:e6:39:ae:fe:8b:53:63:ab:5e:24:
                    ea:e4:5a:2c:20:a6:00:52:e9:7e:6b:36:8a:9f:69:
                    5e:74:c8:9d:14:74:7c:f3:8a:3b:7c:d6:f6:f9:4c:
                    ea:36:1b:09:75:bd:47:b8:96:2d:91:b0:c0:ed:47:
                    1c:c6:72:28:0f:32:7c:36:dd:db:a0:00:18:1d:93:
                    25:4a:9d:20:98:b4:a5:07:05:80:eb:57:d8:31:45:
                    9c:33:1c:ed:5e:1f:1d:83:5f:05:57:68:52:90:63:
                    bb:55:64:a7:e7:5b:42:fb:6b:54:73:34:99:5d:fe:
                    1c:58:23:f4:22:d5:34:c3:02:f0:64:ce:d6:d4:6e:
                    da:90:08:c3:cf:b5:2c:34:bd:fe:35:30:2a:e6:17:
                    7b:8c:7a:ac:13:5f:43:5f:88:d7:0a:d9:01:1b:dc:
                    e7:a2:e7:ad:ea:f3:dc:61:0b:69:10:f1:7e:60:d4:
                    c0:bd:ab:1a:35:7b:ba:47:38:38:d4:0a:ff:82:1f:
                    80:1d:fa:62:40:41:d4:c2:62:43:89:70:45:2e:e9:
                    68:c6:2b:13:3b:32:f8:c0:93:47:a4:af:99:0b:b5:
                    24:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:14:F9:22:A5:EA:72:DB:8E:1F:FF:BE:AC:F6:30:36:3A:09:86:94
            X509v3 Authority Key Identifier:
                keyid:F6:97:5B:0A:DC:47:28:A4:0D:0A:59:0D:33:6D:D4:FA:BA:39:0F:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pdbCtxHKKQNClkNM23U-ro5DwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:73:8f:a3:74:69:05:1e:70:e7:b6:d1:1e:12:90:ef:fe:97:
         79:ba:50:2b:ca:53:d5:99:96:41:44:8e:77:d1:c4:6b:1c:6f:
         57:a3:fa:b1:ae:9a:31:e6:26:59:72:b5:c7:cb:a1:d9:b9:f8:
         88:d1:af:6b:f6:c0:71:1d:f3:4b:d9:5c:14:44:03:31:c7:ff:
         ba:64:70:fe:46:e3:60:da:1d:5f:e1:a2:02:fb:ec:ee:a3:8b:
         42:39:64:2b:55:89:83:d0:76:c4:2c:ad:34:ce:7d:17:14:63:
         9c:12:12:f2:03:6a:96:be:f4:75:59:cc:10:e4:18:92:fc:18:
         e9:8e:a6:69:b8:35:40:1c:c1:ce:f9:25:69:d6:5a:bc:99:8d:
         41:31:52:c0:f6:6f:a5:66:b9:da:da:e9:aa:45:3a:ca:e1:f6:
         12:55:b4:31:e3:ef:83:09:01:4e:41:d4:20:19:a9:19:e5:03:
         f4:e7:19:8e:a4:0d:86:45:bc:e9:a6:62:38:6c:5f:62:51:ea:
         98:9c:7b:77:79:a5:b0:2d:ff:4d:6d:8b:f1:ff:97:f6:51:dd:
         d4:f7:72:97:1d:73:f0:f4:43:b6:f7:b1:98:86:5b:91:6b:d0:
         03:31:d3:7b:5d:7c:00:e0:58:25:6c:13:fd:56:dd:a3:b5:72:
         3f:a4:35:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 16:55:36 2026 by rpki-client