Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft
File:                     Aonh4IK22hq6VVKEDAyrAsKjt04.mft (raw, json)
Hash identifier:          pqF3m2CeqKSVBIxa8Ejd7B+9qknnAGxLxJby+qmfRhc=
Subject key identifier:   AA:CA:89:93:11:0A:16:76:2E:DE:96:5A:09:9B:6B:43:CF:AF:16:36
Authority key identifier: 02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E
Certificate issuer:       /CN=A9144C70/serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E
Certificate serial:       016D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft
Manifest number:          06C9
Signing time:             Sun 27 Sep 2026 00:09:40 +0000
Manifest this update:     Sun 27 Sep 2026 00:09:40 +0000
Manifest next update:     Sun 04 Oct 2026 00:09:40 +0000
Files and hashes:         1: Aonh4IK22hq6VVKEDAyrAsKjt04.crl (hash: 9JdKBXN/LxfWA+MA2ma8ZiO7cYk8V/0LNWj52DjxKec=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl
                          rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 00:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144C70, serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E
        Validity
            Not Before: Sep 27 00:09:40 2026 GMT
            Not After : Oct  4 00:09:40 2026 GMT
        Subject: CN=6ab85ec4-12b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:10:a9:14:57:2a:05:81:c5:b4:9c:73:3a:
                    06:13:6c:36:59:b8:90:93:07:8c:9e:92:14:9a:08:
                    06:19:c1:0d:6a:97:f2:d5:e6:34:1d:b0:2a:e7:21:
                    a8:7a:08:35:61:b6:e3:cd:41:a9:d2:69:4a:1c:11:
                    e6:c6:c2:22:b9:1f:cc:98:af:ba:e5:f5:9c:7a:d7:
                    70:b2:c8:15:42:94:f8:f9:16:11:1a:4d:08:03:2e:
                    44:08:fe:17:f0:37:1a:2c:15:5d:8b:1a:5e:6d:87:
                    56:7c:f1:df:b7:a6:72:e5:c2:e8:ed:f2:24:a7:fe:
                    db:d1:6d:78:7c:5e:bf:2a:1d:14:88:28:d0:c1:b0:
                    c7:c7:20:26:cd:77:b0:04:d0:b3:98:09:12:fc:c6:
                    fe:3e:fe:8d:1f:b2:7f:fd:08:21:df:2c:f6:d2:ff:
                    a6:5d:05:17:ed:1d:7a:89:3a:97:45:da:e1:fe:16:
                    12:96:15:0a:f9:2d:aa:ba:a2:5e:2e:05:bc:88:fb:
                    96:15:95:94:67:57:83:0a:29:e8:20:8b:c5:ed:e9:
                    72:b0:5d:90:5e:f3:83:2d:e6:f5:63:ef:bf:b8:26:
                    cf:97:9b:c0:6e:14:ed:09:1c:06:7b:bb:61:59:a5:
                    27:2f:fd:54:c8:43:63:50:99:35:81:34:40:bb:28:
                    e3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CA:89:93:11:0A:16:76:2E:DE:96:5A:09:9B:6B:43:CF:AF:16:36
            X509v3 Authority Key Identifier:
                keyid:02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:8d:0c:06:d4:01:d7:95:e4:b6:02:6f:f2:8f:8f:04:c9:51:
         32:63:e3:4e:d9:8a:e4:b6:32:c1:4d:07:cb:8d:66:2c:5f:61:
         eb:b5:7e:10:14:c9:0b:91:67:c7:f3:36:c4:8a:93:c4:b8:8a:
         25:eb:55:af:9f:14:b5:e6:ea:f5:d9:eb:b8:f6:a3:64:51:c8:
         d3:91:08:de:6b:6b:37:18:2a:c6:7b:22:6d:a9:b5:18:21:0e:
         8a:3f:36:42:d5:65:b2:d9:93:4b:7a:5a:b9:e5:b2:f6:0b:db:
         71:52:3b:be:fd:35:0d:a1:d2:0d:18:cf:53:3f:b7:c0:55:65:
         73:b2:05:2e:44:d9:15:b3:08:fd:9f:4a:ee:81:e6:d3:8c:2f:
         f7:ba:aa:c5:c8:35:5e:8a:b3:e8:d0:ac:f5:cb:91:26:90:ff:
         69:e0:49:6a:6f:6e:ed:fb:27:47:cf:7b:0c:7f:d2:6d:fd:c8:
         cc:67:1b:91:55:08:6e:d8:56:44:63:7a:30:3d:a1:1a:23:36:
         61:4f:b4:9d:74:c0:42:6e:f0:c8:25:9a:32:0e:0f:99:69:64:
         8e:25:10:86:9c:25:0b:d1:9f:77:b5:16:64:48:a3:a9:d1:ed:
         79:1c:e7:ea:2b:72:b9:ca:35:de:c1:de:3c:a3:83:43:f2:fd:
         a8:f5:de:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:50:40 2026 by rpki-client