Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft
File:                     af9o05rBdz4oqFeFx5G0qNmzhIY.mft (raw, json)
Hash identifier:          0bWrdkMAOY2UvExrF8VmuQSz4x5rs8Hc9tvJb5PDM4I=
Subject key identifier:   34:B2:60:64:78:5E:FC:B0:FD:C3:AB:97:F7:E1:05:FD:5F:58:0D:C2
Authority key identifier: 69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86
Certificate issuer:       /CN=A9148D61/serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486
Certificate serial:       02F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft
Manifest number:          02DE
Signing time:             Tue 29 Sep 2026 01:27:28 +0000
Manifest this update:     Tue 29 Sep 2026 01:27:27 +0000
Manifest next update:     Tue 06 Oct 2026 01:27:27 +0000
Files and hashes:         1: af9o05rBdz4oqFeFx5G0qNmzhIY.crl (hash: fvGY6erscYIG7jpWFgQ1eqJA+bTY1DZbZ/RhlyNOwJU=)
                          2: 34386BAAB90A11EF97D24653C4F9AE02.roa (hash: 8a9pl0B9WRoV/I8zbYuLrKWiJVi0iu0Y5myQD63MtCk=)
                          3: 349D4A7AB90A11EF97D24653C4F9AE02.roa (hash: gj01DmJfEaGsSpp5tjGsusN7Thz10FKLT4wU37QzljM=)
                          4: 35ADE898B90A11EF97D24653C4F9AE02.roa (hash: j4HW8v+J9rL2PkNopASjMuegUlrtdhRwhQv/dAW6LJM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl
                          rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 01:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 757 (0x2f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148D61, serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486
        Validity
            Not Before: Sep 29 01:27:27 2026 GMT
            Not After : Oct  6 01:27:27 2026 GMT
        Subject: CN=6abb13ff-8cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:97:6d:75:35:e1:f2:49:30:49:76:b9:06:e3:
                    e3:91:6e:fb:1e:6e:c2:19:d6:02:aa:16:96:2e:c7:
                    61:80:f4:ac:68:44:1a:99:eb:0f:2b:de:20:ef:3f:
                    cf:72:83:97:7d:df:1b:98:e2:39:a6:d4:f1:1e:8e:
                    6f:b8:c5:5a:ec:33:5b:5b:16:84:15:1f:0a:e7:72:
                    13:0b:4d:27:9c:bf:5d:84:af:72:72:58:11:d7:36:
                    3f:2a:4e:2c:d1:1b:4d:4e:8c:39:fa:c6:6f:28:b7:
                    de:e2:b9:00:5c:43:65:af:b2:90:53:01:ad:fa:de:
                    b1:e5:0d:ec:c3:a0:0e:d5:27:51:3c:7d:4a:84:14:
                    ff:d9:a4:55:53:cd:de:56:c3:08:a9:29:79:d9:4c:
                    ed:1b:cd:2e:de:8e:1d:a3:ec:70:6d:9b:7a:cf:78:
                    47:58:3d:8e:ac:98:d3:2b:1b:0d:7e:40:e4:69:69:
                    05:9d:c7:1b:51:30:55:1c:18:cc:f5:63:a4:f0:0f:
                    75:27:e3:ba:73:34:6e:72:28:6a:2a:7f:9b:85:f2:
                    89:af:3d:2c:ef:bd:10:8f:9d:8a:d3:a8:d7:93:e4:
                    33:c8:e2:3f:4e:ba:d5:fd:e3:39:9a:fb:d9:b7:47:
                    87:ab:15:48:5c:76:93:73:50:97:7f:d4:af:69:b1:
                    e5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B2:60:64:78:5E:FC:B0:FD:C3:AB:97:F7:E1:05:FD:5F:58:0D:C2
            X509v3 Authority Key Identifier:
                keyid:69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:98:61:4e:cf:61:10:a9:c3:5e:20:c1:53:e9:36:3f:3c:83:
         c1:8a:81:f0:f2:6a:8b:98:03:2a:65:cc:91:e5:3e:16:8d:f9:
         d6:30:b6:ed:4d:7a:70:74:41:4f:ff:44:8f:74:49:37:a5:96:
         ea:73:cb:3d:68:06:79:4d:25:ae:4c:78:f6:12:9b:2f:f8:82:
         66:83:89:ed:7c:62:b3:44:df:41:7f:bb:30:22:c9:9e:48:e4:
         35:43:64:52:cf:b8:31:5e:34:00:18:1f:78:97:6a:6c:86:1c:
         db:78:91:57:f5:20:45:66:d0:05:d7:ad:62:d9:89:d1:f6:73:
         2e:9d:0e:6e:8f:8c:17:7d:d6:74:04:43:04:28:5d:f2:9a:c5:
         7a:16:e5:b6:aa:0e:c9:e6:24:4f:a1:4e:b8:57:bf:b5:52:a3:
         53:5c:5d:dc:90:0a:39:dc:be:3d:58:b7:b6:5b:00:d6:fc:3b:
         0e:f8:8e:7f:f2:a7:50:b1:b6:2d:e2:c4:13:df:a2:3f:d4:41:
         4c:39:0b:0e:10:69:96:f1:88:40:34:7e:51:fc:54:4d:26:54:
         44:d3:7a:f6:99:78:73:f5:c1:3f:39:fe:74:3c:2d:0c:1b:bd:
         73:97:22:22:8e:8e:c7:a0:00:ca:b7:9e:e5:93:1c:42:b0:97:
         38:34:21:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:45:24 2026 by rpki-client