Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft
File:                     e9PkPRNOUjXpdgPOi6lIa2KpseY.mft (raw, json)
Hash identifier:          GMZfbkeOqjLVqGHURJacyhd8nvi5+VI3A8lT3i2cZdQ=
Subject key identifier:   D7:3D:E2:A2:23:F8:AF:AD:EE:61:E1:0F:32:D0:BA:D5:2D:E8:69:58
Authority key identifier: 7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6
Certificate issuer:       /CN=A915C631/serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6
Certificate serial:       0437
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft
Manifest number:          041A
Signing time:             Fri 25 Sep 2026 00:17:22 +0000
Manifest this update:     Fri 25 Sep 2026 00:17:21 +0000
Manifest next update:     Fri 02 Oct 2026 00:17:21 +0000
Files and hashes:         1: e9PkPRNOUjXpdgPOi6lIa2KpseY.crl (hash: LOWMAITTcbLUg/DeR8VWZRxtYfnSUlXzPFb/J1Wcyfo=)
                          2: 63F05DE02F1D11EDA3E29B09C4F9AE02.roa (hash: vOR7MkFdjtwcQmI8Q2E4naB63wEs/ZKiAQLoEidZx/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl
                          rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1079 (0x437)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C631, serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6
        Validity
            Not Before: Sep 25 00:17:21 2026 GMT
            Not After : Oct  2 00:17:21 2026 GMT
        Subject: CN=6ab5bd91-21ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e3:d9:f9:7c:de:72:7f:88:2c:db:2b:39:f7:
                    ef:99:80:7d:03:ef:c7:c6:84:0e:30:bb:c9:fc:d2:
                    0b:56:07:d3:4c:d5:d3:bc:cc:de:b6:76:2d:90:d1:
                    eb:18:23:c6:6e:30:00:fa:d3:15:ca:da:2c:47:d8:
                    3a:24:96:13:28:c9:28:6e:94:70:38:f2:72:b6:10:
                    a1:07:b2:7c:00:82:4f:fb:01:10:9e:e5:cb:7d:e2:
                    66:ae:f8:0d:28:ac:b2:21:b4:bf:56:ae:fe:73:91:
                    85:27:51:c8:a6:4e:08:ec:9b:fc:23:07:9e:3d:45:
                    d7:15:3b:0d:67:e7:50:5f:f6:41:0c:ae:f5:93:1e:
                    75:f4:89:6e:8f:c9:3d:2a:b9:d6:b3:a3:f9:ea:a5:
                    9c:7a:3a:56:a3:c7:ae:18:d2:f8:46:76:9c:3d:2a:
                    3b:9d:d4:73:19:b7:b9:03:4c:f6:84:c7:3f:d0:ca:
                    e1:54:df:f7:4f:3d:ea:42:c1:c6:53:65:39:9c:02:
                    af:8a:bd:67:1a:aa:db:00:a8:d7:cb:9f:b0:1f:51:
                    28:9d:17:8d:f4:37:78:70:67:c5:57:da:05:95:16:
                    fb:0e:a2:80:a9:2f:4b:1a:ad:fa:ee:42:41:67:24:
                    fb:9f:42:82:08:0c:fb:8a:8a:29:d6:62:20:da:c4:
                    51:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3D:E2:A2:23:F8:AF:AD:EE:61:E1:0F:32:D0:BA:D5:2D:E8:69:58
            X509v3 Authority Key Identifier:
                keyid:7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:1d:c5:ff:31:f3:d3:22:ce:2d:ba:2b:06:54:69:4c:a2:bb:
         34:d7:60:f5:63:54:75:12:ce:55:5f:a8:87:60:6c:42:96:a2:
         b0:19:66:c8:d4:46:42:aa:20:08:72:cb:46:7d:f6:fb:fb:cb:
         32:99:29:90:48:51:80:37:d2:99:60:2a:2b:88:25:9c:d6:7c:
         ba:e5:45:a4:2f:26:00:ae:be:86:7e:5b:34:1f:28:c5:74:f7:
         b8:51:da:b3:b4:7b:54:89:6f:f2:95:ee:05:45:65:5e:44:37:
         d2:2c:40:6e:f2:6c:70:cc:e0:0f:03:20:79:96:71:f2:23:d3:
         f2:9a:a1:71:36:62:7d:58:fb:06:bc:32:4f:c7:e1:93:9c:9a:
         e9:3b:46:2a:7d:47:6b:02:6d:01:73:67:d6:0a:f4:f5:bb:54:
         a1:dc:eb:70:e5:16:f1:61:09:f4:43:7f:0b:9d:26:ec:e8:29:
         1e:5d:5c:45:67:01:c5:0f:32:a9:7b:ff:25:5f:91:ce:82:c0:
         32:40:0c:95:7a:be:4d:15:e4:74:80:72:a9:fa:12:f9:a3:52:
         ef:8d:64:4a:05:ea:d7:03:3b:29:b0:ff:2b:d9:06:c8:04:05:
         e7:1b:aa:46:ca:e9:62:68:70:45:e4:46:ef:2b:f8:9c:61:bc:
         0a:e9:1d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:53:19 2026 by rpki-client