Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170DA5/CE0EDA26571A11F0B8507341C4F9AE02/Psexptohoad1gV0cv-cjFLipXdk.mft
File:                     Psexptohoad1gV0cv-cjFLipXdk.mft (raw, json)
Hash identifier:          i+CmxfzmRV+nvtbmrcuymybLo51acRHiLJu/lL4nHRY=
Subject key identifier:   D4:3C:86:46:51:2D:F8:8F:78:CB:92:B0:86:90:B8:2B:42:9A:E3:CF
Authority key identifier: 3E:C7:B1:A6:DA:21:A1:A7:75:81:5D:1C:BF:E7:23:14:B8:A9:5D:D9
Certificate issuer:       /CN=A9170DA5/serialNumber=3EC7B1A6DA21A1A775815D1CBFE72314B8A95DD9
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psexptohoad1gV0cv-cjFLipXdk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170DA5/CE0EDA26571A11F0B8507341C4F9AE02/Psexptohoad1gV0cv-cjFLipXdk.mft
Manifest number:          E9
Signing time:             Wed 23 Sep 2026 06:14:28 +0000
Manifest this update:     Wed 23 Sep 2026 06:14:28 +0000
Manifest next update:     Wed 30 Sep 2026 06:14:28 +0000
Files and hashes:         1: Psexptohoad1gV0cv-cjFLipXdk.crl (hash: O5nuFt7OVWmhweggEXctv07rqYNyVYvkcRqUc77BBGI=)
                          2: F99E9E78571B11F093AD0C10C4F9AE02.roa (hash: dUUwZU3vNKGFlq4SqfawU3zy7/pCPL6xtG7GnE/gNvk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170DA5/CE0EDA26571A11F0B8507341C4F9AE02/Psexptohoad1gV0cv-cjFLipXdk.crl
                          rsync://rpki.apnic.net/member_repository/A9170DA5/CE0EDA26571A11F0B8507341C4F9AE02/Psexptohoad1gV0cv-cjFLipXdk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psexptohoad1gV0cv-cjFLipXdk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:14:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170DA5, serialNumber=3EC7B1A6DA21A1A775815D1CBFE72314B8A95DD9
        Validity
            Not Before: Sep 23 06:14:28 2026 GMT
            Not After : Sep 30 06:14:28 2026 GMT
        Subject: CN=6ab36e44-5ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8a:3a:a7:81:f0:35:6e:18:30:01:1e:be:43:
                    ab:a7:25:9c:3b:13:1b:82:51:d9:36:42:46:2f:a4:
                    92:1c:42:61:f9:d0:03:54:5c:bb:d1:ef:e8:c5:b9:
                    93:dd:98:a2:e2:1e:4c:37:88:99:e5:82:7f:79:0d:
                    18:a6:f3:36:65:a3:c9:a7:e2:30:b0:7c:8c:1d:b2:
                    95:5e:c4:40:86:59:a8:85:e6:52:c7:bb:c9:28:9f:
                    94:bd:60:80:74:2e:d3:7a:13:70:36:d0:df:38:4a:
                    73:73:f4:03:61:3b:70:7b:a9:a4:6f:49:e6:fa:f9:
                    9b:5e:a7:ce:31:98:c7:1b:25:09:27:b1:f2:15:14:
                    54:4a:b6:a5:0e:ba:2a:1a:af:f2:77:8e:39:c6:0f:
                    53:fb:69:93:85:28:49:fb:89:00:34:99:82:28:ea:
                    b1:7e:6a:03:42:ac:57:aa:60:17:03:f0:9e:a0:10:
                    9b:36:01:48:5e:5d:5f:8b:b3:c6:be:f6:5b:c6:ce:
                    6d:2f:41:05:38:5e:3f:58:84:30:84:cf:21:b7:22:
                    64:ad:ec:ea:48:f0:ec:a5:bd:d2:78:4e:2f:15:15:
                    d6:bc:ab:3a:bf:b3:e2:a8:94:07:cf:ff:8f:b3:dd:
                    d0:53:1a:96:57:65:c6:e2:8f:ad:62:6e:70:0d:67:
                    ad:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3C:86:46:51:2D:F8:8F:78:CB:92:B0:86:90:B8:2B:42:9A:E3:CF
            X509v3 Authority Key Identifier:
                keyid:3E:C7:B1:A6:DA:21:A1:A7:75:81:5D:1C:BF:E7:23:14:B8:A9:5D:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170DA5/CE0EDA26571A11F0B8507341C4F9AE02/Psexptohoad1gV0cv-cjFLipXdk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psexptohoad1gV0cv-cjFLipXdk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DA5/CE0EDA26571A11F0B8507341C4F9AE02/Psexptohoad1gV0cv-cjFLipXdk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:d7:26:2c:1f:0a:6a:b5:d6:ec:30:48:b2:1b:65:e0:7f:26:
         45:7e:95:75:c3:7b:53:08:a4:74:f3:35:81:a7:c1:1a:22:1d:
         d1:11:e3:61:12:70:f8:c4:b5:ef:bd:d6:02:72:5a:9f:a6:68:
         7b:ed:98:8c:80:6f:11:06:16:41:ef:69:25:c7:cc:d4:65:0d:
         eb:1c:a9:a0:11:ef:39:1c:dd:21:df:1c:98:9e:82:22:61:e5:
         c4:83:da:d7:55:68:33:59:9e:98:17:50:3d:00:a6:c1:81:32:
         75:1a:de:b2:69:d8:45:c0:1a:e6:64:75:df:6b:ea:de:33:1a:
         7d:e1:7a:b7:64:47:5c:d1:95:dd:85:18:c1:d4:85:24:36:09:
         dc:01:a1:cf:f1:a6:80:1c:16:97:10:2d:24:dd:42:7c:6c:ff:
         8e:14:40:79:9e:16:e1:87:a5:d7:48:08:88:71:79:a2:ad:e4:
         55:9b:7b:8b:dc:df:41:f0:14:d3:64:38:dc:e2:b5:9f:32:a0:
         36:3e:5f:4c:62:51:17:af:5b:6c:23:ae:44:de:7f:2e:76:e5:
         fd:28:b9:b4:f8:23:3b:f6:30:7c:25:80:1f:c0:b8:25:7f:b6:
         7b:99:5a:af:4c:aa:7f:61:ad:15:71:6b:e3:bf:e2:c8:19:d0:
         47:f6:df:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:26:16 2026 by rpki-client