Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft
File:                     m8Zs_4CainEhIAXdnCcEerQYyKc.mft (raw, json)
Hash identifier:          zf9rPvYBmRBNGWBDv6Mda68mmjr+HJ1pVYa9244nh+Y=
Subject key identifier:   1E:63:FF:1D:5C:7D:87:94:A6:04:AC:AA:97:64:B0:01:19:A6:CE:53
Authority key identifier: 9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7
Certificate issuer:       /CN=A9173780/serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7
Certificate serial:       0B18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft
Manifest number:          0B04
Signing time:             Thu 24 Sep 2026 19:18:39 +0000
Manifest this update:     Thu 24 Sep 2026 19:18:38 +0000
Manifest next update:     Thu 01 Oct 2026 19:18:38 +0000
Files and hashes:         1: m8Zs_4CainEhIAXdnCcEerQYyKc.crl (hash: z9mXuJ/JmMAN0VN1jWYBnuhv8qKOxe1NA5oXI6pvHtI=)
                          2: 87C1A5F8245711F083602A0BC4F9AE02.roa (hash: xYfOlV7ly8PaoVxzHciXWWKH9nbZzy74G8B+L2wVsHk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl
                          rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 19:18:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2840 (0xb18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173780, serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7
        Validity
            Not Before: Sep 24 19:18:38 2026 GMT
            Not After : Oct  1 19:18:38 2026 GMT
        Subject: CN=6ab5778e-42cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:20:5e:7e:52:d9:5a:2d:c0:02:f7:6d:ce:ca:
                    c8:39:78:c8:ff:64:06:18:ee:69:08:98:95:5c:6e:
                    5c:75:1f:f1:ea:dc:81:50:29:d6:ae:0a:bb:c7:f6:
                    25:bf:9d:cd:62:51:cb:22:dd:f9:fd:07:9d:ce:35:
                    90:5a:cb:9b:70:48:66:2f:68:4f:f3:59:8a:a1:2e:
                    97:b1:e1:c4:62:b4:e4:65:8f:1f:ed:cf:94:a3:dc:
                    ac:34:5d:28:7e:aa:d3:c6:ef:42:42:60:33:db:60:
                    67:66:af:ae:0a:f1:19:a5:40:a0:3c:f7:7a:35:31:
                    79:4a:0f:48:04:fc:bb:d7:0c:38:5d:a9:8f:d2:4f:
                    fc:fc:5c:03:c5:3e:46:74:8f:1f:00:46:14:5d:34:
                    06:ff:a5:87:ee:f4:49:47:c8:0d:66:b7:31:fb:42:
                    3c:7d:5b:d3:28:5a:c2:ae:01:9a:fe:9b:a7:50:65:
                    c5:06:e6:1f:1c:f4:ec:83:2d:e6:48:b1:f2:69:26:
                    dc:9a:1d:9c:58:4c:26:6b:98:95:dd:a2:d0:aa:72:
                    ac:44:d4:e0:2f:db:07:5b:3b:ea:98:3b:47:0b:11:
                    5d:4c:35:f0:21:38:ca:15:ad:f0:ac:f0:62:46:03:
                    00:e4:ec:04:6f:25:6e:29:ff:86:9c:1c:fb:7c:54:
                    a6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:63:FF:1D:5C:7D:87:94:A6:04:AC:AA:97:64:B0:01:19:A6:CE:53
            X509v3 Authority Key Identifier:
                keyid:9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:45:4d:b2:a7:23:6d:38:45:83:6a:d6:ee:5d:a5:d7:3a:6c:
         16:91:a1:de:0e:90:44:f9:52:78:1e:8f:99:1b:9f:da:62:bf:
         cb:8b:23:99:26:06:9d:05:c5:e2:8e:c0:bb:63:3f:61:e7:ed:
         a6:9d:5d:87:c1:20:b3:42:08:92:9f:7b:fd:eb:4b:32:8f:99:
         11:b7:d2:23:2f:81:b6:de:60:4b:cf:bb:aa:19:e2:e1:e1:a8:
         a4:2d:9c:a7:ae:1f:7f:65:76:9a:d1:f0:b1:32:b6:6f:99:5f:
         b3:d0:7d:06:3c:7f:83:06:87:ff:7d:ac:04:3b:db:67:cf:e0:
         46:79:40:03:15:ed:ca:51:85:5b:8c:24:b0:d9:42:1c:23:fe:
         c9:32:9c:a1:9f:d5:62:56:71:52:98:89:44:e4:a9:53:67:71:
         26:b2:97:24:9f:f6:2c:8c:45:86:15:44:63:41:de:4d:c1:20:
         fa:54:90:a1:fd:6f:36:af:db:63:66:44:ad:ce:72:08:05:ec:
         01:7a:2c:84:a5:07:a4:fb:a5:6c:a1:b8:e5:4e:e0:90:7c:8f:
         e9:53:99:c6:60:ff:7f:79:36:24:e7:83:91:88:f0:0c:6b:2a:
         52:02:a3:0e:8e:00:f1:63:dd:7a:ee:c5:7e:e5:d3:56:93:78:
         b8:c2:65:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:02:30 2026 by rpki-client