Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917400B/751F2FEEA50511F1912567AC3311F970/pV9UuqfQtkfrP4XvIJInVGiUaKI.mft
File:                     pV9UuqfQtkfrP4XvIJInVGiUaKI.mft (raw, json)
Hash identifier:          7X0jlC3HFrCXEg5zwS857rc5wqXIQNnkzGUJarDw6j4=
Subject key identifier:   AA:8F:61:6C:EA:DC:91:61:81:C4:D0:DB:60:2E:D4:AE:33:3C:3B:40
Authority key identifier: A5:5F:54:BA:A7:D0:B6:47:EB:3F:85:EF:20:92:27:54:68:94:68:A2
Certificate issuer:       /CN=A917400B/serialNumber=A55F54BAA7D0B647EB3F85EF20922754689468A2
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV9UuqfQtkfrP4XvIJInVGiUaKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917400B/751F2FEEA50511F1912567AC3311F970/pV9UuqfQtkfrP4XvIJInVGiUaKI.mft
Manifest number:          0E
Signing time:             Wed 23 Sep 2026 08:53:15 +0000
Manifest this update:     Wed 23 Sep 2026 08:53:14 +0000
Manifest next update:     Wed 30 Sep 2026 08:53:14 +0000
Files and hashes:         1: pV9UuqfQtkfrP4XvIJInVGiUaKI.crl (hash: mmxmx0yyK2+4zogYpYF5+aO3Xrjb0NrMXYvN/4f+6L8=)
                          2: 5F933FFCA50611F19CD6341B3411F970.roa (hash: gndbqML7al7PN9otqQyfPX/KFL5MStbXV555/uvySpc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917400B/751F2FEEA50511F1912567AC3311F970/pV9UuqfQtkfrP4XvIJInVGiUaKI.crl
                          rsync://rpki.apnic.net/member_repository/A917400B/751F2FEEA50511F1912567AC3311F970/pV9UuqfQtkfrP4XvIJInVGiUaKI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV9UuqfQtkfrP4XvIJInVGiUaKI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917400B, serialNumber=A55F54BAA7D0B647EB3F85EF20922754689468A2
        Validity
            Not Before: Sep 23 08:53:14 2026 GMT
            Not After : Sep 30 08:53:14 2026 GMT
        Subject: CN=6ab3937b-75b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:03:43:8d:d4:cc:18:a9:21:6d:30:51:ae:fb:
                    79:7f:52:99:8e:e8:88:d6:85:25:80:ae:d8:3d:20:
                    85:24:f4:96:79:d2:61:09:e1:45:98:16:48:b4:75:
                    a2:2f:96:96:dc:42:dd:29:bb:6f:7c:23:3d:ae:39:
                    2a:ae:0a:e0:a9:3e:9f:b5:5e:1f:a6:52:26:68:2d:
                    9c:11:39:5c:92:d3:8a:11:8e:18:08:81:5a:e2:a0:
                    46:9c:34:19:dc:25:09:c4:20:07:42:b2:cd:66:42:
                    7a:ed:e2:a3:8d:17:ab:d1:1a:9b:81:0e:5c:67:e7:
                    fb:84:6e:f9:72:0f:e4:1e:3e:b1:e8:bc:7a:13:c5:
                    ed:09:44:86:01:dd:46:f2:71:cf:6d:9e:66:63:66:
                    7f:d3:be:f3:20:97:16:3a:ac:e5:5f:4d:9d:88:05:
                    40:44:ba:4b:8b:4f:e8:9e:66:6b:7e:5d:c5:61:e0:
                    fd:1c:3b:c0:2a:e4:0c:fe:b8:7c:a9:71:a8:72:43:
                    c1:f8:30:9a:2f:b0:86:36:73:d8:53:41:27:58:64:
                    3c:6d:bd:4a:c8:19:82:05:0d:9a:7a:99:88:3b:c4:
                    7e:a4:52:f6:1a:37:b8:58:53:db:5e:83:a5:6e:dd:
                    38:1e:2a:95:b7:d8:0d:2e:0d:1c:d1:7b:fa:35:eb:
                    fd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8F:61:6C:EA:DC:91:61:81:C4:D0:DB:60:2E:D4:AE:33:3C:3B:40
            X509v3 Authority Key Identifier:
                keyid:A5:5F:54:BA:A7:D0:B6:47:EB:3F:85:EF:20:92:27:54:68:94:68:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917400B/751F2FEEA50511F1912567AC3311F970/pV9UuqfQtkfrP4XvIJInVGiUaKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV9UuqfQtkfrP4XvIJInVGiUaKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917400B/751F2FEEA50511F1912567AC3311F970/pV9UuqfQtkfrP4XvIJInVGiUaKI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:17:07:b5:7c:e4:8c:2f:1d:cf:1e:c2:b9:4d:06:50:74:e3:
         7f:a4:9d:6f:78:e9:e1:1a:81:f7:81:ef:e4:68:bf:43:d6:be:
         b6:13:2d:f8:a5:6b:fc:9f:38:4e:cf:75:b9:55:60:f9:b4:3a:
         99:0a:62:19:fb:50:40:72:b2:a3:6a:bb:ae:74:fd:08:93:f3:
         88:e9:7f:68:3d:4b:ee:1f:62:00:fa:34:bf:f0:fc:40:01:74:
         23:19:aa:4e:fe:21:9a:da:24:8b:ce:bd:55:f0:33:35:f1:e3:
         f0:09:bc:13:df:68:f3:14:ea:d4:93:76:f3:f1:55:28:d7:ca:
         13:8f:a1:9f:62:3d:bf:a6:a5:79:43:17:3b:09:8f:38:e4:1b:
         7f:d1:21:06:b9:15:f0:45:11:ac:a9:fe:9d:93:f1:d9:03:87:
         45:8a:0a:a2:15:13:e6:67:27:9f:8d:e5:71:b2:2b:8f:e4:11:
         f2:95:bc:44:02:65:a2:34:7f:db:15:cc:e6:11:b1:5b:11:9d:
         ba:67:c4:9f:5d:b1:1a:4e:dd:a8:aa:a2:c2:b9:e8:34:ca:e9:
         0b:3f:10:e6:bb:a3:ba:86:72:25:77:c1:bf:9e:c7:ca:0a:22:
         08:b4:8d:b0:0c:32:c4:d9:6c:25:ee:38:36:6f:1e:c6:cc:c7:
         76:51:34:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:25:33 2026 by rpki-client