Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft
File:                     n9G-cXTisFCTO8GixenIZUcWBfI.mft (raw, json)
Hash identifier:          4o7h4iiQpKFsCIUR/E+P9TeZkTz0X5KSipK1JGYT3T4=
Subject key identifier:   F8:0A:4C:5C:BA:11:18:D6:31:34:E5:F8:BF:E2:DA:25:FA:98:45:62
Authority key identifier: 9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2
Certificate issuer:       /CN=A9189599/serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2
Certificate serial:       086D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft
Manifest number:          0864
Signing time:             Sat 26 Sep 2026 21:00:25 +0000
Manifest this update:     Sat 26 Sep 2026 21:00:24 +0000
Manifest next update:     Sat 03 Oct 2026 21:00:24 +0000
Files and hashes:         1: n9G-cXTisFCTO8GixenIZUcWBfI.crl (hash: EOM1ogIqiGskjNm6uqTNWlebGivGPDEysUKuHftB4Mc=)
                          2: 1C9AC81A1B5411EB99C9EE6DC4F9AE02.roa (hash: w1Eixs82vTy/afrqMKLd9Os1QWh9YrXBF1bbSYUcZa0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl
                          rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 21:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2157 (0x86d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189599, serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2
        Validity
            Not Before: Sep 26 21:00:24 2026 GMT
            Not After : Oct  3 21:00:24 2026 GMT
        Subject: CN=6ab83269-f747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:82:93:c9:23:c3:5c:a1:cb:a7:7f:f9:e9:e2:
                    d3:fe:8c:14:69:fb:17:4e:1a:c5:43:81:f0:04:be:
                    95:05:da:3a:f9:9a:47:34:49:8b:2d:4c:97:7a:13:
                    1e:a1:b8:3f:dd:ad:e6:d3:0e:8f:3a:3a:9a:72:3c:
                    25:82:38:7f:79:c0:00:be:26:af:18:20:b0:5b:ee:
                    6a:c2:74:ed:9c:55:3b:39:a3:58:53:06:1c:d7:fb:
                    df:29:9d:27:50:3e:15:b5:a0:85:f4:9e:53:3b:d4:
                    65:94:2a:0e:c6:76:5d:fb:2b:d2:16:be:16:8a:b7:
                    69:0d:78:bf:7d:5e:4d:af:f9:da:1b:80:e0:3d:82:
                    1b:ac:70:06:fe:66:d5:cc:21:57:f9:a5:cb:14:e7:
                    2c:61:db:e5:1d:7b:06:fd:e8:1e:c9:63:63:18:a3:
                    9b:cc:ef:1f:81:5b:75:d6:57:56:03:30:0f:c6:1e:
                    f2:66:23:61:40:28:79:64:00:6a:23:b5:98:d1:a9:
                    0f:5f:0d:6c:63:04:66:4b:43:17:a7:1d:88:d7:72:
                    3a:cc:ea:fa:29:9b:e0:3d:d5:02:6a:5d:70:1a:8b:
                    1b:e0:1d:12:c6:34:a9:e2:f7:67:9b:2d:e1:9b:fe:
                    2d:ad:4f:38:19:16:91:bd:2f:82:1f:7f:a7:74:cf:
                    6d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0A:4C:5C:BA:11:18:D6:31:34:E5:F8:BF:E2:DA:25:FA:98:45:62
            X509v3 Authority Key Identifier:
                keyid:9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:83:9d:af:1a:0c:ae:0e:a5:e7:a5:5b:e5:9c:35:e6:c5:6b:
         a8:a8:8d:6f:a0:86:31:c8:b9:72:f2:51:aa:1f:fc:61:b9:ee:
         38:3a:37:42:fb:d6:94:65:2e:96:cc:9e:64:dd:62:23:97:4b:
         74:5c:e3:8b:e8:cc:3f:91:a0:37:3a:84:d6:4b:44:c8:2f:6c:
         b2:d4:b7:33:7b:ad:4e:56:fe:75:74:9e:91:a6:fa:82:11:37:
         93:ff:77:8e:0b:df:06:c3:36:06:c4:f2:be:58:48:ce:dd:47:
         1c:e3:2b:79:24:6d:1d:18:68:cc:ec:69:a9:f6:ef:af:ee:16:
         24:7c:1e:8b:8d:06:e3:00:87:8c:b5:3f:81:20:86:38:c2:33:
         14:2c:e6:aa:08:11:7d:bd:77:02:c0:9c:0f:52:08:99:3c:ed:
         4a:6e:5d:10:f6:22:d0:87:30:e7:d9:66:d4:1c:d1:b7:73:66:
         bd:f5:3c:8b:68:d3:ee:ac:00:9b:46:21:12:a8:a7:ee:96:bc:
         94:6a:92:df:79:53:7a:3f:90:2b:f1:8f:a0:89:fe:5c:91:a3:
         57:51:25:c0:46:cc:23:72:78:a2:d7:16:ab:23:b7:50:ed:e7:
         2e:2b:af:68:a1:13:1e:28:2d:24:31:60:42:e8:28:e2:f8:fd:
         92:c4:ad:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:39:11 2026 by rpki-client