Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft
File:                     4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft (raw, json)
Hash identifier:          CDNgZiJzQTqpwvvbCHYlnrHjIDY9wL0M4rjhAw026+4=
Subject key identifier:   16:6A:08:21:4D:45:D8:9F:A1:22:C9:7E:3D:88:72:9B:8F:9A:9C:0E
Authority key identifier: E0:24:35:D5:13:49:3C:3D:41:3D:31:ED:1F:8E:0D:CA:30:AE:0C:9E
Certificate issuer:       /CN=A9190059/serialNumber=E02435D513493C3D413D31ED1F8E0DCA30AE0C9E
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft
Manifest number:          9E
Signing time:             Fri 25 Sep 2026 07:27:33 +0000
Manifest this update:     Fri 25 Sep 2026 07:27:33 +0000
Manifest next update:     Fri 02 Oct 2026 07:27:33 +0000
Files and hashes:         1: 4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl (hash: xBxM4SbkhwnECEJZPkRP3sentlZdg6iFQV/ZBDERVgo=)
                          2: 0DA28718CE5E11F084703925C4F9AE02.roa (hash: AdDZHFfcc7Zdrn4Ql7CRvOmqa0OKrZIa586pDCodAEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl
                          rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190059, serialNumber=E02435D513493C3D413D31ED1F8E0DCA30AE0C9E
        Validity
            Not Before: Sep 25 07:27:33 2026 GMT
            Not After : Oct  2 07:27:33 2026 GMT
        Subject: CN=6ab62265-78bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bc:5b:22:b8:8a:17:63:b8:3f:ba:4d:c4:f7:
                    12:fe:6d:54:22:b8:eb:62:88:2a:bc:4d:e7:08:08:
                    f3:e7:ed:8b:1d:3d:83:3b:df:49:07:15:43:a1:f6:
                    00:b9:07:b4:24:04:88:36:03:56:71:5f:53:81:1f:
                    ec:f6:30:e8:26:6c:cc:5a:27:ad:19:08:56:d5:73:
                    89:76:16:90:30:e5:2d:52:b7:61:d1:d5:a8:78:ec:
                    59:48:51:48:b8:4a:24:70:88:15:04:72:0b:53:3d:
                    b9:b2:46:71:e1:9a:ab:b2:46:b9:d6:77:7e:ba:90:
                    f3:f5:de:87:8b:d0:e8:20:b6:20:52:1d:34:f1:4f:
                    58:e2:8c:ae:d5:d9:c4:0d:7c:34:5f:c1:db:18:16:
                    4b:e8:5a:2c:08:a2:05:e3:af:00:ef:1c:1f:0d:a6:
                    d9:71:74:c1:3f:c2:64:06:b0:f3:34:04:17:ec:88:
                    6c:d3:cc:4e:6e:c9:07:83:e5:2b:f7:86:86:9e:87:
                    e2:fa:02:64:04:23:53:f8:57:33:77:a5:5e:87:9b:
                    89:a0:46:e5:e7:76:52:7e:29:79:ea:c3:87:79:4e:
                    a1:4c:8e:79:50:18:6f:86:41:66:7e:e5:25:3b:52:
                    aa:eb:8a:d5:2f:54:cc:cc:1b:02:43:54:a4:16:13:
                    af:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6A:08:21:4D:45:D8:9F:A1:22:C9:7E:3D:88:72:9B:8F:9A:9C:0E
            X509v3 Authority Key Identifier:
                keyid:E0:24:35:D5:13:49:3C:3D:41:3D:31:ED:1F:8E:0D:CA:30:AE:0C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a0:30:9b:f7:8c:da:72:fe:1a:82:85:28:bd:6a:53:c1:1b:
         c6:3c:ed:3e:4e:00:6c:69:63:19:9b:ca:c3:c6:68:52:28:ad:
         0f:b3:15:de:11:be:7e:c0:17:d2:fe:6a:8a:35:2c:78:35:72:
         8a:34:77:ed:a6:73:93:7e:83:a7:b2:fb:70:7e:e4:ea:08:ec:
         15:6d:79:a7:69:b0:2f:83:cb:1c:86:e7:c5:bf:61:70:ca:56:
         7b:10:a6:9c:5a:31:23:77:be:38:ac:63:00:3d:15:6a:8e:75:
         31:2d:50:c4:47:b5:cd:bd:0c:24:fe:92:07:11:ba:f6:45:19:
         81:c3:a3:81:6b:32:d1:a4:39:9a:3a:57:17:ed:08:9c:82:c1:
         14:6e:eb:29:0e:1e:3f:7a:cf:69:57:0d:48:f0:0d:16:bb:90:
         92:f3:a6:39:40:ad:6f:b9:ba:81:12:66:70:df:9a:2b:52:da:
         c6:77:43:ee:c3:eb:bc:cf:e5:96:0c:5b:63:69:82:ff:7c:5d:
         34:cf:3a:03:31:26:7a:d9:78:76:a3:04:4b:d3:81:ab:67:3a:
         87:d2:1f:17:f5:54:4b:db:f6:4b:ec:84:a0:51:78:6b:7e:43:
         b8:a6:05:1f:56:4f:f6:34:42:35:ec:49:b4:2f:6d:50:4d:b2:
         79:ce:92:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:35:01 2026 by rpki-client