Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft
File:                     9lz9HPOxxajqYIcfo8NAYdtM84M.mft (raw, json)
Hash identifier:          z21p9lGhth+xpi+ut4ZUFJVwDK6iY8DuPxdzL1SYOVk=
Subject key identifier:   87:0F:62:14:28:7C:76:38:63:36:89:33:87:AD:23:A8:26:3D:C0:3C
Authority key identifier: F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83
Certificate issuer:       /CN=A9195BA9/serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383
Certificate serial:       025E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft
Manifest number:          0258
Signing time:             Sun 04 Oct 2026 19:31:42 +0000
Manifest this update:     Sun 04 Oct 2026 19:31:42 +0000
Manifest next update:     Sun 11 Oct 2026 19:31:42 +0000
Files and hashes:         1: 9lz9HPOxxajqYIcfo8NAYdtM84M.crl (hash: fOsPfK7n1FO86lfDqIH/4T5gKjHen1ftA0sSaWrh9TE=)
                          2: 7A63013E3A4F11EEA10D3A7AC4F9AE02.roa (hash: hnwuStPXa2PnbC6upyuld+U4W5MZABYuzZ1Adf6fwaM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl
                          rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 19:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606 (0x25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195BA9, serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383
        Validity
            Not Before: Oct  4 19:31:42 2026 GMT
            Not After : Oct 11 19:31:42 2026 GMT
        Subject: CN=6ac2a99e-16d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:de:7d:43:cf:1c:55:23:c0:30:0e:28:3f:86:
                    50:93:00:87:b3:b5:98:71:b5:34:cf:25:2e:20:6f:
                    c9:3d:bc:1d:8c:40:78:3c:08:66:97:53:cc:8c:31:
                    6e:a6:a0:89:b7:c3:58:6d:4b:8c:95:b8:44:82:5b:
                    18:d7:81:a2:a5:5e:cb:f4:02:6c:0a:46:70:74:8a:
                    a2:fb:16:f6:64:86:87:d1:a4:66:b9:c0:b7:a1:9e:
                    7e:f3:bc:8a:cd:c0:89:e1:54:39:bc:d2:a1:f3:c1:
                    3a:c3:d3:97:c2:18:02:ca:ee:d4:c3:18:a8:64:32:
                    97:56:4e:36:f4:d7:a1:29:3a:79:c9:32:e1:f3:65:
                    33:1c:33:7e:76:37:06:58:3b:52:dd:3a:4c:d8:2c:
                    f5:23:81:2f:11:b0:aa:e3:fb:0c:99:88:ff:af:56:
                    b8:5e:ba:06:a5:d6:21:93:93:02:72:99:c0:4e:62:
                    78:55:fc:b1:ff:3e:5a:ae:7b:6c:c2:b7:9f:d8:31:
                    f6:e9:8b:7f:2b:a8:c7:a2:d7:80:3c:85:8f:ff:7e:
                    b9:d9:07:f1:7d:0b:b6:fb:a7:c0:a4:b3:2e:24:47:
                    5e:21:b3:17:e4:b1:1d:4c:a6:86:0a:68:e0:85:f2:
                    47:4d:c8:cb:b9:b3:11:3d:49:74:e8:90:05:2e:a2:
                    cf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0F:62:14:28:7C:76:38:63:36:89:33:87:AD:23:A8:26:3D:C0:3C
            X509v3 Authority Key Identifier:
                keyid:F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:1c:29:13:ff:4f:3e:17:4c:fc:0e:47:aa:05:aa:ed:80:10:
         09:72:56:97:62:40:25:22:d6:fe:96:7a:fa:7c:3b:84:ad:84:
         4a:f8:aa:a9:ff:2d:77:22:eb:14:ab:af:ed:7e:4d:fd:f0:12:
         59:db:e0:e1:d1:a4:ae:26:80:e5:c0:b7:9a:4b:5d:ad:7f:ef:
         5a:38:fb:17:07:6e:d9:ce:ac:d0:8d:0e:7c:bf:a8:84:41:b6:
         9f:5c:62:0f:af:bc:68:de:c5:44:b2:b7:66:35:60:6e:61:43:
         d2:fd:0b:3c:0b:cc:0d:52:cc:5a:b0:28:36:b2:6e:5a:fb:b7:
         62:e6:f8:1c:ed:bb:b4:cc:3c:08:97:33:19:79:08:b5:19:bb:
         c1:4a:fc:73:00:e1:62:8e:5e:15:2f:73:01:e8:df:81:1b:3a:
         a7:f5:5b:e8:66:e5:06:de:27:90:b7:7c:29:fd:cd:05:35:52:
         c9:79:bb:f8:ae:2d:f2:10:e2:bb:22:69:fe:27:9e:70:97:5d:
         3b:31:84:f8:8e:2a:23:50:15:91:e3:92:c8:87:fb:91:62:f1:
         b5:66:1d:6a:9f:cc:34:d7:ca:e7:c5:8e:b4:ff:0b:5a:91:f4:
         7b:8b:66:ec:bf:fb:2b:b6:68:af:c4:40:25:e1:14:bd:9c:d0:
         81:59:16:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:17:06 2026 by rpki-client