Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
File:                     PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft (raw, json)
Hash identifier:          v3rjokRdl2UG7kmfgxSJy0q92WO0XHOOABy7Q8Z52Tg=
Subject key identifier:   28:04:13:BF:04:E7:4E:9C:7A:BA:9F:E2:CE:79:5E:8E:7C:66:16:E9
Authority key identifier: 3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E
Certificate issuer:       /CN=A91DD3FB/serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E
Certificate serial:       08A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
Manifest number:          08A1
Signing time:             Thu 24 Sep 2026 20:32:58 +0000
Manifest this update:     Thu 24 Sep 2026 20:32:57 +0000
Manifest next update:     Thu 01 Oct 2026 20:32:57 +0000
Files and hashes:         1: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl (hash: DlywOMCzDbdt45YZqWBPj4L+5pclDptK9vZMU+ueXJo=)
                          2: 2037569602BD11EBB333DA0FC4F9AE02.roa (hash: ttDGmX8Wz8ITP3sU4vGhTPNCup0+jAVIOIBp2YmhCbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl
                          rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 20:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2217 (0x8a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD3FB, serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E
        Validity
            Not Before: Sep 24 20:32:57 2026 GMT
            Not After : Oct  1 20:32:57 2026 GMT
        Subject: CN=6ab588fa-0c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f1:d2:ac:47:89:fe:df:69:70:52:18:9f:82:
                    9a:4e:83:0b:a8:f3:4a:49:e5:c7:e7:92:bd:ad:c8:
                    a1:f6:08:c9:07:b3:d6:5f:99:e9:ac:ae:70:8d:6b:
                    50:95:ff:5b:8c:42:19:50:89:f9:24:4c:e9:8e:92:
                    50:89:ad:3f:13:82:ed:44:5c:5f:af:bf:b5:09:3c:
                    34:91:58:1b:db:38:e2:8d:55:bc:29:d3:a0:ce:5b:
                    50:69:a4:c1:9e:c9:34:f9:5d:72:11:1d:fa:4f:dc:
                    c0:bd:f4:aa:3e:4b:10:4d:d1:0b:45:a0:15:82:7e:
                    31:bb:34:2b:33:df:18:b0:56:8a:2d:1b:16:8b:6d:
                    51:47:a7:0b:e4:e5:7a:26:76:1a:87:4d:31:8f:86:
                    32:71:97:16:aa:cb:70:1a:a1:92:ba:cd:31:69:fe:
                    fe:d0:0d:d9:2c:fe:08:7a:43:7f:ca:2f:f9:a5:cb:
                    e8:cc:e7:29:08:11:c0:2b:e7:8d:83:24:51:4c:35:
                    9d:94:e0:b3:c3:ff:75:c8:02:c8:e7:66:8d:61:5f:
                    38:d9:d8:95:2f:92:34:25:cc:b7:b3:c6:84:e5:f9:
                    f3:84:fe:97:92:4a:e1:13:89:2c:b7:01:5c:26:24:
                    a4:fc:87:59:82:8c:d3:0f:3b:fb:bc:4d:ba:a7:b5:
                    5f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:04:13:BF:04:E7:4E:9C:7A:BA:9F:E2:CE:79:5E:8E:7C:66:16:E9
            X509v3 Authority Key Identifier:
                keyid:3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:00:85:87:f0:1b:b8:3d:72:0d:0f:70:53:bc:12:89:0d:74:
         38:d1:e9:85:5f:60:fe:c5:df:b5:8b:5a:10:11:08:45:b3:43:
         a2:58:a5:69:c3:44:30:08:2f:13:41:8b:6e:f8:2a:c0:d5:4f:
         99:89:29:fb:3b:c2:95:b0:2e:4c:27:54:6a:d5:32:ad:0d:f9:
         bd:45:bc:97:39:d3:3e:01:b6:71:6a:54:6b:61:1a:d9:a9:99:
         4d:54:50:20:98:44:4c:a9:e6:73:8b:82:c5:8e:23:50:65:22:
         97:38:d3:02:8f:75:cc:01:5c:4e:bb:38:06:85:83:b8:54:1e:
         bc:61:0d:04:da:93:2f:a5:76:89:ab:13:8e:dc:ce:3d:95:65:
         34:b6:0f:b0:67:dc:56:fb:94:f8:a4:50:fd:1c:2d:02:19:2f:
         09:6f:5b:db:57:fd:37:61:5c:b9:df:14:2a:ac:83:38:e3:c0:
         3e:4f:f8:3d:db:15:14:7c:07:6a:6f:e1:22:f0:be:23:78:6a:
         79:aa:86:59:7b:7e:c4:d0:5e:2e:c2:3a:82:4c:6e:99:aa:a9:
         2a:cf:41:19:01:7b:44:36:d2:f0:25:4b:b5:b3:4f:e4:4e:e8:
         73:d9:3b:db:fd:de:4c:f5:f6:3b:46:20:50:a9:dd:17:7f:00:
         31:55:c3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:06:09 2026 by rpki-client