Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
File:                     9IjcYHyL28iy8lnlOSk-EQeDPa0.mft (raw, json)
Hash identifier:          rAQLrj3DgFTOaPUfw38axFTj4Mlcn5MBIe9A/DJlInc=
Subject key identifier:   C9:2C:35:2A:04:A6:56:DE:7A:DD:C2:17:31:0C:D3:04:60:01:73:04
Authority key identifier: F4:88:DC:60:7C:8B:DB:C8:B2:F2:59:E5:39:29:3E:11:07:83:3D:AD
Certificate issuer:       /CN=A91DDB11/serialNumber=F488DC607C8BDBC8B2F259E539293E1107833DAD
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9IjcYHyL28iy8lnlOSk-EQeDPa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
Manifest number:          49
Signing time:             Wed 23 Sep 2026 08:11:23 +0000
Manifest this update:     Wed 23 Sep 2026 08:11:23 +0000
Manifest next update:     Wed 30 Sep 2026 08:11:23 +0000
Files and hashes:         1: 9IjcYHyL28iy8lnlOSk-EQeDPa0.crl (hash: IE5MN3gC5YtvLnSwqNbP7NmSjvcuHtmdUHunLqyRAFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.crl
                          rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9IjcYHyL28iy8lnlOSk-EQeDPa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDB11, serialNumber=F488DC607C8BDBC8B2F259E539293E1107833DAD
        Validity
            Not Before: Sep 23 08:11:23 2026 GMT
            Not After : Sep 30 08:11:23 2026 GMT
        Subject: CN=6ab389ab-e940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a3:8f:49:ee:5e:08:dd:8d:05:2e:3d:49:ef:
                    a1:a0:0c:9e:ba:b5:d6:7a:6b:59:41:0e:4f:be:7d:
                    1b:b9:8c:28:61:b3:38:92:cb:32:7a:93:b2:bc:0e:
                    a0:69:fe:6d:07:e7:80:cb:3d:92:b6:5b:9c:9f:4b:
                    c5:a5:6f:31:aa:6d:35:63:61:cd:54:e3:12:70:c8:
                    fa:7a:57:2c:71:96:37:c5:b9:8c:45:1b:5b:d0:f9:
                    f5:04:2b:1f:98:57:59:9a:6a:66:61:2b:0b:48:4a:
                    dc:18:fe:7f:39:2b:67:55:92:9f:75:75:da:7f:9e:
                    8e:30:d3:63:5a:46:99:2f:01:ef:1c:7a:ba:5d:e5:
                    87:4f:a1:f3:dd:23:fc:7f:38:71:14:04:f7:ba:9d:
                    d2:96:4f:b4:dd:48:b6:a6:b5:a8:a7:13:58:85:e9:
                    98:da:b1:d9:58:a1:b5:9e:b8:57:51:bd:91:33:31:
                    ff:1a:17:98:34:ba:66:d3:91:38:de:73:5e:3d:31:
                    b3:17:c5:8c:6a:42:71:72:a9:d6:69:14:4d:5e:2b:
                    e3:e9:11:33:fd:00:85:0a:91:eb:d5:8b:4e:e8:54:
                    77:2a:ca:e5:69:0e:24:9f:e1:8a:64:2b:da:fe:df:
                    90:60:30:a7:28:42:8b:4b:1e:dc:8e:94:8f:2e:7b:
                    a3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2C:35:2A:04:A6:56:DE:7A:DD:C2:17:31:0C:D3:04:60:01:73:04
            X509v3 Authority Key Identifier:
                keyid:F4:88:DC:60:7C:8B:DB:C8:B2:F2:59:E5:39:29:3E:11:07:83:3D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9IjcYHyL28iy8lnlOSk-EQeDPa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:d6:44:4e:78:61:66:72:28:67:b0:e8:70:17:fe:b7:61:d8:
         3f:54:9f:3b:df:67:7c:a2:59:0f:bf:99:9a:40:1e:43:9c:49:
         ea:a3:d8:2f:f9:e7:3c:4d:09:fe:91:3c:90:ad:b3:5c:e3:d7:
         81:0d:1f:24:33:d8:18:09:8f:6b:dd:2b:79:0f:8b:5c:38:50:
         5e:73:20:32:0b:5f:8a:14:5f:9a:46:12:74:53:02:a4:c6:34:
         45:0a:6a:05:03:88:83:94:1c:06:b2:f5:dd:71:ab:d0:33:8e:
         14:f9:8e:cc:54:83:31:b0:20:08:75:b4:6e:d8:25:6b:d6:ee:
         1c:42:2e:00:b6:4d:c9:d4:9e:7c:b7:aa:a4:65:00:35:84:d9:
         91:07:b3:67:46:ef:ad:52:b6:df:1f:4c:48:ab:47:6d:21:72:
         9b:31:9b:72:90:07:9a:f7:8b:14:7c:8a:85:e5:e1:5a:76:10:
         c7:4a:ba:1a:61:42:02:00:50:bf:b7:c9:4d:e9:0a:a6:6a:ff:
         03:21:69:53:fe:58:5a:26:a5:60:c3:e6:ea:a7:62:61:6d:6a:
         4d:f5:9a:6b:4a:31:6c:20:99:31:5a:d8:f5:02:2f:5b:cf:95:
         f3:8d:d8:c9:fe:3c:b4:fa:e3:3f:f2:bc:e2:0b:10:25:c8:36:
         9b:b0:40:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:16:53 2026 by rpki-client