Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
File:                     9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json)
Hash identifier:          Mb629ujR7QDwh93A30ecGoROLbTKsrmjfvVgvwpfvD0=
Subject key identifier:   67:E9:73:2E:55:68:38:6F:2D:EF:E5:5B:8D:B9:34:BD:C3:22:EB:18
Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
Certificate issuer:       /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Certificate serial:       09E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
Manifest number:          09A7
Signing time:             Tue 22 Sep 2026 19:49:25 +0000
Manifest this update:     Tue 22 Sep 2026 19:49:25 +0000
Manifest next update:     Tue 29 Sep 2026 19:49:25 +0000
Files and hashes:         1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: YHX+M5BEw+9TCHBf5XuYZgFL6NqtARdi0V1PfveOwuA=)
                          2: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: KabuLJ2jMh9Q4wRFwssFjvelmr/DGXwkhCP7WPPdCU0=)
                          3: F547BE4253EA11F08B05D02EC4F9AE02.roa (hash: YKr4LPiv+8zUeK31cb16siUqLk0ccykz6GVFETQcSkM=)
                          4: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: 557V948ytFkQmXJP+v3O6OYFApLgKOKU4oIchZma6K0=)
                          5: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: y7JlO2eVn5CGG014i1w2l8zlQaUpGUw0Z7qDmj0ckcI=)
                          6: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: PWpc1YrCi7YtcELVVhl8DbjOytPByeC79d1ZomEe97A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
                          rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 19:49:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2529 (0x9e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
        Validity
            Not Before: Sep 22 19:49:25 2026 GMT
            Not After : Sep 29 19:49:25 2026 GMT
        Subject: CN=6ab2dbc5-2f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:69:d1:1e:8c:fa:8c:43:0b:fe:8c:e8:c0:b0:
                    8d:fe:3f:37:93:9c:c8:6d:44:cb:23:03:fe:d0:13:
                    47:bd:e9:47:a0:6c:62:b0:4c:9a:71:61:06:75:27:
                    ca:d0:27:ff:43:2c:e1:5a:99:93:69:1e:1e:5d:d2:
                    b4:28:3c:69:78:64:5c:e9:d0:c2:e5:95:32:22:13:
                    ff:45:43:cf:5d:f0:08:be:1b:9a:be:0d:f6:51:9f:
                    0c:83:51:ae:83:d5:e1:b3:50:a7:d5:08:f3:81:b2:
                    31:a4:b7:c1:7f:77:6d:6c:47:43:2e:1d:f9:a3:2b:
                    23:47:b6:23:95:15:16:8f:33:e9:4e:24:06:2a:f0:
                    d3:63:fa:10:e1:25:aa:88:16:62:14:1e:34:17:09:
                    94:bc:de:cd:e5:66:63:af:fb:e6:8a:b6:d4:46:5c:
                    11:dc:31:e7:a4:4d:36:09:75:98:22:20:31:3d:cc:
                    44:ad:94:be:73:94:ca:3d:f4:18:84:b9:c1:eb:c0:
                    1e:c0:da:9c:33:32:7a:f2:8b:9f:4e:a2:0e:9b:8b:
                    c9:ef:7c:ca:93:5f:ef:40:1f:19:d0:d5:43:c4:18:
                    66:e6:2e:66:73:d9:4f:7a:9b:19:10:b7:f4:17:6c:
                    68:27:15:44:03:60:bb:4c:91:7c:cd:48:94:b4:76:
                    13:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E9:73:2E:55:68:38:6F:2D:EF:E5:5B:8D:B9:34:BD:C3:22:EB:18
            X509v3 Authority Key Identifier:
                keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:32:22:37:50:30:12:5f:06:58:f6:01:5b:50:0e:83:68:d2:
         b8:07:12:ab:78:00:80:7c:85:6d:61:3d:22:88:71:61:a8:1c:
         55:f5:ca:c0:9e:3e:d7:d2:a3:59:20:1d:d9:ff:40:aa:84:e6:
         27:33:d4:2b:fc:5a:1c:48:88:f7:6e:b0:a1:a9:27:e5:91:1c:
         18:db:87:95:8b:69:a9:f9:8c:74:5c:bc:5a:e7:10:41:fd:2b:
         04:21:8f:e2:ed:37:67:73:27:85:2e:74:2b:79:48:07:e6:03:
         2c:c7:c7:87:a6:47:1c:ba:b2:52:16:43:6a:9b:94:4a:4d:54:
         94:19:54:43:0c:a0:17:83:b4:96:95:5f:8e:ca:1a:bf:16:b2:
         a6:de:af:b1:e4:72:90:40:ff:e5:06:73:4e:a2:89:6e:79:43:
         92:88:40:a0:27:f4:30:5f:f8:7a:f4:0d:60:dc:93:ea:cd:bd:
         a3:43:8c:74:4e:34:ab:8d:ac:39:ea:1b:27:1a:e5:46:1b:5c:
         9e:78:bb:95:5e:df:3c:fc:fc:b4:5c:ab:f4:41:a0:81:47:41:
         ac:27:fc:d2:a5:61:d6:40:95:a0:1b:1c:60:fc:cb:de:32:24:
         1e:95:8e:0d:a7:3b:f8:a3:33:57:82:e7:3e:92:e3:2a:ee:c6:
         37:bd:b2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:04:57 2026 by rpki-client