Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
File:                     Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft (raw, json)
Hash identifier:          BODJuaAs+i8f/4Ckaq+Or7dkYfFQaI5FvYq54XXgGYo=
Subject key identifier:   22:63:A5:27:68:3B:54:81:B2:A5:FA:5C:3B:5F:4B:EE:6C:20:0B:67
Authority key identifier: 52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B
Certificate issuer:       /CN=A91F9C95/serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B
Certificate serial:       0CB2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
Manifest number:          0CA9
Signing time:             Sat 26 Sep 2026 18:39:49 +0000
Manifest this update:     Sat 26 Sep 2026 18:39:49 +0000
Manifest next update:     Sat 03 Oct 2026 18:39:49 +0000
Files and hashes:         1: Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl (hash: qH/GX7v9DYWyqBkLRX2JsXaRxGPgUDhU4kMQnrQnRic=)
                          2: C7F8C83C217311EA93A29F82C4F9AE02.roa (hash: zVKPBOvgf5ZBPV/BL1nd0Q/b/L3Ds0nzM2EgbZq2Spo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl
                          rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 18:39:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3250 (0xcb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9C95, serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B
        Validity
            Not Before: Sep 26 18:39:49 2026 GMT
            Not After : Oct  3 18:39:49 2026 GMT
        Subject: CN=6ab81175-9d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c9:8e:9f:22:06:25:24:7f:5f:f0:26:ef:99:
                    8a:e6:ce:6c:6c:e6:63:eb:b7:9d:f1:95:c9:b2:89:
                    90:70:90:a7:7f:77:74:78:eb:ed:07:59:96:03:f9:
                    b4:b6:16:19:76:10:54:07:bc:26:65:d5:48:97:cb:
                    f3:ea:ff:92:fb:db:3d:0b:2b:de:be:8b:43:90:ff:
                    6f:9c:ac:57:f0:14:2f:8c:3e:b0:7a:c5:50:a5:cf:
                    1c:eb:8f:09:fa:3d:87:2e:67:94:ec:5d:63:67:d9:
                    33:f4:eb:3d:03:18:11:8f:3d:6f:36:85:17:4e:5d:
                    ed:9f:9e:fe:f5:6f:16:c0:6d:34:7f:df:d0:01:8e:
                    95:7b:bd:66:5c:cc:25:4a:fa:f9:73:ee:81:26:4f:
                    21:fe:86:d0:50:c5:75:fe:37:8e:4e:c9:8f:9a:19:
                    e9:72:ec:cb:cf:28:e5:7a:25:e9:5a:cf:da:d7:7b:
                    66:a7:fa:69:b2:82:c1:48:4e:c1:fd:46:09:d7:67:
                    d1:d3:c6:e4:2f:1d:90:e8:5c:c0:aa:ee:92:97:e6:
                    33:dc:48:1c:48:4b:1a:6f:0a:20:78:60:b3:40:48:
                    d5:14:a1:59:b5:d5:cd:82:0b:28:a4:bf:db:35:76:
                    bb:f7:97:37:25:bb:a4:08:76:8f:d1:15:84:87:2e:
                    51:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:63:A5:27:68:3B:54:81:B2:A5:FA:5C:3B:5F:4B:EE:6C:20:0B:67
            X509v3 Authority Key Identifier:
                keyid:52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:0c:c6:2f:a2:fc:d6:53:de:a1:3a:c4:d3:a4:27:83:ba:c4:
         2d:8a:d7:1f:33:04:e1:eb:3f:3e:db:20:bd:13:48:5d:c4:86:
         52:f7:00:8f:8e:05:c9:88:1f:81:19:d4:96:8c:c2:b1:3a:b9:
         6b:d0:7f:0d:9a:e8:a2:da:c4:05:f5:8b:5d:5f:16:81:88:87:
         1d:33:97:e2:4f:c2:bb:d1:83:96:74:1e:3c:c9:da:9f:15:52:
         7b:d4:85:6d:1a:8b:0d:45:c4:52:f9:f7:41:7a:bd:8f:77:ae:
         7b:34:5c:f8:32:09:9a:6f:05:ae:2e:bd:9d:ed:a3:7b:e4:21:
         0f:4f:a8:c4:b5:1d:b0:dc:e0:3f:87:27:fe:a2:c0:4d:09:37:
         e3:7a:35:23:40:62:0b:2c:72:de:e9:39:61:16:6e:8d:12:2e:
         06:79:9b:9e:15:25:04:94:7d:e7:a5:b7:07:2c:7a:c7:ef:bc:
         e6:ab:46:7b:60:04:99:b4:14:a7:11:59:01:42:82:46:54:e4:
         ce:09:d0:3e:a5:7a:6a:f7:6e:a3:ec:ee:ce:ef:5c:75:eb:27:
         81:d3:4c:cb:05:64:87:2e:99:82:27:81:61:07:87:ad:bc:cf:
         14:c9:ec:3a:20:75:70:e4:29:96:d5:2b:fe:7f:26:8c:e3:16:
         f5:77:e8:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjlDOTUxMTAvBgNVBAUTKDUyQkY2RjYyRUJDQTI2QjFEQzQyN0ZCRUFGRTcyMEZC
QjA5N0MyMUIwHhcNMjYwOTI2MTgzOTQ5WhcNMjYxMDAzMTgzOTQ5WjAYMRYwFAYD
VQQDEw02YWI4MTE3NS05ZDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApMmOnyIGJSR/X/Am75mK5s5sbOZj67ed8ZXJsomQcJCnf3d0eOvtB1mWA/m0
thYZdhBUB7wmZdVIl8vz6v+S+9s9CyvevotDkP9vnKxX8BQvjD6wesVQpc8c648J
+j2HLmeU7F1jZ9kz9Os9AxgRjz1vNoUXTl3tn57+9W8WwG00f9/QAY6Ve71mXMwl
Svr5c+6BJk8h/obQUMV1/jeOTsmPmhnpcuzLzyjleiXpWs/a13tmp/ppsoLBSE7B
/UYJ12fR08bkLx2Q6FzAqu6Sl+Yz3EgcSEsabwogeGCzQEjVFKFZtdXNggsopL/b
NXa795c3JbukCHaP0RWEhy5RywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCJjpSdo
O1SBsqX6XDtfS+5sIAtnMB8GA1UdIwQYMBaAFFK/b2Lryiax3EJ/vq/nIPuwl8Ib
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM5NS9CQTNFQzg2RTIx
NzIxMUVBOEI3RUY4ODBDNEY5QUUwMi9Vcjl2WXV2S0pySGNRbi0tci1jZy03Q1h3
aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VyOXZZdXZLSnJIY1FuLS1yLWNnLTdDWHdocy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OUM5NS9CQTNFQzg2RTIxNzIxMUVBOEI3RUY4ODBDNEY5QUUwMi9Vcjl2WXV2S0py
SGNRbi0tci1jZy03Q1h3aHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOQzGL6L81lPeoTrE06Qng7rELYrXHzME4es/PtsgvRNIXcSGUvcAj44FyYgf
gRnUlozCsTq5a9B/DZrootrEBfWLXV8WgYiHHTOX4k/Cu9GDlnQePMnanxVSe9SF
bRqLDUXEUvn3QXq9j3euezRc+DIJmm8Fri69ne2je+QhD0+oxLUdsNzgP4cn/qLA
TQk343o1I0BiCyxy3uk5YRZujRIuBnmbnhUlBJR956W3Byx6x++85qtGe2AEmbQU
pxFZAUKCRlTkzgnQPqV6avduo+zuzu9cdesngdNMywVkhy6ZgieBYQeHrbzPFMns
OiB1cOQpltUr/n8mjOMW9Xfofw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 02:24:55 2026 by rpki-client