Manifest

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
File:                     C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json)
Hash identifier:          eDUDoTzWbLSDwRyVioqaHG1V2/9FzBJfh3p1canMuek=
Subject key identifier:   D2:E9:21:AF:4B:5B:BA:86:B0:C6:0B:A3:00:57:45:DF:25:D3:AA:7E
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Certificate issuer:       /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial:       7D0E2E95E4F36D148C5777C444F996C22C4AD136
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
Manifest number:          039F
Signing time:             Sun 15 Nov 2026 03:15:16 +0000
Manifest this update:     Sun 15 Nov 2026 03:10:16 +0000
Manifest next update:     Mon 16 Nov 2026 05:56:16 +0000
Files and hashes:         1: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: 1srxNLkDySS6fiifB4DPOaG5PvvAtOGaPaRHXwTpNyo=)
                          2: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 7e1q16oVO9npHirMK4v5g3vSkY20JTKKgzdAw4kY6GE=)
                          3: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: S7WsIsK6ViMEMbud6Qfi8tnNCEiIdCO/5Os6gk5h8V8=)
                          4: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: KWhrBV/zjumpPUyS3bkIhwSt0IKmcrtP3SgZZsS+/20=)
                          5: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: KtHYamoPDhw+nyojcRxL+/SXwqcGZBy/+9R5rpC5KTU=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
                          rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 05:56:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0e:2e:95:e4:f3:6d:14:8c:57:77:c4:44:f9:96:c2:2c:4a:d1:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
        Validity
            Not Before: Nov 15 03:10:16 2026 GMT
            Not After : Nov 16 05:56:16 2026 GMT
        Subject: CN=D2E921AF4B5BBA86B0C60BA3005745DF25D3AA7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bb:c0:c0:01:5c:2b:37:33:46:72:fe:c8:9e:
                    c9:6f:c4:6d:07:90:d9:d5:6d:f2:13:cb:1c:70:f3:
                    80:73:60:19:51:6b:e5:cf:70:54:6f:b5:7b:a7:32:
                    82:0c:23:84:f0:9f:09:e5:f3:41:3e:c0:96:ba:78:
                    47:64:29:b5:82:48:5c:f6:26:e4:bf:8d:d0:2b:d6:
                    dd:ac:d0:b7:25:b4:33:b2:ae:12:8b:10:b7:1a:ff:
                    00:de:58:3a:f2:1a:79:3d:48:ff:83:b6:b3:3f:be:
                    99:a8:5e:09:a0:6e:1f:45:14:59:7f:10:1b:a5:d7:
                    64:29:2d:9d:b3:d8:25:dc:bb:6d:0c:79:92:38:4f:
                    74:1b:79:9a:72:5b:98:fa:31:83:06:cc:fe:2e:d8:
                    ec:56:1f:f2:d2:00:10:2d:98:b9:03:52:7d:3f:27:
                    13:8c:c5:33:28:c1:11:10:7f:2b:a7:79:21:ac:f1:
                    47:cf:22:12:26:2f:f9:7f:18:d5:41:bd:9b:56:fb:
                    b6:17:37:46:8b:97:3b:3d:57:62:2e:76:00:73:55:
                    06:a7:b9:07:47:2a:53:08:b6:64:5b:e4:b2:da:96:
                    bd:a8:27:f8:7a:ae:3e:80:b8:3f:62:d2:cb:b4:eb:
                    9b:f3:15:a2:20:7c:d8:78:7d:2c:64:30:78:7f:66:
                    79:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E9:21:AF:4B:5B:BA:86:B0:C6:0B:A3:00:57:45:DF:25:D3:AA:7E
            X509v3 Authority Key Identifier:
                keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:8d:70:2e:18:44:52:a7:74:d3:55:7d:b4:c5:c2:c3:35:78:
         4c:50:ef:f5:04:67:3a:66:f2:36:ce:0e:f5:12:40:32:26:4b:
         14:31:37:cd:a4:82:0d:01:69:9d:c5:ba:ae:08:71:30:89:f8:
         fa:79:6f:3d:7e:91:7b:e1:01:da:28:49:bb:be:6e:9d:65:1f:
         a1:3c:73:e3:fc:c6:d3:cc:dd:8d:1a:01:48:b8:9f:b7:0e:d9:
         ff:6d:78:ed:44:51:98:3a:18:85:69:d7:f4:ec:79:6b:ef:1f:
         87:2c:1c:99:6b:81:6b:e9:1c:91:e3:10:cc:64:ee:1e:16:81:
         48:6a:23:a9:dd:a6:4e:f2:d6:cd:4f:3b:29:85:3a:9d:48:1d:
         2c:a9:c5:0f:12:48:36:64:6e:81:8a:51:0a:54:41:17:6c:f7:
         8f:4e:0a:2a:b3:3c:c0:02:75:54:3a:f3:3f:ee:9d:76:28:e4:
         18:1a:d7:b1:5f:6b:70:68:ea:23:d5:3a:22:de:27:eb:e6:74:
         c4:80:06:dd:01:be:a3:86:67:57:9f:d1:0d:0a:d2:84:f0:89:
         30:9d:76:48:96:8b:f8:8b:94:e8:5f:6c:5b:63:9e:4c:89:80:
         1e:2f:c8:ab:ac:aa:ab:2b:98:86:1c:8f:b4:11:17:da:e0:c4:
         47:5f:a6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:31:24 2026 by rpki-client