Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
File:                     wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft (raw, json)
Hash identifier:          hDH6MS82HO9H5duTNFu+owyad7KujHVEca4nWqffsnA=
Subject key identifier:   8B:E0:D3:98:90:46:86:70:0A:24:B3:8A:50:94:F3:F6:F9:7D:12:21
Authority key identifier: C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4
Certificate issuer:       /CN=A9111D36/serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4
Certificate serial:       02C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
Manifest number:          02BC
Signing time:             Mon 21 Sep 2026 01:27:53 +0000
Manifest this update:     Mon 21 Sep 2026 01:27:52 +0000
Manifest next update:     Mon 28 Sep 2026 01:27:52 +0000
Files and hashes:         1: wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl (hash: CLH3sBr+rCO9qIpoy0WLzRi5YBHifMio+aCPLiHESkg=)
                          2: 949A543291B011EDA9CB747CC4F9AE02.roa (hash: PkOsF2hTQSh3buTiKCZldxs2u/9datFbcXQ9jZ+jT/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl
                          rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 709 (0x2c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111D36, serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4
        Validity
            Not Before: Sep 21 01:27:52 2026 GMT
            Not After : Sep 28 01:27:52 2026 GMT
        Subject: CN=6ab08819-fab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:84:25:e5:9f:bb:7a:92:8c:91:bc:63:2c:31:
                    29:cf:43:e7:62:01:23:9d:15:b6:d8:f9:98:58:53:
                    82:f2:c9:a9:e7:82:36:5b:94:28:18:34:ab:8b:de:
                    90:f1:84:16:f4:f9:42:53:dd:18:ef:ea:4e:3d:48:
                    27:30:8c:6c:0a:66:62:1c:1c:61:86:ad:70:11:01:
                    ec:0c:e7:ed:75:e1:17:48:01:ef:5c:1e:4b:fc:db:
                    7d:2d:bf:cf:f4:f8:4b:66:14:b5:37:67:e0:a4:17:
                    eb:a2:be:be:6e:6d:1c:07:2f:31:a8:4e:de:1c:e8:
                    c7:31:a5:88:2e:62:54:a2:d9:51:e4:85:ba:61:e5:
                    6b:1d:88:45:f1:b4:25:16:7a:3c:ed:94:88:11:57:
                    4e:71:88:3f:4f:b4:a8:73:8b:f2:34:ee:48:8a:53:
                    4c:6f:79:49:02:d9:40:99:d5:43:dc:ad:dc:9c:c0:
                    32:03:56:cd:ff:51:fd:21:2f:75:7b:20:13:42:e5:
                    1e:22:7e:eb:f1:e5:f2:93:32:54:a6:0e:5c:2c:9a:
                    8d:fb:29:cc:d0:63:6e:39:d7:18:dc:67:d9:99:f7:
                    e5:2d:f5:77:5f:46:db:dc:7c:a2:69:c2:a3:34:22:
                    9d:1f:b5:22:dd:d3:b2:a0:6b:5e:eb:1c:d0:b2:4a:
                    88:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E0:D3:98:90:46:86:70:0A:24:B3:8A:50:94:F3:F6:F9:7D:12:21
            X509v3 Authority Key Identifier:
                keyid:C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:1c:cb:a0:ee:46:7b:a9:15:e2:51:13:9d:f5:e7:71:9c:1e:
         a2:ec:3a:bb:7c:15:89:a7:9f:09:9d:7d:50:3f:52:1f:df:35:
         ac:7e:f1:4f:95:c4:50:a3:3a:15:dc:fc:2b:52:d9:37:4b:bf:
         72:0b:c1:0f:b2:ba:04:5c:9e:c8:07:eb:35:2d:1c:e8:8b:4b:
         d4:68:cf:7d:f1:5c:53:fc:2b:7b:d9:c0:d6:98:b5:8f:31:2d:
         e0:b2:b1:1e:1d:93:f5:c9:9a:65:06:00:55:af:c3:7a:ed:2e:
         19:91:80:d5:a3:a6:2c:88:94:40:aa:5f:98:bf:13:1c:9c:5a:
         2a:88:a9:58:2a:15:9b:0d:31:e8:5b:4b:f5:b6:65:da:53:f0:
         11:e6:9b:97:c5:8e:57:20:86:b5:da:44:d2:5c:39:24:08:c3:
         6d:90:d9:9a:fa:b8:ef:6e:42:ce:46:5e:35:f1:35:9c:e4:ef:
         33:50:53:a6:88:33:75:90:b8:fa:ee:71:9f:5e:44:23:de:95:
         4b:df:9f:b7:47:41:df:02:5e:dc:4c:10:39:b2:78:06:9c:18:
         1e:3e:67:25:0f:d4:b7:37:8d:f6:9d:10:1e:a0:37:c5:e6:31:
         a0:9e:d6:06:38:ed:57:e1:4c:91:b5:c6:bd:89:37:da:ad:ca:
         84:50:01:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:32:42 2026 by rpki-client