Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft
File:                     sCOWweSXbcJLufJA9c5Vbtgn-is.mft (raw, json)
Hash identifier:          GYUPg/S/26EEk5RFpKcUek8SyRmiY2iknGjxiWG0w9U=
Subject key identifier:   70:03:88:AD:15:F7:B9:F6:30:3D:A8:F2:1A:7B:09:E8:EE:95:02:F5
Authority key identifier: B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B
Certificate issuer:       /CN=A91124CD/serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B
Certificate serial:       01DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft
Manifest number:          01D9
Signing time:             Mon 21 Sep 2026 03:34:50 +0000
Manifest this update:     Mon 21 Sep 2026 03:34:49 +0000
Manifest next update:     Mon 28 Sep 2026 03:34:49 +0000
Files and hashes:         1: sCOWweSXbcJLufJA9c5Vbtgn-is.crl (hash: Bw3sIv6eA2RLE3mzwiQk3RiD9NxGxsaicitif/RFOL4=)
                          2: CC6220C0E02E11EEBA9D291AC4F9AE02.roa (hash: XGT7f3N6d7VyR5B4Z12+X5V0xJRoN3FoBvQSpbBJPeI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl
                          rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91124CD, serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B
        Validity
            Not Before: Sep 21 03:34:49 2026 GMT
            Not After : Sep 28 03:34:49 2026 GMT
        Subject: CN=6ab0a5da-f69b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fd:4a:1e:1b:b3:55:c3:87:28:70:84:b7:84:
                    8f:bd:33:8e:11:7e:17:ea:9d:79:31:80:99:54:dc:
                    f8:a2:04:75:ea:23:ef:4d:8f:eb:38:7d:01:4e:ae:
                    51:4f:da:53:48:25:04:25:b1:d2:2b:3a:8b:5b:1d:
                    e0:90:09:88:7d:82:29:5d:9a:3e:ab:cf:31:44:c3:
                    c6:7e:85:87:2f:98:fc:00:93:54:52:7b:79:6e:27:
                    28:33:ab:9d:b1:a0:ca:50:7a:3d:39:f0:a6:86:26:
                    22:7a:84:bc:11:b0:3f:74:8d:8d:33:d6:f7:3b:e5:
                    77:4b:3b:23:76:3f:05:d6:36:71:9f:d8:50:45:35:
                    72:b2:bf:29:c4:fc:b8:0f:72:49:28:e6:7d:1c:e0:
                    f4:f0:aa:6e:0c:0c:08:ff:20:09:32:41:32:bb:b4:
                    de:0b:61:73:6f:f7:9e:49:c5:34:df:cd:36:e8:f7:
                    12:36:63:f6:03:33:de:cc:a5:fa:cb:29:5b:52:f2:
                    fd:b5:a7:8a:6f:08:39:7a:f3:b8:ef:99:96:97:55:
                    18:71:4b:9c:b3:15:6d:01:bc:ce:6c:2f:a4:63:41:
                    d4:73:f8:f1:71:60:0a:56:66:2e:61:48:b1:d4:78:
                    e9:2b:e6:e3:94:c8:de:a5:99:17:70:3f:79:09:e3:
                    f7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:03:88:AD:15:F7:B9:F6:30:3D:A8:F2:1A:7B:09:E8:EE:95:02:F5
            X509v3 Authority Key Identifier:
                keyid:B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:64:03:ee:8b:9c:c1:ab:db:3d:25:bd:4f:12:6e:13:4d:73:
         35:3d:42:02:b5:b3:d2:ef:ae:b3:74:f7:62:9e:d2:db:f7:d2:
         17:3d:a8:85:0d:1f:6e:67:80:33:ac:39:aa:07:15:ef:87:d9:
         9a:aa:30:9a:8f:62:d5:b6:c8:43:75:37:51:14:fb:af:1f:97:
         24:4e:41:84:f9:75:80:2b:bc:e7:82:09:ec:1c:df:be:b1:21:
         db:60:5d:aa:c3:a0:f7:9d:75:b1:d5:73:ff:0b:8d:35:d2:84:
         74:11:f6:38:54:de:26:87:06:7f:1d:cd:f3:66:14:65:89:85:
         60:14:00:e8:04:c4:74:16:da:ba:ce:dc:95:d4:2e:cd:62:e5:
         e1:fe:aa:49:1c:8d:af:81:13:ab:c5:dd:b4:07:6b:44:c8:ed:
         7d:5f:66:25:25:d0:01:3c:80:a9:09:a6:52:c1:b1:b1:1f:28:
         c0:92:95:a8:ae:9c:e1:27:9d:3e:ae:c6:0a:dc:b0:81:a0:be:
         42:68:0a:c3:39:b6:76:37:4e:64:c0:66:43:16:11:45:0a:99:
         a9:7b:d5:99:6b:47:a8:68:03:95:65:0f:36:b1:ec:26:5d:3a:
         a5:2a:a9:2c:38:a3:fa:a0:59:1e:a7:9f:93:bf:49:2d:8f:0a:
         86:da:04:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:33:41 2026 by rpki-client