Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
File:                     rJEs76dYoRmcG-3gaxSp6jmJdfc.mft (raw, json)
Hash identifier:          hb0a+7E4vlCIDuINAtUk1K3Kx5x0aO85Ugc2U/+45o0=
Subject key identifier:   5D:6A:D6:51:42:6F:4C:49:2C:AD:2A:3B:64:03:F6:84:37:A3:F2:CF
Authority key identifier: AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7
Certificate issuer:       /CN=A911285C/serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7
Certificate serial:       0307
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
Manifest number:          02E8
Signing time:             Wed 23 Sep 2026 00:57:30 +0000
Manifest this update:     Wed 23 Sep 2026 00:57:29 +0000
Manifest next update:     Wed 30 Sep 2026 00:57:29 +0000
Files and hashes:         1: rJEs76dYoRmcG-3gaxSp6jmJdfc.crl (hash: V9Xgk89fvLPKhbaiKostd+euB06aqRme4ZWwlEa/cvQ=)
                          2: EF1E23F896FF11ED87B56F84C4F9AE02.roa (hash: QY2VRet4P+YKz9oxq3Ig+v1EAPIpWMaBqPXmBJ+0Whk=)
                          3: 38E02CDC04EE11EE89900876C4F9AE02.roa (hash: 1Glvhcf7GkoJCunHDpP45q9GMuetf4Sccyte1OOh3sM=)
                          4: 1C2724723E0911F198404A6BA7833773.roa (hash: fX20YeIhUJqjtcw9DnqTBjexrVmlgAGNWoOHzMECyVM=)
                          5: EE0C206E96FF11ED87B56F84C4F9AE02.roa (hash: jnvYSXUOzZRSAh+pOehb/z7FrmRMGdKIIgdSaHoUN6w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl
                          rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 775 (0x307)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911285C, serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7
        Validity
            Not Before: Sep 23 00:57:29 2026 GMT
            Not After : Sep 30 00:57:29 2026 GMT
        Subject: CN=6ab323fa-4657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8f:59:25:88:a2:a0:75:7b:84:82:df:af:2d:
                    f7:7c:c7:b4:7d:ec:73:37:ec:51:30:d3:19:2a:b2:
                    d4:f0:a5:c9:5f:68:d7:dd:2b:f9:c7:be:a9:ac:5a:
                    de:10:1c:d3:5b:6a:5c:c1:b1:db:28:91:30:a4:b3:
                    56:cf:39:9c:eb:6c:57:0a:70:da:96:16:06:b2:96:
                    e7:2f:a8:02:0d:4d:b3:3a:cd:e8:4e:94:1c:cd:f4:
                    44:5a:2a:9d:57:b5:ff:cc:14:73:2e:c8:f0:2b:4d:
                    26:13:2c:68:02:b3:d8:5a:4e:ea:45:6f:8d:2d:90:
                    f5:f6:ab:60:dc:d0:85:19:ff:43:e8:0f:d8:cc:56:
                    00:76:01:bd:ff:a0:01:cd:0b:40:ea:2d:79:2b:b3:
                    88:4d:bb:c8:a9:73:b0:46:d0:b9:d6:8b:1a:6f:ff:
                    e7:2f:23:63:bb:49:a4:45:17:82:77:56:4f:e9:b9:
                    13:be:67:14:17:3f:dc:03:d1:68:2f:19:36:50:93:
                    bf:fd:37:72:b3:61:2e:4c:73:94:eb:ab:8f:be:3c:
                    4f:3f:b7:1b:78:47:7c:b4:ed:ee:88:fd:8e:25:14:
                    4f:20:2d:d3:19:03:9b:a5:2f:f4:61:31:87:22:11:
                    df:b7:2c:e2:1a:7b:01:ed:db:7d:0d:be:41:4d:fb:
                    63:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6A:D6:51:42:6F:4C:49:2C:AD:2A:3B:64:03:F6:84:37:A3:F2:CF
            X509v3 Authority Key Identifier:
                keyid:AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:8d:e2:e9:c2:c5:2d:33:d6:24:96:2b:df:26:75:c4:fe:69:
         56:c5:32:75:7c:39:a6:e3:0e:6b:86:7f:40:4f:88:74:92:9b:
         88:84:36:e7:ab:1c:b3:76:33:bb:39:55:8b:c0:4d:a2:b2:d6:
         3e:c4:08:03:ca:98:8d:b1:32:31:70:d3:10:ef:48:e8:e3:ea:
         28:00:ee:40:77:4c:f3:ff:39:60:88:b6:1b:50:33:ec:27:5d:
         df:f7:57:24:55:cf:3e:23:1c:bd:28:e7:ab:85:ed:f2:88:26:
         9c:f3:8e:18:f2:e9:f8:bf:72:3e:16:2d:b4:78:9c:3c:a6:98:
         33:f5:a1:15:7f:68:87:c3:16:b9:63:50:7c:17:b5:ff:19:89:
         47:ea:ce:e5:bb:4d:70:70:7f:82:6d:98:9f:dc:f8:10:f6:19:
         60:fa:42:c2:8e:e7:03:16:8c:3a:bd:69:db:5f:7f:01:94:f4:
         37:ea:09:82:e3:f1:b7:bd:96:a3:98:84:d5:d6:d6:e5:35:d1:
         08:c2:6a:8b:a2:4b:f6:9f:b5:10:e4:fa:d4:cc:03:4a:0c:77:
         28:7a:a2:b0:6d:17:dd:dc:05:c6:66:a5:25:ed:2c:56:21:04:
         0f:1a:2a:4e:a0:c3:35:76:28:a3:44:bd:cc:6d:50:af:9f:66:
         f3:dd:42:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:01:43 2026 by rpki-client