Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft
File:                     aMIYjATCDkkjq7YttIckmDVLSv0.mft (raw, json)
Hash identifier:          KXGUQe56JWQzDLtcSY0bKYYWDE/5AzG04O5Qj9cAhio=
Subject key identifier:   EE:49:E1:5F:FE:4D:8C:BF:A5:6C:B9:15:32:6E:DC:DC:10:0E:AE:E5
Authority key identifier: 68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD
Certificate issuer:       /CN=A911750B/serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft
Manifest number:          F1
Signing time:             Sat 19 Sep 2026 06:27:14 +0000
Manifest this update:     Sat 19 Sep 2026 06:27:14 +0000
Manifest next update:     Sat 26 Sep 2026 06:27:14 +0000
Files and hashes:         1: aMIYjATCDkkjq7YttIckmDVLSv0.crl (hash: V81kIzHf/Z68Z0Hgf9rRMJfPwBFLn7+6I51B1ASxcHo=)
                          2: CC9D872A468D11F0A82C5E5EC4F9AE02.roa (hash: vIzjykPQ1LonF8j+M1UP/1/5O9eRnrbkzxN67k8ibko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl
                          rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911750B, serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD
        Validity
            Not Before: Sep 19 06:27:14 2026 GMT
            Not After : Sep 26 06:27:14 2026 GMT
        Subject: CN=6aae2b42-bf05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ea:45:68:47:aa:4a:9f:05:62:79:b1:c0:77:
                    06:5d:47:a6:22:e7:c7:8f:f3:3d:61:8f:20:e9:f4:
                    0e:b7:b4:8a:79:e5:c1:3a:d7:ae:3b:79:2c:4c:03:
                    04:21:89:24:ed:73:8b:c6:a9:2b:47:bf:ad:90:d6:
                    80:a1:7d:78:56:8d:be:ca:2f:d1:3d:5c:82:46:93:
                    e4:8d:48:a0:09:7f:a8:b5:32:a6:48:1e:0f:8c:24:
                    68:e5:2e:84:24:c7:e9:71:7d:6c:7b:50:b7:85:49:
                    64:0a:a1:79:44:40:fa:d9:bf:25:0c:4e:3d:b0:0c:
                    20:1e:50:28:51:f3:a6:70:ed:76:5a:04:1e:ad:ce:
                    a3:09:92:f5:db:16:39:be:96:1a:f7:a3:b2:eb:ca:
                    79:e8:e3:37:13:ac:12:df:5c:9e:1f:9b:14:81:c0:
                    6c:d5:e4:1e:9b:c4:b6:a4:93:17:38:57:1d:fa:b9:
                    0f:b3:0d:c8:bb:dc:1f:27:80:d6:c9:d7:b5:53:d8:
                    80:e8:00:69:e2:57:7a:f7:75:1a:ef:94:4b:47:09:
                    c2:8f:ff:d2:22:7f:3c:98:0f:e0:26:0e:ec:bf:3e:
                    7b:86:40:d0:d9:fb:0d:8e:43:c3:87:9d:73:4a:ad:
                    0f:60:cc:5e:f6:12:b9:d2:5e:6d:f1:da:ab:d9:2a:
                    ae:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:49:E1:5F:FE:4D:8C:BF:A5:6C:B9:15:32:6E:DC:DC:10:0E:AE:E5
            X509v3 Authority Key Identifier:
                keyid:68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:99:c3:b5:c6:70:21:97:6d:42:9c:9a:f5:41:18:cb:6e:19:
         a5:f8:54:a6:87:23:80:69:d7:93:21:a0:88:0d:ce:6c:8e:61:
         fd:93:9b:d8:c5:4c:16:87:9d:d9:b3:21:e9:bc:f1:21:72:6a:
         8f:fa:0e:a7:15:08:da:f0:46:28:25:40:59:72:5c:3e:38:9e:
         72:2c:db:ee:19:29:4a:cd:e1:ea:d5:b8:32:59:fd:3e:be:6d:
         39:a9:fb:2d:05:73:90:5f:2e:56:25:86:3f:85:d0:38:24:9a:
         e6:05:11:17:b7:2c:7d:73:cf:2b:e4:7e:e8:15:30:e6:fa:a7:
         2d:69:13:43:ca:de:9a:f2:2f:15:71:50:b5:c3:93:d8:6f:7a:
         27:df:9f:ef:c8:4f:8f:ab:c8:fd:1b:7f:44:ab:61:90:71:25:
         31:14:07:e0:a8:15:2e:ba:7d:27:9f:4c:d5:89:d6:6e:0f:36:
         ca:5d:2f:72:a7:6e:67:01:a2:a8:15:05:b0:29:f2:52:6b:da:
         8a:ec:a4:30:9f:9f:8b:15:6c:ba:c1:d6:b5:5a:8f:6b:6e:6f:
         84:08:a6:bd:6b:25:5c:74:68:7b:16:af:10:a0:bc:22:51:82:
         7c:9f:8e:a8:23:ff:30:d2:a8:7b:30:6d:5f:e0:45:c3:45:0e:
         c7:79:87:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:58:19 2026 by rpki-client