Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft
File:                     D5BpKh7v5_ChrGi14awJ9wJpccw.mft (raw, json)
Hash identifier:          W0liZLhM0ToaRdtGyAczLUjSwSSyHoUT2kfTykS9WDg=
Subject key identifier:   D9:78:26:C6:0F:D2:41:41:17:8C:C5:05:53:90:F2:0C:27:93:2B:F5
Authority key identifier: 0F:90:69:2A:1E:EF:E7:F0:A1:AC:68:B5:E1:AC:09:F7:02:69:71:CC
Certificate issuer:       /CN=A91185B8/serialNumber=0F90692A1EEFE7F0A1AC68B5E1AC09F7026971CC
Certificate serial:       029E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft
Manifest number:          029A
Signing time:             Mon 21 Sep 2026 01:41:37 +0000
Manifest this update:     Mon 21 Sep 2026 01:41:37 +0000
Manifest next update:     Mon 28 Sep 2026 01:41:37 +0000
Files and hashes:         1: D5BpKh7v5_ChrGi14awJ9wJpccw.crl (hash: 7KdVsLNczRKs4g76cfLbHsbp2A2P0wLSNTD8L7XGhRU=)
                          2: 61BCB5467F5F11F1BEA7A26F5FA30FBC.roa (hash: SeQUnFSLQHOFUsaseN6yWVAw0Pri/I36or2wIB3les8=)
                          3: 624A40D27F5F11F1BEA7A26F5FA30FBC.roa (hash: CTuiIjeKzXxi3ZMYeyZBR0nwz6i115ctqbvud5AdBUg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.crl
                          rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 670 (0x29e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91185B8, serialNumber=0F90692A1EEFE7F0A1AC68B5E1AC09F7026971CC
        Validity
            Not Before: Sep 21 01:41:37 2026 GMT
            Not After : Sep 28 01:41:37 2026 GMT
        Subject: CN=6ab08b51-8662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:26:88:e2:50:0e:13:af:26:78:e6:02:5a:a6:
                    a9:4e:3b:c5:23:0a:a6:65:60:a0:47:cd:46:42:29:
                    ad:78:94:6b:46:ec:dc:43:7e:24:0c:46:14:29:d7:
                    a0:b8:16:27:57:b8:32:01:dc:30:ba:65:47:c1:8e:
                    a7:1f:f1:21:0d:7d:55:96:6e:7e:5f:b4:e8:2f:3e:
                    95:f9:bc:1e:c8:ef:8f:e4:a7:ad:8a:6a:fa:f0:15:
                    e3:81:dd:c3:ab:12:ef:ca:2f:46:36:df:90:18:4e:
                    3e:db:1e:eb:dd:f8:cc:5a:24:98:7f:67:8f:a7:9b:
                    78:8e:ce:93:cc:31:ee:b3:c3:1b:78:7c:c7:1b:bf:
                    03:69:2e:0d:4d:af:a0:8c:4e:4d:47:25:83:df:6e:
                    31:06:cb:fd:c3:ee:8b:18:53:ee:f6:ea:f4:e9:cf:
                    69:db:21:6d:02:9f:c7:ad:18:70:e0:53:e4:72:b3:
                    ca:48:49:e0:b2:9c:9d:7a:fc:39:e6:dc:30:21:65:
                    a2:10:b2:70:9d:ce:fe:58:8c:f6:ce:c0:50:39:da:
                    19:0e:e6:46:00:d4:10:f9:5d:e2:fb:4b:00:0c:8d:
                    66:e4:5b:07:70:7d:6e:cd:a4:c7:38:91:af:97:18:
                    27:c5:b6:bc:18:cf:d3:4d:af:a2:41:2e:4b:38:6c:
                    86:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:78:26:C6:0F:D2:41:41:17:8C:C5:05:53:90:F2:0C:27:93:2B:F5
            X509v3 Authority Key Identifier:
                keyid:0F:90:69:2A:1E:EF:E7:F0:A1:AC:68:B5:E1:AC:09:F7:02:69:71:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ff:a9:83:93:94:da:1f:00:5b:9a:d0:77:09:d9:a0:a4:7e:
         17:07:11:83:31:33:50:16:c5:20:a5:f6:8d:ee:5c:06:d5:47:
         22:78:3a:e0:df:a0:48:fb:35:17:1b:88:a6:43:da:c7:38:a1:
         61:05:8b:4f:01:10:e7:60:a5:d6:a1:ff:ef:68:42:9f:d2:3b:
         2f:0f:1e:0c:16:2b:e7:86:f5:4c:5e:19:3a:00:7f:20:7d:f0:
         ef:0b:7f:08:7a:24:4a:65:cb:21:be:89:45:0b:25:6a:48:b5:
         9f:93:35:0f:a0:ea:b3:d0:8b:e0:c9:71:0d:44:34:70:26:71:
         64:9e:25:6a:c5:45:a5:09:9f:bd:11:96:60:dd:04:3f:f5:2e:
         ad:32:8f:01:d1:a6:19:f3:37:4b:06:48:8f:8d:53:3f:ef:6a:
         36:ad:e8:b3:04:ef:39:ad:30:97:30:1a:35:2e:54:c4:34:16:
         93:aa:60:5f:31:5e:a2:61:ae:ba:c3:a6:91:a1:56:fd:41:cf:
         8a:bc:3b:c4:98:32:df:23:67:85:36:89:43:29:14:59:80:99:
         b2:fb:76:68:2e:15:0a:2a:ff:3a:f2:3b:14:c0:35:76:d2:bf:
         e8:ee:45:99:f3:70:ea:b3:43:2b:7b:76:12:ec:23:76:70:e3:
         29:45:f5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:38:41 2026 by rpki-client