Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
File:                     59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft (raw, json)
Hash identifier:          ay7+YQV7z47Bf5wb39q2dFj6Meuke1do9iUexqYNwh0=
Subject key identifier:   C7:EB:04:A1:96:B6:A7:27:D8:5E:1D:7F:AB:13:72:F6:AE:86:97:32
Authority key identifier: E7:D5:28:DE:E5:10:20:A0:FE:ED:CB:5C:26:A5:B9:2C:50:F8:1F:AC
Certificate issuer:       /CN=A911D951/serialNumber=E7D528DEE51020A0FEEDCB5C26A5B92C50F81FAC
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
Manifest number:          86
Signing time:             Mon 21 Sep 2026 07:39:08 +0000
Manifest this update:     Mon 21 Sep 2026 07:39:08 +0000
Manifest next update:     Mon 28 Sep 2026 07:39:08 +0000
Files and hashes:         1: 59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl (hash: NRaIhBnocRsErGyJ3hu9DLY+uqnQqR8C7xDr/G1cXGo=)
                          2: 8FFC4170EF6C11F0B51A35C1596F56BC.roa (hash: ripzMW6h7Gz3iYRNTEaVSGtOjcI1v54jEJjVqeKsNek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl
                          rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:39:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D951, serialNumber=E7D528DEE51020A0FEEDCB5C26A5B92C50F81FAC
        Validity
            Not Before: Sep 21 07:39:08 2026 GMT
            Not After : Sep 28 07:39:08 2026 GMT
        Subject: CN=6ab0df1c-2fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:58:19:fa:9d:69:3c:22:3d:ad:3f:12:04:56:
                    88:8b:5d:25:cf:8e:79:51:94:06:3e:2f:a7:3d:5a:
                    79:23:37:8b:bd:5a:bc:75:0f:e7:1b:81:9a:2c:33:
                    67:e2:a3:ad:49:a7:b4:90:5b:0e:58:ff:99:1e:4a:
                    3b:1d:18:54:c2:4e:4a:73:fc:28:5a:d6:a1:04:2b:
                    1d:38:1d:75:d0:77:55:a3:03:c5:40:eb:f2:9e:e0:
                    33:9b:99:9b:79:eb:52:5e:60:2f:2b:79:9a:9a:6a:
                    57:51:52:29:d7:8a:a3:34:c1:43:9f:4c:41:d2:2a:
                    a6:9b:4f:2d:da:e7:46:87:03:6a:93:0c:64:04:38:
                    b0:c8:aa:23:83:06:bc:4c:75:21:41:0d:b5:be:73:
                    da:b2:dd:27:04:70:58:64:ab:f3:8c:d6:a1:41:0b:
                    35:c9:1e:f6:10:ea:0b:9a:ad:31:ae:61:c6:44:b3:
                    f5:02:e0:f1:94:88:c2:be:c8:7e:9f:a3:f3:be:97:
                    c1:cf:4b:9f:0d:4c:49:6b:cd:11:55:e7:5d:2f:0d:
                    3b:ca:51:d4:f2:a2:97:8f:9c:ef:38:60:94:6e:a7:
                    92:8d:f7:ea:3f:31:9a:a0:a0:41:ed:d7:fb:06:3d:
                    14:dd:db:8d:e6:ab:75:a4:e3:5e:4b:ee:17:1a:aa:
                    5e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:EB:04:A1:96:B6:A7:27:D8:5E:1D:7F:AB:13:72:F6:AE:86:97:32
            X509v3 Authority Key Identifier:
                keyid:E7:D5:28:DE:E5:10:20:A0:FE:ED:CB:5C:26:A5:B9:2C:50:F8:1F:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:36:5e:05:3b:bf:75:68:28:5c:a2:81:1d:84:07:4f:3e:da:
         21:01:00:78:b0:74:5d:2e:f0:7e:9b:b2:2d:09:eb:8c:61:78:
         5b:97:2a:57:31:db:59:f3:ca:90:94:ff:46:f4:f6:f9:0c:09:
         66:68:bf:a8:7e:fd:5f:ec:73:57:18:dd:ad:26:fd:7e:d7:6a:
         24:da:78:78:c7:54:95:24:16:72:4e:db:c3:08:fa:02:25:0e:
         16:57:fc:de:32:28:e7:7f:d9:f5:ed:35:42:54:5a:f8:28:6f:
         f4:b4:51:79:58:ea:7a:81:b8:5c:e2:9e:3e:dd:99:e8:39:80:
         d1:4c:32:f8:bd:5d:67:ab:09:ce:aa:bd:f6:45:e2:47:5b:fc:
         ca:39:1b:7b:a4:ec:16:cc:2d:92:1a:32:cf:31:95:58:26:22:
         4c:09:c2:a6:2f:24:75:8d:0b:10:90:68:88:ea:28:9a:47:47:
         d4:e6:70:5a:9f:d4:02:47:54:60:79:3f:88:6e:ec:32:5a:61:
         ac:17:9a:a9:89:93:8d:3d:a9:2b:5a:65:23:7d:1d:18:7b:ed:
         0d:5c:60:41:82:42:1e:e7:87:a1:2a:21:89:cb:28:da:af:2a:
         aa:93:27:bf:a7:f2:e3:29:37:40:22:15:54:7b:7f:23:d2:6d:
         3c:a0:a9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:11:11 2026 by rpki-client