Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
File:                     mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft (raw, json)
Hash identifier:          +cL7OJytcSGfIdVcJ7oiC8CJzOic0+H8f0RXWkXVifw=
Subject key identifier:   5C:2C:B1:36:89:73:BB:CD:EE:05:F9:6B:0F:5E:1B:21:27:BB:17:8C
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Certificate issuer:       /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial:       018E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
Manifest number:          FC
Signing time:             Mon 21 Sep 2026 07:20:17 +0000
Manifest this update:     Mon 21 Sep 2026 07:20:17 +0000
Manifest next update:     Mon 28 Sep 2026 07:20:17 +0000
Files and hashes:         1: mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl (hash: SMH5rXDc7WiiQEEHNf9rt5eAlsTYE7CwdGa+9dcZMQU=)
                          2: D008EA4AC92211F0AD92BA21C4F9AE02.roa (hash: C7uwuCI7TqrSFDaQH8Zzgy3OnejNXfnU7UwlS3rMRx4=)
                          3: 58EF9BECC91911F080D34C6DC4F9AE02.roa (hash: BGmFZ9dRfD8EZt0V672OP6EF10Q8PY5YgUnIZ7TDMZ4=)
                          4: 0CAE2A9E71F411F1A5B2C1D970A30FBC.roa (hash: rlDXqQrWygilY/rnu+YsYCbI9x0JZnN2y8s4ah/lzhg=)
                          5: 1C2DE6A6D4A311F08D323E54C4F9AE02.roa (hash: tfqU0yp7k06G8a+YLVOyxW/4efWaKePEWJ7Jmic77aU=)
                          6: 7D679C84C92511F09CF68054C4F9AE02.roa (hash: S9XUSJnxKvgsBDvTpONrUcHMGtxkSO4X3tK4EZVr99k=)
                          7: A0000D2CC91A11F08D74C673C4F9AE02.roa (hash: sY76HWNe2DtCJtYS74CJx7prfOKVaNPpOF+PUbbT4H0=)
                          8: B2815168C92411F0B6E88126C4F9AE02.roa (hash: CKGad+jxEPQI1Q563YDVR4xdQQ2X4PcTAVEPopEqkPg=)
                          9: B40A9A4EC92411F09FAB8126C4F9AE02.roa (hash: 3N14qaLKIE8BN0vWJd2KtmivGDsUthfcKYgKyJWVe3U=)
                          10: B2F27AFAC92411F09F068126C4F9AE02.roa (hash: 18KHmFviCpW+1MpSyrjZy2QFKZiIGjy/6kV7DRcX0Y8=)
                          11: 9E825176C91A11F0876AC673C4F9AE02.roa (hash: d71K3UhmJpGSIPnHwtXjuIVmSy3U1s/D91e+1fG5beE=)
                          12: 57F3E1BCC91911F083BE4C6DC4F9AE02.roa (hash: 5dwmeSZ0SRVIGYAiO2cL5WhMdIRKKwW4wqbG2GaMUhM=)
                          13: 86DAE3A04A8C11F188553DBDAC833773.roa (hash: /cmAtIFJsaYzPWu1xv/Moo/JrJ9wB/SowewT12UuOCc=)
                          14: C4EC2A8ED4AB11F08EA0FC57C4F9AE02.roa (hash: AgB/Lpuse8T/z5cV67IzFShDTNVxyKAZ8KwUvRhawFQ=)
                          15: A87058D8445111F196638493CB833773.roa (hash: hjmeDeK8OqpXBY0QHMz/cAiPa+eSBTe6PN1y5++7MO8=)
                          16: 9DA31C0EC91A11F0AEDEC673C4F9AE02.roa (hash: DHpdbRF2Zso6P1hxGHzUsRdlrbKQ33Y/CNHuuhJjb5g=)
                          17: B4B21A80C92411F099228126C4F9AE02.roa (hash: rjpeXMm4lHb5Ck0Ms0tdS2iF+f13HUBBUzVVJWV4PPM=)
                          18: B3994B8CC92411F0928E8126C4F9AE02.roa (hash: yEb+i+mak4WjK+zJpb4ckWnaPd4JzdPaxKZm8fn0XYU=)
                          19: 9D3B8A8AC91A11F0B4BFC673C4F9AE02.roa (hash: /+8j5V7Q4inRuiyHFTWZNWPR7MOmulWdNP3/6QLql64=)
                          20: 9F196B2EC91A11F0AAB4C673C4F9AE02.roa (hash: tyQ+cSqsH2Qv0ddD7XoDmKPDoTkmyW/CRBZ+upSwUfo=)
                          21: 9E1FAF62C91A11F08AC0C673C4F9AE02.roa (hash: k/R5dEj2eRfr7v4Cwra7e+lRrjtz7qmR7/pXUFo+/fk=)
                          22: 20151124C8EE11F0BD2FFA4CC4F9AE02.roa (hash: V4KzQo4wZ81qbo+MqiN5pgO8Y+Nc0vatL2esSSR0mec=)
                          23: 5537463AC91911F0AFA34C6DC4F9AE02.roa (hash: +Aqpgsv63vqmtQkR3ggdxV7iptUt9Fzgpnq420IOOtc=)
                          24: 230E492ECB6711F0991B7E4FC4F9AE02.roa (hash: 0VVItxzYCnLY7VVLaBWnlI0vZxeP2nLbz57Thl0Luhg=)
                          25: 5451EB2EB00111F1814C468CA8EE528E.roa (hash: g0sZlR+Tugyl8w9T0bWQ9BfweqjnWE4JTngq+dx3Sow=)
                          26: 2486E3E0D4B011F0A4E6361AC4F9AE02.roa (hash: ZW6jL59jikFz0FLaafnNnq4L3V9q7AF9K/n1i2MST+s=)
                          27: 55B2771AC91911F0BA7D4C6DC4F9AE02.roa (hash: hVwh2ep8Iw7o7hX3MNdhNDewDGbex1WLUmhHf+4i9PI=)
                          28: 567E4552C91911F0BB194C6DC4F9AE02.roa (hash: BXcg8YArXJ5CmD6evpZM4dq8jMTCCVwQHO6BvkW3b7g=)
                          29: 9F9D4E9EC91A11F08745C673C4F9AE02.roa (hash: iYpQ7cVbxOGpGyj+MLYh3y7Qiox2JCzWYbEYeJID7GU=)
                          30: B1E31BF6C92411F087908126C4F9AE02.roa (hash: GQFH/AinoWYWy/+S33nOX1sOOYYuDreBoZl3vsEFu7k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:20:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
        Validity
            Not Before: Sep 21 07:20:17 2026 GMT
            Not After : Sep 28 07:20:17 2026 GMT
        Subject: CN=6ab0dab1-c2ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b2:dd:5d:33:36:e1:1b:f7:60:1e:a5:fc:0e:
                    65:16:b0:9c:eb:79:21:97:3e:29:7b:4e:76:77:8f:
                    71:6b:af:70:8b:c8:a8:71:7b:54:3a:a1:94:f8:6a:
                    60:f2:23:0b:d4:63:72:5c:43:16:ea:8d:3b:02:c9:
                    62:e7:5a:b8:65:1a:a0:71:58:44:64:c7:50:1f:aa:
                    68:dd:6e:ac:98:5e:cd:d7:ed:1f:e7:a5:0b:bc:9a:
                    7c:85:e7:f7:79:f2:ae:f0:0c:20:7b:07:fd:b4:08:
                    9f:b8:b5:98:03:48:35:a3:bb:fa:2d:71:66:56:db:
                    11:c2:a7:e2:e8:4d:f7:fa:4f:bf:cd:55:d9:11:78:
                    e2:23:0b:9e:a6:b1:aa:a6:69:59:7f:7f:df:a7:cf:
                    22:9d:7a:65:d9:82:1f:06:4a:73:eb:e3:80:4a:70:
                    d7:41:0f:68:da:04:f3:25:88:80:7b:8c:4d:76:1c:
                    ce:1e:2a:96:dc:ee:b6:b6:2a:26:7b:1d:10:a4:c4:
                    10:6f:11:d7:92:ec:44:01:a6:b8:15:a9:fb:a5:ab:
                    69:f3:37:5a:ba:e5:1f:08:98:f8:35:09:24:b2:30:
                    a9:d3:1b:8d:04:7c:37:a5:13:9a:9d:c9:d7:0c:e5:
                    01:37:ae:75:bd:66:78:ff:03:a3:62:5a:70:c0:d2:
                    35:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2C:B1:36:89:73:BB:CD:EE:05:F9:6B:0F:5E:1B:21:27:BB:17:8C
            X509v3 Authority Key Identifier:
                keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:9b:bf:f7:30:02:7d:be:d3:73:fb:a2:9c:38:23:c4:da:69:
         46:0c:fd:02:4a:f4:6c:cf:87:dc:8f:11:3f:0f:94:d9:90:cb:
         aa:ef:bc:64:48:f5:52:bd:3a:db:10:28:ca:a6:37:0a:a6:9e:
         b7:57:3a:e2:95:b0:d4:ca:c5:17:ea:6e:a1:b3:81:2f:24:5c:
         73:aa:63:91:b7:02:6d:05:31:a5:3e:5a:a9:dc:10:21:96:ab:
         71:85:4e:e6:de:65:be:0b:0c:24:0d:e2:94:4a:2c:bd:af:dc:
         f6:57:2c:e1:f4:d0:6f:74:81:6a:0b:32:03:fc:ee:6e:7a:fd:
         b4:2b:6e:07:3e:e3:c6:26:b0:07:44:2d:2b:33:cd:eb:ab:85:
         42:3f:86:6f:fd:04:97:1b:a0:5e:4c:cd:98:e9:d6:5c:2d:b7:
         b3:dc:16:3c:8e:09:50:8e:27:8e:7d:ca:f5:d4:52:14:49:ca:
         e1:d7:63:84:3d:d0:42:98:a4:2d:5a:83:1b:73:0e:49:5a:28:
         98:2b:f6:a5:68:61:1f:28:4a:c8:17:31:e0:9c:c9:8f:2a:b6:
         dd:33:2c:f6:17:a0:cc:a1:8c:60:66:7f:2e:95:b9:75:b7:c4:
         b7:49:16:aa:01:ab:48:4a:b6:bd:32:39:ad:a5:be:9b:d2:ed:
         e9:04:39:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:16:52 2026 by rpki-client