Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
File:                     cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft (raw, json)
Hash identifier:          lnp1QYpUsasuMNqbpMYz1e2BZwwPx98HtQvxtlMrXCI=
Subject key identifier:   99:04:5F:3D:CA:C5:32:F0:F6:5E:51:0E:AF:D8:B7:F7:BB:86:3F:4B
Authority key identifier: 72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92
Certificate issuer:       /CN=A9126356/serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492
Certificate serial:       1214
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
Manifest number:          1205
Signing time:             Sat 26 Sep 2026 17:12:10 +0000
Manifest this update:     Sat 26 Sep 2026 17:12:09 +0000
Manifest next update:     Sat 03 Oct 2026 17:12:09 +0000
Files and hashes:         1: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl (hash: u/DpX25a8/ywe5QxK91IX9YerpfHoe+D4Q+Q0AU9N7Y=)
                          2: SSR14suH5zDbegDxpP8MiAU-Ucc.asa (hash: aVynsoJzM4CC62nxfZPPHHbmFxBhxpQKOCc/QGOjd5Q=)
                          3: FBD6D2BE158711E9881C4D1FC4F9AE02.roa (hash: E1OSH7JCQBxemNHPqUv5orByc7cho1dIBYg/1C4flvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl
                          rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 17:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4628 (0x1214)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126356, serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492
        Validity
            Not Before: Sep 26 17:12:09 2026 GMT
            Not After : Oct  3 17:12:09 2026 GMT
        Subject: CN=6ab7fcea-05b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:71:bd:75:89:d2:15:87:8f:a7:5c:ae:9c:09:
                    77:bb:47:26:b1:09:af:70:42:f3:0a:5a:6c:cc:1f:
                    b6:2d:4f:25:93:75:7b:40:f5:af:9c:aa:33:83:9a:
                    7e:ac:4e:a0:12:25:41:d7:39:0f:84:98:99:55:00:
                    cd:71:89:de:1d:4f:ca:9a:dd:34:7e:d9:d0:c0:90:
                    ba:91:7e:65:5d:e2:c9:8c:e4:6c:bc:2c:9c:62:8b:
                    be:3d:ad:a2:8e:33:1e:bd:58:a6:cd:a5:f6:d6:be:
                    07:26:fd:aa:92:ed:49:a7:3b:fd:84:bf:25:05:ce:
                    aa:ce:bc:8b:d9:bc:05:6e:8b:10:7e:05:14:ed:db:
                    74:a9:60:70:3e:5a:c1:62:e9:ca:41:3f:6e:1d:c6:
                    05:53:99:75:7a:30:ea:a7:18:5c:a7:96:de:cc:78:
                    c9:44:76:58:ae:e1:a0:7e:97:fd:32:8a:13:ae:27:
                    df:9f:f4:3c:e3:63:8e:e4:4d:24:63:56:ff:5f:90:
                    57:ae:58:91:f4:ce:32:46:07:50:f8:7e:34:f8:dd:
                    ba:fa:bc:b6:d9:43:14:19:c9:3e:ff:f1:71:76:5c:
                    f7:cd:f8:d0:81:47:6d:50:8c:4c:68:eb:30:24:5f:
                    9a:97:86:4f:85:a0:b2:8f:96:b1:2a:95:87:15:1c:
                    e5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:04:5F:3D:CA:C5:32:F0:F6:5E:51:0E:AF:D8:B7:F7:BB:86:3F:4B
            X509v3 Authority Key Identifier:
                keyid:72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:22:2c:b9:a2:b9:ae:41:a0:7a:50:9f:bf:e3:b2:c8:34:c8:
         4c:a7:8b:80:9b:94:32:0a:12:57:78:aa:0c:a0:a2:6a:17:04:
         ae:07:90:48:42:9c:fa:07:a4:82:4f:db:f5:52:58:da:1a:d9:
         23:b5:c3:b8:f6:c6:28:59:f9:df:6a:ba:7e:80:a5:b2:26:28:
         a6:3b:4c:87:0a:dc:31:71:db:1d:38:4f:4d:75:dd:62:6a:e4:
         9e:24:ba:7a:d7:5b:0f:08:ac:3f:b0:1a:ac:ee:f8:7b:c5:c7:
         d2:ca:32:1d:0c:f0:b9:32:6b:0e:fa:2c:7b:4f:cb:5e:5d:18:
         37:15:64:c9:88:71:ea:f6:bb:10:d2:63:93:4e:2d:e2:d9:07:
         97:bf:02:8f:b4:99:bd:df:30:42:08:e4:0b:02:7c:e2:3c:66:
         4b:c8:38:bc:07:58:65:cd:af:4e:aa:e2:c7:68:04:4d:0b:b5:
         4c:98:8e:8a:be:ae:77:1b:12:89:c2:01:ef:ab:65:3b:63:b5:
         1f:5d:5a:64:29:eb:b9:8c:56:82:31:b4:e1:5d:b2:b9:20:28:
         7c:06:20:a0:8e:ff:88:7c:0c:fe:34:9a:de:f0:7a:4d:39:2b:
         2c:36:be:00:76:72:b6:c8:23:15:c2:74:62:b9:8d:d3:dd:d2:
         c3:49:a2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:12:49 2026 by rpki-client