Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft
File:                     0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft (raw, json)
Hash identifier:          e/PopSQpXRD/Nfu/iuzakA05BxDO4SNTN3v0IhE5mJ4=
Subject key identifier:   10:37:7D:ED:BC:A5:C8:BD:1C:A7:7E:DF:7D:E1:2B:3C:ED:1C:8B:C4
Authority key identifier: D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC
Certificate issuer:       /CN=A9128077/serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC
Certificate serial:       0828
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft
Manifest number:          0818
Signing time:             Tue 22 Sep 2026 20:58:35 +0000
Manifest this update:     Tue 22 Sep 2026 20:58:35 +0000
Manifest next update:     Tue 29 Sep 2026 20:58:35 +0000
Files and hashes:         1: 0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl (hash: E095Qxte3sZ3weQ4IPLPddR+43MI1UOK5kJX6sq9kk4=)
                          2: 7AD47B2234EE11EE927E9F6AC4F9AE02.roa (hash: wYlujTbswSDeeFMSYd73S87Flzl6QKtEy7MCM+sd2XU=)
                          3: 1D4A72B2350811EE96CD9F16C4F9AE02.roa (hash: mGVNnVziBhRo1V/PDIywj3hrytZfjWlRe3xWrqYZppM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl
                          rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:58:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2088 (0x828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128077, serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC
        Validity
            Not Before: Sep 22 20:58:35 2026 GMT
            Not After : Sep 29 20:58:35 2026 GMT
        Subject: CN=6ab2ebfb-b00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7d:26:fb:9a:ad:3c:19:ab:ef:1c:d8:02:75:
                    31:d7:bb:87:b4:7a:c5:d3:fa:7f:1b:b0:2e:ca:9d:
                    19:43:5a:30:a1:aa:4a:8f:61:c2:e7:d8:31:2c:62:
                    a3:68:c2:53:48:7c:d2:43:7b:f6:ef:ae:ad:ff:26:
                    6f:7e:a5:e2:fa:aa:20:d3:0e:78:92:45:96:e6:3a:
                    af:a0:3e:3f:81:2f:48:37:f0:ce:13:c3:f7:1e:d4:
                    e7:6e:c3:93:44:a4:6f:29:66:7c:fd:fa:4b:7d:0f:
                    3b:0a:c1:a7:0d:65:59:1d:70:f0:6f:2b:e5:bc:bf:
                    38:0b:07:1f:98:d7:5f:eb:95:4b:3c:91:40:a1:05:
                    6c:cd:03:44:75:24:f5:45:b3:02:dc:27:cd:e9:75:
                    82:f8:1c:69:f1:ff:a3:4d:35:29:33:3c:dc:2c:56:
                    ec:e1:51:cd:70:0e:66:cf:b1:8a:33:a5:45:fb:74:
                    8f:d2:b5:ad:54:20:72:ec:da:8c:f2:81:1e:66:bb:
                    9b:99:5c:f6:b4:c3:57:8c:b6:df:90:4f:47:48:d2:
                    7f:1e:0d:aa:3b:9d:d8:ac:54:d0:83:f5:f2:86:7c:
                    22:bd:72:3f:a4:07:16:61:16:eb:d2:a7:32:0c:24:
                    d1:9e:bb:fd:6d:55:ec:9e:4e:48:01:79:43:b3:ab:
                    1c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:37:7D:ED:BC:A5:C8:BD:1C:A7:7E:DF:7D:E1:2B:3C:ED:1C:8B:C4
            X509v3 Authority Key Identifier:
                keyid:D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:07:10:32:70:1c:45:85:e1:0b:7a:fd:57:52:ba:b4:ec:c7:
         52:e1:9b:69:73:da:36:85:2b:90:13:d3:82:64:dd:84:4e:0b:
         c4:86:20:ce:5b:55:33:aa:5b:05:65:eb:3d:26:a1:1d:89:49:
         fa:ac:9a:55:50:05:f2:22:b0:20:f5:51:1d:18:7c:75:9e:cf:
         09:f3:e9:f2:55:73:32:1a:57:74:fc:7c:a4:56:f7:b4:39:c1:
         e5:10:7c:ee:96:4e:a4:d8:53:93:2f:fc:4e:67:b4:42:3f:5e:
         de:fe:27:f3:aa:d6:42:33:ab:2f:c7:f3:54:ec:5b:d3:aa:3f:
         b8:64:94:30:5b:42:f7:d5:20:c3:74:31:bd:ff:e4:16:d0:77:
         0c:ea:ea:64:74:20:6b:f5:af:4a:cc:bf:bd:f9:38:5d:3f:39:
         d6:b9:0a:0e:34:8f:32:b7:98:24:36:d8:15:19:92:37:1b:72:
         0a:55:3e:19:e3:ec:42:08:2d:2b:0b:11:1c:7e:c5:1d:66:8c:
         ce:24:0a:50:d6:4b:11:c6:5c:8e:36:a2:8d:9e:07:b0:de:14:
         d9:44:f4:00:3f:ac:8e:16:7f:70:3b:f0:41:e3:96:4e:1a:b6:
         05:58:c5:17:96:5d:11:4f:ea:1f:d2:83:0f:1d:15:bc:bf:d6:
         3b:53:2d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:36:24 2026 by rpki-client