Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
File:                     nFh2OitDfLKSxGQXuNSO32tXAc8.mft (raw, json)
Hash identifier:          PnKgZ+PzPRsk3XxdXu26oI50mUvy5MHeIaDpLVNNorQ=
Subject key identifier:   B2:3D:FA:C5:FD:9A:0B:AF:DB:89:F3:2A:50:57:C3:71:87:6D:65:68
Authority key identifier: 9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF
Certificate issuer:       /CN=A9130683/serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF
Certificate serial:       0847
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
Manifest number:          083D
Signing time:             Sun 20 Sep 2026 20:58:39 +0000
Manifest this update:     Sun 20 Sep 2026 20:58:38 +0000
Manifest next update:     Sun 27 Sep 2026 20:58:38 +0000
Files and hashes:         1: nFh2OitDfLKSxGQXuNSO32tXAc8.crl (hash: +ZSsJ6fQXBZN82iHNKDNIR9edEWHNaTcyDdTSp/7RdU=)
                          2: EEF3557C75A211EBBCD0587BC4F9AE02.roa (hash: pv+Z3nYrrzxoESGY4e/aJmMCDLaqcQjYTIDQwPuKCpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.crl
                          rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2119 (0x847)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130683, serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF
        Validity
            Not Before: Sep 20 20:58:38 2026 GMT
            Not After : Sep 27 20:58:38 2026 GMT
        Subject: CN=6ab048ff-1567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1b:1d:29:6b:43:01:08:88:13:cb:6c:4d:09:
                    83:72:f7:21:f1:14:38:00:b6:e1:33:14:73:20:53:
                    3d:3b:38:56:64:a5:87:3e:a7:c6:fd:d9:67:8a:a7:
                    a0:91:8b:02:64:5e:97:6a:1c:42:7b:4b:4c:9f:84:
                    1d:b0:c4:8c:51:78:db:a2:97:77:54:a9:04:01:4f:
                    54:2a:86:7a:16:34:3d:0a:18:6d:2a:8f:5e:01:de:
                    45:7f:25:cb:41:40:8a:df:47:27:d8:a4:33:4a:c5:
                    5f:38:85:6a:57:33:7a:c8:a8:3e:75:e6:fb:07:8d:
                    43:5f:fe:d0:87:8e:f6:cd:de:12:08:09:41:bd:d4:
                    aa:7d:bb:a3:a1:56:c1:cc:87:46:37:31:78:d1:87:
                    44:86:57:95:4a:f7:71:b7:f3:de:24:2d:a4:3b:db:
                    ec:99:41:c4:33:ac:94:d8:0c:5c:ad:b6:3c:fc:da:
                    ae:73:b7:3d:13:c2:f0:83:5b:aa:62:a4:48:bc:0f:
                    47:39:41:62:17:1b:53:1c:ec:c9:48:83:1b:b0:6d:
                    64:b7:91:58:16:52:d6:18:db:25:b2:77:75:96:94:
                    6a:5b:65:b2:a7:b1:ec:f3:b1:2e:28:77:31:28:f4:
                    dd:33:56:b4:dd:39:9e:1c:78:9e:10:d9:71:aa:c9:
                    1b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3D:FA:C5:FD:9A:0B:AF:DB:89:F3:2A:50:57:C3:71:87:6D:65:68
            X509v3 Authority Key Identifier:
                keyid:9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:64:c3:da:49:da:af:4a:d2:fd:5d:9c:78:93:31:fc:7c:d2:
         eb:2c:4e:fb:df:be:bc:6b:52:b6:52:b0:61:2d:23:53:c1:9d:
         ca:0d:09:8b:f9:61:6f:70:04:53:b5:fe:14:bf:9e:86:e8:41:
         f9:25:5f:90:df:21:0b:46:fd:02:f5:29:9c:2d:dc:88:ea:50:
         ad:17:49:2c:05:42:e7:35:0d:65:c7:65:34:de:63:db:e9:ce:
         9e:ab:7f:b1:fe:e4:65:3e:fe:7c:04:84:ab:b1:19:7f:55:f0:
         50:0f:ed:dd:9c:2d:c5:10:9b:39:f0:6c:37:d6:b3:de:c9:b1:
         44:9e:d1:37:37:ce:05:ae:ec:c2:b1:f5:64:93:2a:f5:c2:95:
         2d:00:9c:b8:51:0d:82:53:41:ca:b4:1c:a4:75:32:0c:13:b4:
         52:a2:72:36:49:d2:21:d0:ae:9d:58:ea:a0:41:4d:46:e2:72:
         df:44:c3:00:40:a4:21:55:f5:fa:14:bf:ef:25:68:c3:ad:28:
         0b:1d:bf:8a:6e:35:9e:34:7c:1a:38:2e:f3:ba:63:3c:73:d6:
         43:85:18:c9:86:53:79:7d:0d:61:e9:29:0e:e3:43:05:13:0e:
         28:c4:69:c6:d7:f4:1a:10:3b:b7:74:02:16:6b:70:c6:cf:d3:
         46:5a:17:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:31:43 2026 by rpki-client