Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
File:                     3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft (raw, json)
Hash identifier:          AKaLyGyEKOw2l0VfC2HCZRh78K8nc591BEwu4oBwTOk=
Subject key identifier:   C2:A0:E9:8B:19:31:A3:7E:74:57:72:5D:7A:E6:27:AB:4C:72:37:CF
Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55
Certificate issuer:       /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955
Certificate serial:       01D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
Manifest number:          01CB
Signing time:             Mon 21 Sep 2026 03:44:57 +0000
Manifest this update:     Mon 21 Sep 2026 03:44:57 +0000
Manifest next update:     Mon 28 Sep 2026 03:44:57 +0000
Files and hashes:         1: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl (hash: DiU8D3vUy3Kr+p1YtPZXG5UdzEpDOKi01THHJ3LYNGs=)
                          2: 90195128FAC411EEB1CDF882C4F9AE02.roa (hash: 6f62DrCIqXQzH0Me6UWUB3Obo/TfW+7iKkRiIr7raYQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl
                          rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:44:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133A27, serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955
        Validity
            Not Before: Sep 21 03:44:57 2026 GMT
            Not After : Sep 28 03:44:57 2026 GMT
        Subject: CN=6ab0a839-c536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bf:9c:9b:13:1c:e4:4e:28:b8:6d:92:eb:16:
                    0d:89:d6:7a:2c:b1:67:92:24:31:8c:67:21:64:f7:
                    44:c7:03:0e:35:37:29:7a:27:6e:f3:ad:68:5d:59:
                    ca:3c:26:31:41:6a:d3:d3:83:08:96:8b:52:d6:a1:
                    72:05:2b:26:1d:0f:87:b2:b2:0f:97:e7:e8:8e:ba:
                    23:07:e8:35:8a:d4:01:69:5f:33:03:56:d5:1b:c4:
                    a9:51:d3:bf:c5:9e:a3:95:60:d5:14:a0:1a:db:a1:
                    12:6a:50:d4:1c:2d:e8:5a:63:2d:b1:74:a5:2a:3c:
                    cf:40:69:e9:41:b8:0a:1b:47:ef:eb:3a:be:85:81:
                    74:85:ba:86:0e:a1:e5:1f:f4:8c:55:79:ae:18:b2:
                    e8:9d:eb:3f:65:ea:42:dd:b3:48:13:39:23:e1:5d:
                    c7:ef:80:97:f4:71:ef:61:d7:fd:da:d0:11:07:54:
                    58:e6:fc:cc:21:26:0d:04:2d:60:08:e8:30:8d:3d:
                    ae:05:8f:c9:23:69:8b:f2:9b:83:b3:1b:66:86:bb:
                    cf:5a:fc:99:f9:71:56:93:bd:a6:d7:e7:b2:42:8b:
                    d8:a3:65:9e:b1:ef:d8:a6:bd:8c:2c:e3:7c:c4:6e:
                    6d:4d:e4:d6:e7:4e:cc:6a:73:9d:76:15:e3:a8:19:
                    55:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A0:E9:8B:19:31:A3:7E:74:57:72:5D:7A:E6:27:AB:4C:72:37:CF
            X509v3 Authority Key Identifier:
                keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:1b:1e:33:ef:37:23:e6:6b:be:23:d9:62:4d:59:67:95:93:
         c2:75:de:72:23:c5:d0:ac:a4:6f:b3:8d:d2:41:b6:7c:84:b4:
         ff:a0:70:0b:b8:98:01:b1:31:e9:23:e0:e1:78:67:bf:ce:4f:
         7b:ac:e7:ab:e5:4f:b6:26:e0:1b:bc:45:67:a1:65:f2:f8:3e:
         0c:1c:7e:95:6f:c0:1c:39:00:c7:53:5f:2f:70:68:32:dd:9a:
         00:dd:55:05:7a:c2:e0:0b:c2:57:4e:7b:63:06:2a:76:15:f9:
         1a:c2:cc:67:63:2e:ce:8a:d0:f2:49:dd:f9:19:5a:65:28:ce:
         de:e6:c4:d6:db:27:b3:8f:4d:bb:f1:7e:00:7d:da:54:30:7e:
         25:f4:9d:ad:be:21:07:fe:03:fc:f9:8e:64:c5:34:dd:26:c2:
         3c:58:3f:cf:53:4c:6e:57:da:16:71:6b:5b:e3:44:83:c7:5d:
         a7:18:d4:61:67:97:57:2d:2a:78:b3:40:d1:a1:e4:48:49:f1:
         f7:f8:1e:be:d1:bf:ad:8c:4e:af:0f:48:92:1d:38:76:02:05:
         79:6c:dc:95:ec:11:9c:46:a4:81:3c:e7:c2:9f:d6:c5:c0:70:
         5c:5b:87:97:ee:86:82:45:6d:3e:12:13:fe:d7:09:05:8f:18:
         8a:67:b1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:54:22 2026 by rpki-client