Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft
File:                     d31UDhYfpnH7JFijP_5L8z1qcBU.mft (raw, json)
Hash identifier:          78ZoOzC2nvblohFwJyEOBv8iByGe8IJYU9KutH7n+wQ=
Subject key identifier:   95:BC:83:F0:03:46:CF:27:5C:B4:B6:80:7E:A9:D9:79:51:BB:71:44
Authority key identifier: 77:7D:54:0E:16:1F:A6:71:FB:24:58:A3:3F:FE:4B:F3:3D:6A:70:15
Certificate issuer:       /CN=A913BA27/serialNumber=777D540E161FA671FB2458A33FFE4BF33D6A7015
Certificate serial:       FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft
Manifest number:          F6
Signing time:             Mon 21 Sep 2026 06:19:57 +0000
Manifest this update:     Mon 21 Sep 2026 06:19:57 +0000
Manifest next update:     Mon 28 Sep 2026 06:19:57 +0000
Files and hashes:         1: d31UDhYfpnH7JFijP_5L8z1qcBU.crl (hash: nAkaSu8txw/OWKpA9zRzhjLFCR5qIMvHCfUuoZmOMBk=)
                          2: 71B7688645AB11F0949A471EC4F9AE02.roa (hash: ke0eM4iCkX12hZuJQbpYZP0Prlr3aNWgiqlFHxWSZPI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.crl
                          rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BA27, serialNumber=777D540E161FA671FB2458A33FFE4BF33D6A7015
        Validity
            Not Before: Sep 21 06:19:57 2026 GMT
            Not After : Sep 28 06:19:57 2026 GMT
        Subject: CN=6ab0cc8d-9613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:d7:06:a5:56:d4:60:cb:15:ff:51:cc:70:49:
                    cb:7f:92:0f:61:25:58:5f:dd:7e:48:a5:5e:77:a5:
                    63:f9:6d:5d:ce:4a:14:fa:77:68:58:e2:83:81:94:
                    c9:52:4f:ca:70:f3:81:ce:44:06:07:99:c2:39:36:
                    65:9e:a6:cd:c1:c6:94:e3:bc:3c:28:31:63:aa:65:
                    24:04:2c:54:d2:df:4a:5b:50:8e:a2:9d:9e:9c:93:
                    5c:fd:56:95:e6:c6:b6:08:59:80:51:61:28:d2:2a:
                    74:f9:f9:69:ea:41:90:58:1c:a3:0f:dc:30:ce:00:
                    8c:64:a1:33:a4:d7:94:89:57:87:4e:fe:32:d8:0b:
                    04:c7:06:23:30:15:83:71:b5:a3:76:ef:06:ce:26:
                    d4:70:d2:4f:2e:8b:99:a8:dc:31:ef:7e:70:b2:72:
                    0e:c5:01:8e:0c:20:f9:62:99:7f:38:8f:bb:70:a7:
                    c2:cd:30:99:79:87:b0:11:33:76:17:d3:9c:4e:72:
                    52:75:08:64:44:74:6f:c3:0a:e3:de:4e:17:3e:7e:
                    37:74:15:50:4b:a3:22:69:70:65:78:31:a5:cc:e4:
                    f7:24:ef:52:bd:fe:cc:56:20:3d:1f:e8:f0:45:c8:
                    4a:e2:19:97:cc:2c:e2:30:c9:ef:b0:e3:31:ec:f7:
                    09:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BC:83:F0:03:46:CF:27:5C:B4:B6:80:7E:A9:D9:79:51:BB:71:44
            X509v3 Authority Key Identifier:
                keyid:77:7D:54:0E:16:1F:A6:71:FB:24:58:A3:3F:FE:4B:F3:3D:6A:70:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:1e:16:32:2a:e1:ac:09:f9:2c:63:aa:e5:31:84:07:88:49:
         da:35:f4:66:d1:38:50:38:1d:9e:d1:cc:a2:cd:29:5e:6b:96:
         f8:10:04:7d:a7:cb:64:0c:2d:19:a3:89:8a:7f:c5:f0:37:b3:
         2e:07:bf:8c:eb:b1:b6:4d:38:b7:d2:87:69:c0:28:e6:3a:b0:
         0e:6a:2c:ca:2e:fd:59:7c:47:de:90:28:bb:6c:b5:8b:64:71:
         28:1d:92:28:79:95:25:b0:6a:99:f7:83:d6:57:2c:75:0e:c9:
         a4:3c:cb:d3:65:97:e7:30:35:00:60:1f:5f:ad:23:68:f1:df:
         47:63:99:e8:ba:6a:de:1f:73:41:b6:18:4f:93:70:18:ac:a6:
         ba:d1:6a:c8:4a:c5:5f:a5:ee:00:a4:34:49:ef:f9:ea:78:20:
         32:c2:b6:7b:08:c4:aa:f5:d9:80:2c:a2:f3:ef:2e:3e:a4:76:
         46:c3:fc:f4:eb:fc:5f:91:a5:85:ce:8a:56:65:b7:db:75:58:
         3a:af:2b:6a:bf:d6:7d:0d:a0:3f:fa:ee:ba:22:a1:44:75:21:
         ed:14:e3:e9:41:93:ac:ea:4e:16:2a:ed:8b:4a:43:67:88:ef:
         e4:56:8f:e4:65:d5:dd:13:df:0e:52:a4:54:a8:b9:ab:27:be:
         b3:e5:53:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0JBMjcxMTAvBgNVBAUTKDc3N0Q1NDBFMTYxRkE2NzFGQjI0NThBMzNGRkU0QkYz
M0Q2QTcwMTUwHhcNMjYwOTIxMDYxOTU3WhcNMjYwOTI4MDYxOTU3WjAYMRYwFAYD
VQQDEw02YWIwY2M4ZC05NjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9tcGpVbUYMsV/1HMcEnLf5IPYSVYX91+SKVed6Vj+W1dzkoU+ndoWOKDgZTJ
Uk/KcPOBzkQGB5nCOTZlnqbNwcaU47w8KDFjqmUkBCxU0t9KW1COop2enJNc/VaV
5sa2CFmAUWEo0ip0+flp6kGQWByjD9wwzgCMZKEzpNeUiVeHTv4y2AsExwYjMBWD
cbWjdu8GzibUcNJPLouZqNwx735wsnIOxQGODCD5Ypl/OI+7cKfCzTCZeYewETN2
F9OcTnJSdQhkRHRvwwrj3k4XPn43dBVQS6MiaXBleDGlzOT3JO9Svf7MViA9H+jw
RchK4hmXzCziMMnvsOMx7PcJIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJW8g/AD
Rs8nXLS2gH6p2XlRu3FEMB8GA1UdIwQYMBaAFHd9VA4WH6Zx+yRYoz/+S/M9anAV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkEyNy9FQTRFNjY5QzQ1
OEMxMUYwQjJCRUI2NERDNEY5QUUwMi9kMzFVRGhZZnBuSDdKRmlqUF81TDh6MXFj
QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QzMVVEaFlmcG5IN0pGaWpQXzVMOHoxcWNCVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QkEyNy9FQTRFNjY5QzQ1OEMxMUYwQjJCRUI2NERDNEY5QUUwMi9kMzFVRGhZZnBu
SDdKRmlqUF81TDh6MXFjQlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdx4WMirhrAn5LGOq5TGEB4hJ2jX0ZtE4UDgdntHMos0pXmuW+BAEfafLZAwt
GaOJin/F8DezLge/jOuxtk04t9KHacAo5jqwDmosyi79WXxH3pAou2y1i2RxKB2S
KHmVJbBqmfeD1lcsdQ7JpDzL02WX5zA1AGAfX60jaPHfR2OZ6Lpq3h9zQbYYT5Nw
GKymutFqyErFX6XuAKQ0Se/56nggMsK2ewjEqvXZgCyi8+8uPqR2RsP89Ov8X5Gl
hc6KVmW323VYOq8rar/WfQ2gP/ruuiKhRHUh7RTj6UGTrOpOFirti0pDZ4jv5FaP
5GXV3RPfDlKkVKi5qye+s+VTQg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:13:20 2026 by rpki-client