Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
File:                     cDaiAHf_h_76NADX-QdrfhmDiy4.mft (raw, json)
Hash identifier:          PwoILNZgTgv8tLentADsn0M5IztlZZp9m/J6Nj/QvAE=
Subject key identifier:   54:AB:B1:D0:85:33:1D:4F:28:72:10:E6:C8:65:13:7D:B9:93:96:97
Authority key identifier: 70:36:A2:00:77:FF:87:FE:FA:34:00:D7:F9:07:6B:7E:19:83:8B:2E
Certificate issuer:       /CN=A913F124/serialNumber=7036A20077FF87FEFA3400D7F9076B7E19838B2E
Certificate serial:       02EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
Manifest number:          02E5
Signing time:             Sat 19 Sep 2026 01:05:16 +0000
Manifest this update:     Sat 19 Sep 2026 01:05:15 +0000
Manifest next update:     Sat 26 Sep 2026 01:05:15 +0000
Files and hashes:         1: cDaiAHf_h_76NADX-QdrfhmDiy4.crl (hash: sBAdF0JndEZ1YTRD1z64MXiKaKCsBnLhCng4AuTwlgc=)
                          2: B13C376049EC11ED9EAEAC0CC4F9AE02.roa (hash: Jcrz3ZMIRTZXtPUMC8bHGWBfZpfKQUhylS08ZgVKfOo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.crl
                          rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 747 (0x2eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F124, serialNumber=7036A20077FF87FEFA3400D7F9076B7E19838B2E
        Validity
            Not Before: Sep 19 01:05:15 2026 GMT
            Not After : Sep 26 01:05:15 2026 GMT
        Subject: CN=6aaddfcc-8366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:81:03:79:49:90:5e:47:1d:bf:ec:7f:16:fd:
                    5f:5e:00:e1:0a:6a:28:2c:db:e8:55:2f:e5:bd:99:
                    0e:49:3b:9c:a7:e2:d0:8d:c6:bd:3b:0a:d7:f1:b5:
                    96:ee:9b:b3:d0:b9:f0:3e:7c:a2:74:75:cc:e9:c2:
                    fd:f6:0f:72:37:9f:84:ce:49:8a:fc:df:87:d9:ab:
                    0d:1f:6e:1d:ae:a9:17:37:7b:fe:b1:0e:b0:7f:ab:
                    f0:37:f6:03:5f:02:c3:ef:65:36:14:03:1c:63:cb:
                    f9:40:bc:46:6b:43:0c:44:9b:05:fd:57:e5:93:b8:
                    c0:8d:43:0a:e3:5d:62:88:d4:42:5e:85:a9:02:bf:
                    80:03:30:ad:fb:d6:dd:1d:55:cb:9d:da:e4:05:98:
                    93:84:f6:e4:0c:65:5f:0e:27:86:2d:e8:02:40:a8:
                    38:80:25:36:7f:23:ae:76:b4:c0:14:8a:56:a1:98:
                    28:96:7a:19:0d:31:c0:a1:20:17:a6:6b:96:58:7d:
                    ca:38:2c:d6:69:07:3b:dd:ba:1a:e8:a8:fa:c0:59:
                    9b:4b:a8:7b:32:86:b2:6e:d7:05:ee:7c:68:8a:ca:
                    b3:3a:29:a7:55:c8:74:61:2b:5a:9d:0d:01:0f:76:
                    a4:ad:ab:6f:41:13:10:1a:a2:eb:93:34:69:f3:63:
                    b6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AB:B1:D0:85:33:1D:4F:28:72:10:E6:C8:65:13:7D:B9:93:96:97
            X509v3 Authority Key Identifier:
                keyid:70:36:A2:00:77:FF:87:FE:FA:34:00:D7:F9:07:6B:7E:19:83:8B:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:32:b6:b9:e0:0a:fb:9a:f6:84:a5:fa:cb:78:43:2f:16:78:
         c5:0f:32:33:b0:f5:89:41:c1:44:5a:11:3a:45:57:e8:86:38:
         e1:d0:80:bb:3e:67:53:2c:73:d5:de:c6:4c:7e:a2:87:13:e0:
         a8:ab:00:6a:65:12:c4:e2:58:37:94:36:dd:5e:49:fa:aa:78:
         13:a3:27:ba:bc:49:a3:f9:8f:37:dd:3a:9a:36:ae:a5:e3:af:
         3c:55:3a:ab:48:51:8a:bd:61:3c:3d:28:f4:ba:1f:3d:45:2c:
         a5:f8:dd:5d:0d:79:b5:71:e2:f4:b7:31:36:31:fe:63:81:0e:
         f2:8c:36:94:62:f7:14:af:0c:3c:a1:b7:d2:ca:e9:52:fc:08:
         1b:6a:79:bf:cb:81:e5:f7:ba:06:c9:0d:8b:92:a6:2b:b2:b0:
         bf:63:83:a2:a3:62:3d:9d:06:2a:3b:f5:67:73:21:6a:18:dd:
         17:f9:52:22:ac:9b:49:70:57:ca:40:d1:97:72:bb:a2:f7:c5:
         53:d2:50:cf:64:33:e9:1b:de:fb:4b:30:4f:30:5c:54:6f:ab:
         72:ee:9f:0d:4f:a8:56:91:dc:46:20:2a:58:88:e8:cd:39:21:
         82:e8:ad:06:8f:16:87:78:d8:41:57:b0:f1:bf:6b:cc:47:cb:
         a5:2e:7e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:56:56 2026 by rpki-client