Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
File:                     -0iFaOdSC8eCoRmJdikDDtBpXNs.mft (raw, json)
Hash identifier:          GwKygNJVIlyE3EXhvXykNpNhX8AtAfGv2sx9yZSa+B0=
Subject key identifier:   84:FC:49:C5:D4:D7:89:21:51:F6:15:53:F8:B7:B9:27:62:9C:2D:EF
Authority key identifier: FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB
Certificate issuer:       /CN=A914459D/serialNumber=FB488568E7520BC782A119897629030ED0695CDB
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
Manifest number:          013B
Signing time:             Mon 21 Sep 2026 05:31:26 +0000
Manifest this update:     Mon 21 Sep 2026 05:31:26 +0000
Manifest next update:     Mon 28 Sep 2026 05:31:26 +0000
Files and hashes:         1: -0iFaOdSC8eCoRmJdikDDtBpXNs.crl (hash: v4EOiP5JLVZ1KhvX3D+vsw9J/8g3mRNH+gryHbakrKs=)
                          2: 4720EB9ED60F11EFA2510540C4F9AE02.roa (hash: dIUAkDQ7djth80Fp66K2XB/D2by8C9/LB315auIcwbE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl
                          rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914459D, serialNumber=FB488568E7520BC782A119897629030ED0695CDB
        Validity
            Not Before: Sep 21 05:31:26 2026 GMT
            Not After : Sep 28 05:31:26 2026 GMT
        Subject: CN=6ab0c12e-ace3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:05:ec:88:ee:83:ea:eb:03:46:0f:a3:f3:3a:
                    03:6d:4c:8e:7a:59:71:ca:23:4f:53:2d:1d:23:53:
                    eb:1e:91:f9:af:9e:42:b9:a3:5c:23:97:aa:9a:56:
                    3c:d8:2c:f5:82:fe:a7:d1:fc:0d:9c:7c:67:76:88:
                    1b:65:26:dd:1d:93:ec:70:9a:43:b4:06:79:3d:04:
                    e7:6c:5f:65:e8:a6:d4:84:08:f2:96:5c:b6:10:6e:
                    e5:22:2a:6c:85:bb:ae:a3:43:0c:99:b4:25:d1:24:
                    88:3f:f2:f1:ef:19:f2:37:3f:0a:46:4a:fb:1e:89:
                    9a:7f:89:25:0d:63:39:b5:59:c8:11:b9:d7:93:f7:
                    db:b1:a9:57:8f:f0:ec:ba:b9:eb:61:a8:2b:34:34:
                    7d:71:47:38:85:70:9e:db:7f:ad:99:ad:24:cf:8e:
                    85:b5:94:4b:b5:d8:a4:74:23:85:10:85:86:e5:5b:
                    22:56:2e:3a:53:5a:38:7f:60:cd:1e:30:81:08:9d:
                    af:c6:41:d2:4b:9a:82:a6:71:1a:17:27:87:bc:05:
                    46:89:bf:06:54:6a:ac:35:8f:1a:e6:a2:54:e4:0c:
                    d1:84:ea:3e:53:2b:34:20:e3:bb:6f:e1:84:76:4a:
                    c8:bb:e6:9b:3e:d0:94:09:d7:a3:e8:97:a4:b3:2a:
                    92:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FC:49:C5:D4:D7:89:21:51:F6:15:53:F8:B7:B9:27:62:9C:2D:EF
            X509v3 Authority Key Identifier:
                keyid:FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:22:d4:8b:f4:a1:11:d4:48:1f:4b:fd:1d:cc:84:e0:55:69:
         70:f2:87:ca:b8:a2:88:19:8e:8f:2d:8a:49:b7:7c:5a:d7:79:
         6b:7f:04:2a:4c:6b:e4:ad:5f:82:82:2b:8d:67:f4:87:04:30:
         a6:56:9f:7d:ce:05:d3:b0:3d:5c:93:6b:9e:f3:5b:05:1c:c1:
         26:e9:45:82:e4:72:3b:74:79:e0:48:b5:b0:39:c8:5d:ea:e0:
         16:06:4f:72:97:d4:b8:02:2e:b6:ce:44:9b:7b:c3:2a:05:c2:
         43:42:d6:a2:53:15:cd:96:42:47:7d:7a:86:d3:b0:9c:ae:5c:
         3f:9b:ed:6c:28:c6:67:06:5e:6b:22:5f:2e:3c:7c:87:59:d6:
         12:7a:e8:a6:60:7e:fa:4d:e1:eb:e6:f3:af:fc:49:32:cc:3b:
         63:70:01:a4:c4:62:20:da:59:17:52:db:85:86:98:58:76:b2:
         51:24:e9:4f:26:e8:cc:22:47:0b:49:90:9b:d3:62:98:24:97:
         47:fb:b2:9f:91:1a:c0:74:de:bb:92:ae:21:06:f1:c6:35:25:
         52:30:e0:4a:5d:f8:8f:66:da:81:be:5d:48:d6:d5:8a:9e:f9:
         70:74:31:58:b3:4a:19:98:9f:f7:83:75:a7:95:ba:a8:79:f4:
         81:e3:d7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:50:18 2026 by rpki-client