Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft
File:                     D0a9vHSQTl34KfAVlbUcqqIBuds.mft (raw, json)
Hash identifier:          NVgcGHG6nFdC9ZNcuvVfAoXQ7ZftXVgWmrcmOyV/XMk=
Subject key identifier:   0E:67:2E:81:3C:09:04:8E:0D:2A:FA:29:0B:65:A1:43:37:0D:37:C0
Authority key identifier: 0F:46:BD:BC:74:90:4E:5D:F8:29:F0:15:95:B5:1C:AA:A2:01:B9:DB
Certificate issuer:       /CN=A91449E2/serialNumber=0F46BDBC74904E5DF829F01595B51CAAA201B9DB
Certificate serial:       027D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft
Manifest number:          0278
Signing time:             Mon 21 Sep 2026 01:59:12 +0000
Manifest this update:     Mon 21 Sep 2026 01:59:12 +0000
Manifest next update:     Mon 28 Sep 2026 01:59:12 +0000
Files and hashes:         1: D0a9vHSQTl34KfAVlbUcqqIBuds.crl (hash: 7iBFyg/vFgznzHHhsTHTtUnp5b8aCicVrW6ybKaAmsk=)
                          2: 568D8AACF00511ED9239BC6EC4F9AE02.roa (hash: XrKHKQzHMa1y0uVAA7/pa5YvcBRJFX+HV140KMXuEWw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.crl
                          rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:59:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 637 (0x27d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91449E2, serialNumber=0F46BDBC74904E5DF829F01595B51CAAA201B9DB
        Validity
            Not Before: Sep 21 01:59:12 2026 GMT
            Not After : Sep 28 01:59:12 2026 GMT
        Subject: CN=6ab08f70-51c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7c:33:80:36:b1:85:ad:d5:06:93:51:58:65:
                    06:c2:61:fc:3f:38:18:75:9a:d0:fc:57:2a:7b:f7:
                    34:81:08:e8:09:cc:4d:14:5e:99:2b:30:98:8f:ed:
                    3f:42:be:92:f4:ea:78:38:15:92:f4:b3:b9:5e:1c:
                    ee:df:21:d4:e8:a7:ff:55:9d:cd:3c:cc:15:68:e9:
                    a7:4e:f2:b7:01:8b:fb:63:ce:78:4b:33:19:3f:65:
                    01:ab:6f:0f:04:d9:84:c5:41:47:b6:1a:bd:63:66:
                    c8:38:d4:96:a6:b8:a9:23:4e:a5:27:34:de:c3:29:
                    22:76:cb:59:1e:6b:55:a4:5e:53:f6:53:8b:1e:77:
                    3c:69:be:fa:d5:60:5e:00:dd:00:e3:75:7f:f9:8d:
                    81:97:5e:1b:60:91:64:ee:c4:3e:53:d7:59:03:48:
                    0f:7b:a0:c0:3f:c7:95:c9:e6:3d:64:16:a5:4f:45:
                    82:11:f0:74:25:45:2e:d6:ef:c7:96:be:50:cf:56:
                    8b:93:d0:fd:7e:1d:8f:86:0e:e0:a8:b9:e3:de:ca:
                    bd:e1:4e:19:91:9a:95:12:6a:c6:98:77:5a:15:5d:
                    ee:46:2b:ac:47:5a:f8:65:8d:e3:d3:67:b7:db:38:
                    3a:4c:cf:5f:86:9d:83:98:b4:f1:2e:99:6c:c3:d3:
                    51:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:67:2E:81:3C:09:04:8E:0D:2A:FA:29:0B:65:A1:43:37:0D:37:C0
            X509v3 Authority Key Identifier:
                keyid:0F:46:BD:BC:74:90:4E:5D:F8:29:F0:15:95:B5:1C:AA:A2:01:B9:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ed:bf:2d:5a:a5:4d:ad:ce:62:99:8d:2b:c0:76:87:45:9b:e7:
         2e:b9:2a:6a:98:f8:d2:49:33:27:2c:b2:fa:08:d5:d1:6b:6b:
         c0:a9:79:3c:f3:ea:71:4c:7e:58:38:f0:d1:ec:89:56:51:e2:
         35:52:25:9e:a1:65:dd:82:81:c6:76:6b:ac:2b:3c:f0:cd:ba:
         ef:d9:f0:52:30:b6:6f:62:0c:83:7f:8c:bf:f4:c9:f6:a4:39:
         64:45:ac:c2:72:df:d7:ac:a3:a5:1c:fe:2e:e3:84:c0:e4:ab:
         a5:94:24:f4:a0:d1:3f:5c:a7:f3:55:1e:8d:5e:3e:51:3a:f9:
         df:f5:2f:d1:6a:6e:50:16:a5:3d:74:62:b5:3c:25:72:bb:f3:
         88:8a:92:e2:53:b4:4d:6d:70:b9:13:e9:ca:8e:41:6c:eb:28:
         e4:0c:86:60:77:2f:97:61:68:c6:3f:0a:98:f1:7c:73:69:04:
         33:64:4a:c4:22:23:c2:74:f4:c3:5a:34:23:c2:b0:9e:84:47:
         0c:4c:c7:5c:ae:67:04:71:d2:e4:a0:d3:5c:f9:9c:e3:7e:37:
         97:4c:30:1f:b3:9a:ba:1e:1b:aa:65:55:f0:83:6d:8b:09:c9:
         f4:cf:a8:26:39:82:14:21:6c:47:46:99:71:7f:57:47:eb:ea:
         0c:10:a1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:54:49 2026 by rpki-client