Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
File:                     dK62Py8dqVfWWCCWT_ed8PWTgAw.mft (raw, json)
Hash identifier:          Pxp61qSEWeesJXr5+5UrT7IDmuPXPJ1wiWDIs7kWPIc=
Subject key identifier:   9F:EC:73:5D:23:44:16:43:18:DE:F0:56:A5:EB:05:8E:53:70:68:AD
Authority key identifier: 74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
Certificate issuer:       /CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Certificate serial:       0390
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
Manifest number:          0350
Signing time:             Wed 23 Sep 2026 00:44:08 +0000
Manifest this update:     Wed 23 Sep 2026 00:44:07 +0000
Manifest next update:     Wed 30 Sep 2026 00:44:07 +0000
Files and hashes:         1: dK62Py8dqVfWWCCWT_ed8PWTgAw.crl (hash: Pik/1HMUUKRugRT2e7TFYAgslZu/5QoqnxO6lx63O+E=)
                          2: 9ABAA0F2860711F1825B87C479A30FBC.roa (hash: NOJB3Hv2pMFrhKnZajYeAs3Ut2mtOF2q/wUaov9o1Gw=)
                          3: 3329AB14860611F188D398BD79A30FBC.roa (hash: s9MG4AtqSHdsd3gX5TM+FCq3eB5Ek6aWf3JSkbBd0xo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl
                          rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 912 (0x390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914661C, serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
        Validity
            Not Before: Sep 23 00:44:07 2026 GMT
            Not After : Sep 30 00:44:07 2026 GMT
        Subject: CN=6ab320d8-1c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e7:6d:15:31:f2:bf:9d:94:e9:7a:2a:08:b7:
                    a1:05:1c:2c:dc:92:c4:71:3f:88:fd:e6:05:ae:41:
                    54:08:44:dd:76:30:c1:52:6d:ff:50:3f:05:e1:12:
                    c0:4c:b1:d6:b7:e7:9f:09:69:8d:55:82:eb:ca:e2:
                    fa:aa:0e:3b:4f:25:cb:40:e1:ae:17:a6:47:c1:c4:
                    c8:f9:d9:12:a4:cb:a3:c0:52:7f:4c:c0:fa:90:21:
                    d4:a0:1b:0c:f0:9f:ba:19:4a:b6:22:92:21:2e:71:
                    a2:e5:0d:e0:ff:71:2a:b7:3b:2e:30:74:db:e3:35:
                    82:3e:cc:35:6f:00:ca:fc:26:d6:ef:76:d5:81:43:
                    52:2d:68:da:97:69:ce:ae:55:d4:67:37:c6:6a:13:
                    3d:62:9f:c1:f2:72:ac:6c:c9:b1:64:38:c4:ae:d3:
                    1b:bd:23:d1:79:f4:59:e6:a3:4d:63:5e:8a:48:53:
                    eb:e1:a2:5a:08:04:c6:c5:e4:02:6c:de:90:b1:a4:
                    14:ef:ff:87:26:e8:1b:e0:1b:54:2e:20:39:4e:9b:
                    ec:f1:5b:9f:20:32:f1:94:df:09:67:0e:24:0b:87:
                    77:48:1f:e2:f8:b0:fb:81:e4:1a:91:ff:b9:28:84:
                    2d:14:87:e3:01:2b:87:02:c2:63:fb:b0:3a:d6:4b:
                    ee:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EC:73:5D:23:44:16:43:18:DE:F0:56:A5:EB:05:8E:53:70:68:AD
            X509v3 Authority Key Identifier:
                keyid:74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:e9:85:3f:32:cc:d7:17:19:bd:95:9e:f7:f0:78:89:56:31:
         8f:8e:c7:7d:1d:1c:d4:81:70:61:67:4d:13:27:c9:98:34:fd:
         b8:68:10:9c:dd:e5:b0:a8:49:26:4d:6c:23:82:0b:4f:e1:66:
         4e:7a:a2:d8:17:04:ce:74:a3:c7:1f:b4:f0:58:07:71:c4:f1:
         ee:a5:5f:5a:7c:f1:4a:e0:44:96:ff:ad:79:68:ce:e1:1b:84:
         26:62:17:68:23:c6:c9:3f:e7:ce:03:3a:08:be:5b:b9:66:8a:
         c7:a9:62:36:ba:c8:36:e8:b4:c4:19:c6:96:56:dd:f0:35:97:
         a3:3e:b8:60:f1:52:fd:9d:b8:c1:ee:eb:15:84:2f:d1:3a:f9:
         0d:61:03:51:93:d3:af:36:70:22:0f:ad:87:96:3a:13:94:41:
         5f:df:95:b5:83:7e:2b:36:61:16:eb:09:8f:40:ba:65:72:28:
         ee:36:86:1b:f2:69:47:02:8e:86:94:c4:84:cd:75:0f:ff:62:
         c6:c1:e3:9a:a8:9f:79:3b:8e:f7:00:ef:dd:3d:49:a4:ce:34:
         d6:78:cc:61:d3:d2:a6:35:56:48:d5:3b:08:3e:42:86:83:90:
         4c:d8:32:32:af:f0:99:d4:27:a7:d0:c2:8d:e9:48:a4:a9:f5:
         99:cb:a0:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDY2MUMxMTAvBgNVBAUTKDc0QUVCNjNGMkYxREE5NTdENjU4MjA5NjRGRjc5REYw
RjU5MzgwMEMwHhcNMjYwOTIzMDA0NDA3WhcNMjYwOTMwMDA0NDA3WjAYMRYwFAYD
VQQDEw02YWIzMjBkOC0xYzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqOdtFTHyv52U6XoqCLehBRws3JLEcT+I/eYFrkFUCETddjDBUm3/UD8F4RLA
TLHWt+efCWmNVYLryuL6qg47TyXLQOGuF6ZHwcTI+dkSpMujwFJ/TMD6kCHUoBsM
8J+6GUq2IpIhLnGi5Q3g/3EqtzsuMHTb4zWCPsw1bwDK/CbW73bVgUNSLWjal2nO
rlXUZzfGahM9Yp/B8nKsbMmxZDjErtMbvSPRefRZ5qNNY16KSFPr4aJaCATGxeQC
bN6QsaQU7/+HJugb4BtULiA5Tpvs8VufIDLxlN8JZw4kC4d3SB/i+LD7geQakf+5
KIQtFIfjASuHAsJj+7A61kvukwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ/sc10j
RBZDGN7wVqXrBY5TcGitMB8GA1UdIwQYMBaAFHSutj8vHalX1lgglk/3nfD1k4AM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjYxQy83NzBDQkUyNDM2
QTYxMUVEOEZDMTcwMkNDNEY5QUUwMi9kSzYyUHk4ZHFWZldXQ0NXVF9lZDhQV1Rn
QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RLNjJQeThkcVZmV1dDQ1dUX2VkOFBXVGdBdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NjYxQy83NzBDQkUyNDM2QTYxMUVEOEZDMTcwMkNDNEY5QUUwMi9kSzYyUHk4ZHFW
ZldXQ0NXVF9lZDhQV1RnQXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl+mFPzLM1xcZvZWe9/B4iVYxj47HfR0c1IFwYWdNEyfJmDT9uGgQnN3lsKhJ
Jk1sI4ILT+FmTnqi2BcEznSjxx+08FgHccTx7qVfWnzxSuBElv+teWjO4RuEJmIX
aCPGyT/nzgM6CL5buWaKx6liNrrINui0xBnGllbd8DWXoz64YPFS/Z24we7rFYQv
0Tr5DWEDUZPTrzZwIg+th5Y6E5RBX9+VtYN+KzZhFusJj0C6ZXIo7jaGG/JpRwKO
hpTEhM11D/9ixsHjmqifeTuO9wDv3T1JpM401njMYdPSpjVWSNU7CD5ChoOQTNgy
Mq/wmdQnp9DCjelIpKn1mcugMQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 05:52:17 2026 by rpki-client