Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.mft
File:                     V3LjuCeMtseqvXrPnvViq1k8LoI.mft (raw, json)
Hash identifier:          ZG1iNiKTEDZh9vj4yVgmzHf+++QOWXDXaPoCPu8yZms=
Subject key identifier:   36:A8:54:97:B5:5A:E5:4C:3B:28:5C:83:9B:A9:88:C1:FB:51:F8:84
Authority key identifier: 57:72:E3:B8:27:8C:B6:C7:AA:BD:7A:CF:9E:F5:62:AB:59:3C:2E:82
Certificate issuer:       /CN=A914699C/serialNumber=5772E3B8278CB6C7AABD7ACF9EF562AB593C2E82
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V3LjuCeMtseqvXrPnvViq1k8LoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.mft
Manifest number:          1C
Signing time:             Sun 20 Sep 2026 07:06:30 +0000
Manifest this update:     Sun 20 Sep 2026 07:06:30 +0000
Manifest next update:     Sun 27 Sep 2026 07:06:30 +0000
Files and hashes:         1: V3LjuCeMtseqvXrPnvViq1k8LoI.crl (hash: OLq62p42sBPUmOdr42DD7yubGk+EKe61k/5P2jL+zdM=)
                          2: 92243F9CAAAC11F19EE8F4133811F970.roa (hash: X5UcKHUhKO5EVQTmpXQMdqmQJczCqwLUQGKNWOLKoTs=)
                          3: 152BB7F4ADC211F198D614673711F970.roa (hash: GGIUeDGn3HzDFIRDM3tu/8bPISYpRr+TfUQkdvjdq7A=)
                          4: 2781681CA80A11F18FD626046A11F970.roa (hash: UN2ZfaWt8JP0i7V9wp19uxy592b9LNbXukxDe/iw5Bk=)
                          5: CA4E2968B4C111F19C71C9826E11F970.roa (hash: U/0WaPYtpEen6QKvsDEe/PvQICF7br00xSCzPGhI9jg=)
                          6: 2989C96AAA7111F19E4BB0B76311F970.roa (hash: ARh2VJW40jPAVhTJXwkB9/u8r21SXgXRVDQpwqIpEEs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.crl
                          rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V3LjuCeMtseqvXrPnvViq1k8LoI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914699C, serialNumber=5772E3B8278CB6C7AABD7ACF9EF562AB593C2E82
        Validity
            Not Before: Sep 20 07:06:30 2026 GMT
            Not After : Sep 27 07:06:30 2026 GMT
        Subject: CN=6aaf85f6-da80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:19:58:85:e9:80:67:a4:f4:77:76:d7:39:6b:
                    1d:63:32:83:61:02:6e:11:be:9c:9e:9b:3b:5f:61:
                    de:1b:14:7e:a1:79:bf:a2:7f:f4:dc:5b:57:ed:97:
                    30:46:75:ca:27:25:07:99:ec:ca:79:99:2b:31:e7:
                    48:bc:7f:66:98:7b:c8:59:fc:35:d0:68:e7:e3:85:
                    21:da:35:7e:96:55:55:19:31:a1:c2:07:c3:61:7b:
                    73:bd:17:d5:1a:4c:c2:ff:af:de:57:81:05:ac:31:
                    74:47:f6:a0:91:65:44:27:bd:b5:9f:df:ba:f2:8d:
                    93:51:8a:92:20:85:69:ae:70:7b:a8:35:db:71:70:
                    58:5e:7d:ed:75:fc:34:4d:4c:2a:21:26:97:ed:e0:
                    69:d4:d9:56:42:9b:89:3d:cb:53:19:ae:3c:bb:3e:
                    e4:0d:4d:5b:33:94:2e:0f:a8:c6:ab:1e:d9:8a:56:
                    4a:d6:d6:a7:a9:33:9e:dc:89:82:9d:91:05:d4:8a:
                    4c:8c:b3:7d:06:81:60:27:bb:57:23:a5:71:04:31:
                    f2:34:8a:d8:f1:9d:6b:52:12:07:70:13:fa:a5:7b:
                    a8:6a:a9:7d:2d:85:8f:d1:ce:55:a3:ed:82:6d:15:
                    68:a2:0f:fb:45:e9:2d:c4:3e:1e:7a:20:0d:1d:59:
                    15:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A8:54:97:B5:5A:E5:4C:3B:28:5C:83:9B:A9:88:C1:FB:51:F8:84
            X509v3 Authority Key Identifier:
                keyid:57:72:E3:B8:27:8C:B6:C7:AA:BD:7A:CF:9E:F5:62:AB:59:3C:2E:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V3LjuCeMtseqvXrPnvViq1k8LoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f1:d2:01:36:de:38:02:95:65:68:32:2a:4a:3e:1a:08:1b:
         28:ff:4b:45:e4:c4:8e:d3:78:2b:b4:a9:b3:57:82:2c:7a:73:
         be:01:85:33:c5:48:df:c0:41:8c:3b:bf:d7:ad:3f:78:ce:5f:
         13:c9:7a:57:d4:7a:08:b8:be:34:e8:81:d8:a0:77:91:68:7e:
         9d:f5:05:a5:36:c6:69:f7:d3:ca:27:fe:0e:86:ef:de:f4:aa:
         8c:77:7e:78:e1:f9:35:94:eb:e7:2b:d9:c6:62:ca:d6:9b:c6:
         c1:a8:d4:41:5e:73:cc:1f:cc:be:95:78:ab:31:72:07:39:62:
         38:19:94:6d:b1:8c:62:de:7a:b0:1b:c2:d2:18:eb:20:41:97:
         56:8f:54:5a:a5:09:43:35:35:64:05:61:7f:33:1b:23:6e:20:
         3c:7b:2a:59:3a:ea:0d:a5:6e:3e:5f:e7:6a:bc:1b:1d:04:07:
         ad:9c:e3:09:6f:46:1b:d9:55:e1:09:b4:21:c5:f9:b6:43:69:
         0b:bb:ef:99:da:f5:02:42:1d:22:71:ee:7d:b4:8b:ab:74:2b:
         8b:1b:a1:27:5c:cb:45:27:4e:71:a9:57:fb:df:9b:db:1e:65:
         39:b3:a5:bc:53:bd:aa:2b:a0:57:40:95:7d:b6:51:b6:9c:c4:
         a5:a8:8c:6a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
Njk5QzExMC8GA1UEBRMoNTc3MkUzQjgyNzhDQjZDN0FBQkQ3QUNGOUVGNTYyQUI1
OTNDMkU4MjAeFw0yNjA5MjAwNzA2MzBaFw0yNjA5MjcwNzA2MzBaMBgxFjAUBgNV
BAMTDTZhYWY4NWY2LWRhODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDdGViF6YBnpPR3dtc5ax1jMoNhAm4RvpyemztfYd4bFH6heb+if/TcW1ftlzBG
dconJQeZ7Mp5mSsx50i8f2aYe8hZ/DXQaOfjhSHaNX6WVVUZMaHCB8Nhe3O9F9Ua
TML/r95XgQWsMXRH9qCRZUQnvbWf37ryjZNRipIghWmucHuoNdtxcFhefe11/DRN
TCohJpft4GnU2VZCm4k9y1MZrjy7PuQNTVszlC4PqMarHtmKVkrW1qepM57ciYKd
kQXUikyMs30GgWAnu1cjpXEEMfI0itjxnWtSEgdwE/qle6hqqX0thY/RzlWj7YJt
FWiiD/tF6S3EPh56IA0dWRVnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNqhUl7Va
5Uw7KFyDm6mIwftR+IQwHwYDVR0jBBgwFoAUV3LjuCeMtseqvXrPnvViq1k8LoIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2OTlDL0Q2NkI4RkQ2QTdF
OTExRjE5RjZBODI3NEE2RUU1MjhFL1YzTGp1Q2VNdHNlcXZYclBudlZpcTFrOExv
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG
RDFGRjIvVjNManVDZU10c2VxdlhyUG52VmlxMWs4TG9JLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2
OTlDL0Q2NkI4RkQ2QTdFOTExRjE5RjZBODI3NEE2RUU1MjhFL1YzTGp1Q2VNdHNl
cXZYclBudlZpcTFrOExvSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBl8dIBNt44ApVlaDIqSj4aCBso/0tF5MSO03grtKmzV4IsenO+AYUzxUjfwEGM
O7/XrT94zl8TyXpX1HoIuL406IHYoHeRaH6d9QWlNsZp99PKJ/4Ohu/e9KqMd354
4fk1lOvnK9nGYsrWm8bBqNRBXnPMH8y+lXirMXIHOWI4GZRtsYxi3nqwG8LSGOsg
QZdWj1RapQlDNTVkBWF/MxsjbiA8eypZOuoNpW4+X+dqvBsdBAetnOMJb0Yb2VXh
CbQhxfm2Q2kLu++Z2vUCQh0ice59tIurdCuLG6EnXMtFJ05xqVf735vbHmU5s6W8
U72qK6BXQJV9tlG2nMSlqIxq
-----END CERTIFICATE-----
Generated at Mon Sep 21 06:41:06 2026 by rpki-client