Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
File:                     X-srwGbHr1fSafdXM_D_g-mQOaM.mft (raw, json)
Hash identifier:          Ln931+lb0KzCxZuGnajew3VrKm8AqT6S891aGGSUFco=
Subject key identifier:   82:4C:BC:5A:4C:BD:F3:C5:E8:94:D3:6D:37:50:75:88:CF:BE:2F:65
Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
Certificate issuer:       /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Certificate serial:       0280
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
Manifest number:          025A
Signing time:             Wed 23 Sep 2026 02:18:01 +0000
Manifest this update:     Wed 23 Sep 2026 02:18:01 +0000
Manifest next update:     Wed 30 Sep 2026 02:18:01 +0000
Files and hashes:         1: X-srwGbHr1fSafdXM_D_g-mQOaM.crl (hash: o06S3pmlEIXzKiSP86XrYkV1aEaW81RZMKqe18xSlpU=)
                          2: BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa (hash: APhmcXAzZIhCLyKa4vEtY9uKqyvDEiwnjzZDypho3ks=)
                          3: D060B5C4B9EA11EFBB71A952C4F9AE02.roa (hash: 49k7hYKPHCdkEplr/vlCkM9fSpbYLX28P/Rt2uYRTiE=)
                          4: 2F5D72E695EC11F0BF295042C4F9AE02.roa (hash: IquZlt5lfhcsaKAcex7emT9MmUtyhWwyhAr1ZZXgoW8=)
                          5: C7D74E2CB9EA11EFBCC89752C4F9AE02.roa (hash: FIImGW7D3wQcguwVtZ5iJ7aLvUHChQOr5SwPoXHVfUQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
                          rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 640 (0x280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
        Validity
            Not Before: Sep 23 02:18:01 2026 GMT
            Not After : Sep 30 02:18:01 2026 GMT
        Subject: CN=6ab336d9-e676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c5:ea:63:ff:d6:bd:31:45:db:b2:b6:7c:fb:
                    ab:2b:83:de:47:7b:25:ef:2a:f1:50:e8:e9:f2:7f:
                    3d:85:b5:82:7e:58:62:0f:42:9b:12:42:2f:de:36:
                    6b:7d:b8:2d:f8:16:55:cf:f8:bb:1b:64:89:2e:53:
                    7e:b0:2a:89:c6:69:cf:c3:3f:a9:21:3e:67:1f:a7:
                    57:48:6c:f1:bb:79:af:69:ac:6d:ea:89:2f:cf:28:
                    4c:b5:a6:29:b9:e6:07:66:f2:c4:8d:8e:9a:b9:ef:
                    57:32:ee:75:d3:f4:b4:12:e0:ab:8e:72:06:da:d4:
                    04:3c:74:06:32:89:75:7e:4c:bb:e2:25:b9:ad:92:
                    31:9c:ea:2d:4d:d1:36:61:13:29:f9:f7:62:40:48:
                    c9:ff:b2:d7:86:f4:0e:f6:45:39:88:4e:ac:30:89:
                    45:93:a0:4b:78:8e:93:b2:1d:dc:e4:15:50:32:b1:
                    be:df:f5:1a:51:42:b0:af:d8:2a:69:bd:b1:fd:60:
                    c1:d4:4a:4f:e9:c4:d7:4a:c4:96:fe:fd:90:27:5f:
                    8f:e1:5c:d5:dd:3b:bf:66:5b:75:1b:56:42:42:0b:
                    cf:17:e5:c8:06:03:48:af:33:a2:bb:e3:50:05:36:
                    b4:c3:81:91:4f:06:f7:1d:3a:8b:29:4d:8d:6a:1b:
                    62:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:4C:BC:5A:4C:BD:F3:C5:E8:94:D3:6D:37:50:75:88:CF:BE:2F:65
            X509v3 Authority Key Identifier:
                keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:89:4c:8c:7f:40:52:0c:2c:45:10:8f:15:bb:4b:73:31:6d:
         c0:bd:88:c5:99:37:8e:15:a0:17:f8:71:cb:56:ae:b5:5e:e1:
         7c:d0:2c:c4:d6:64:8d:f5:49:2c:51:7f:c0:cc:b4:94:05:5e:
         c4:61:9a:d1:b2:ea:33:8c:4e:2f:bc:11:7f:16:3d:a8:cc:71:
         1b:f5:26:a2:c9:a8:47:f9:99:f9:fa:be:ec:98:d8:fc:c8:1f:
         b7:fa:b5:35:f7:9c:35:f3:85:62:27:b9:fa:27:2f:a4:39:d1:
         ab:3f:64:bc:14:15:63:d3:6d:ca:7e:21:48:cb:72:d0:ff:38:
         5c:52:e8:93:b2:2b:d8:80:b4:e7:f3:a9:9a:0e:51:3d:b5:b5:
         f9:d5:88:10:e7:32:47:b7:78:3d:56:e4:61:70:c1:38:75:c9:
         af:de:b5:e6:f7:3b:8d:39:e7:4e:0c:db:d8:be:f0:58:e5:3e:
         45:49:fb:18:06:a8:c9:b2:47:af:98:47:5b:d1:08:53:5d:2c:
         62:3e:a7:b2:cd:dc:4c:c1:c5:53:17:fe:47:4a:81:3a:2f:79:
         e1:2a:44:c9:7b:1d:77:d0:6e:7c:dc:15:bd:0b:f8:4a:70:78:
         c3:c8:5e:75:77:bb:e7:41:68:7e:24:20:9e:88:d0:b8:66:2d:
         8a:1c:2c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:22:20 2026 by rpki-client