Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
File:                     IpO9TF5PmillNYywGN8-Tu5N8c8.mft (raw, json)
Hash identifier:          9wc1mEnxN7xbIlYWI2EhnT1Kr5efU8y9dJ16UFCCplk=
Subject key identifier:   62:9A:91:36:AF:86:9D:D5:EA:8B:DF:AE:38:98:47:15:26:E4:57:D5
Authority key identifier: 22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF
Certificate issuer:       /CN=A915177C/serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF
Certificate serial:       30E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
Manifest number:          30C0
Signing time:             Tue 22 Sep 2026 15:24:46 +0000
Manifest this update:     Tue 22 Sep 2026 15:24:45 +0000
Manifest next update:     Tue 29 Sep 2026 15:24:45 +0000
Files and hashes:         1: IpO9TF5PmillNYywGN8-Tu5N8c8.crl (hash: 6uV6ICXmApJ02VutZSBguAD12LSna9RtnrbdQ+nG7vQ=)
                          2: 149AB4BE7CE911EEB9A02D83C4F9AE02.roa (hash: +Qp6vsqqY646UGgo2jMWEe+cx9g7miXROpVKh+lI0/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.crl
                          rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12520 (0x30e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915177C, serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF
        Validity
            Not Before: Sep 22 15:24:45 2026 GMT
            Not After : Sep 29 15:24:45 2026 GMT
        Subject: CN=6ab29dbd-04f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:9a:df:32:78:e4:32:7d:86:84:5f:5e:31:30:
                    d3:f2:f4:bd:91:e9:0c:6c:10:23:b7:b0:ce:c4:c6:
                    51:fa:3d:1f:74:7f:0a:98:69:5f:12:9c:5b:27:47:
                    a5:cb:a1:ad:f8:0b:3c:01:d0:cf:32:81:27:34:cc:
                    7c:f0:55:cc:da:50:fd:ab:f7:9d:49:6f:70:4a:ad:
                    6d:b0:6c:08:8f:9e:5a:3a:a7:39:63:b9:3b:54:4a:
                    ce:70:a5:ce:65:6b:b6:7c:03:93:f0:b6:4f:ec:a7:
                    af:77:a9:e9:2f:1e:c3:b0:8c:10:f0:b3:95:cd:44:
                    6b:90:1a:77:e7:d9:7b:6d:c6:d8:d7:00:d3:3a:4c:
                    64:26:98:e7:a8:9d:50:db:da:e0:d0:a9:6d:18:72:
                    5f:91:cb:e9:86:2b:ab:72:ff:8a:a1:b5:53:23:2b:
                    0e:5e:d0:3a:a0:f9:60:f4:ca:f8:c7:25:43:30:ad:
                    aa:86:52:b4:b4:93:cb:dc:44:23:0f:a5:a5:c9:35:
                    68:52:f0:ed:3a:a2:cb:7a:7e:e8:90:c7:99:83:33:
                    42:e9:75:7a:7c:fd:2f:2e:18:0a:5d:aa:2b:7f:e1:
                    b1:94:d5:e6:b3:50:fb:dc:a6:de:b5:03:32:89:6f:
                    b4:ab:72:76:af:e6:b5:53:3b:08:08:33:bb:6b:d0:
                    f3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9A:91:36:AF:86:9D:D5:EA:8B:DF:AE:38:98:47:15:26:E4:57:D5
            X509v3 Authority Key Identifier:
                keyid:22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ca:b8:b4:a0:19:95:a7:40:3b:69:cf:d7:08:06:56:90:a6:
         31:d6:01:e1:59:93:82:8e:bd:40:0e:43:e3:27:b7:d4:15:99:
         17:d2:7c:86:a5:75:0e:0e:f6:fd:17:0e:12:30:f6:8e:f6:9e:
         3b:41:d0:29:14:d2:94:d2:b1:4c:4c:e3:1a:9a:21:2d:9e:59:
         f2:2c:56:2d:6d:a8:65:9e:f3:39:13:c6:80:1a:91:92:05:c1:
         96:5d:ac:c0:fc:5d:80:c9:81:65:02:c5:47:e9:5c:82:c9:57:
         ca:a2:20:74:3c:3e:83:b9:40:9b:82:70:61:28:d2:47:5f:0d:
         7a:be:85:08:0e:9d:fc:f2:83:0b:93:c6:d8:3a:3f:7b:34:9e:
         2f:c5:cb:d3:1c:40:2a:e7:a8:91:16:f5:bd:67:21:79:1a:cd:
         a1:c5:f9:4e:c1:4b:38:b2:e3:1b:20:3c:66:ec:ff:2e:1a:83:
         77:2f:81:73:e4:78:c7:ce:e6:96:99:83:be:d4:6d:3f:9b:0a:
         6c:38:08:63:5c:46:16:34:6b:3a:50:a1:d2:e7:28:76:40:b7:
         fa:70:38:d8:6d:80:b6:12:b5:64:78:3e:3b:3d:fd:b2:aa:eb:
         17:4d:c2:5f:b0:a6:b0:08:23:f3:a9:fd:c9:10:4c:c0:16:2b:
         6a:06:86:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:28:01 2026 by rpki-client