Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
File:                     1gA1BzfqQktAGySBBT0rwpFsutE.mft (raw, json)
Hash identifier:          B3fHAobvnf2+gFgXtVlJL14kq+Og6llJX5HpsXlgHQM=
Subject key identifier:   52:7D:12:FD:D7:C1:95:88:73:4E:69:DA:B1:72:AB:CD:B6:1B:73:5E
Authority key identifier: D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1
Certificate issuer:       /CN=A9154973/serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1
Certificate serial:       01A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
Manifest number:          0198
Signing time:             Sun 11 Oct 2026 05:00:32 +0000
Manifest this update:     Sun 11 Oct 2026 05:00:32 +0000
Manifest next update:     Sun 18 Oct 2026 05:00:32 +0000
Files and hashes:         1: 1gA1BzfqQktAGySBBT0rwpFsutE.crl (hash: WzxzuBN3ePc8rN1W4un5w46XKtO8w8NA3lBkpmbHyag=)
                          2: FD557922606A11EF8B9F6820C4F9AE02.roa (hash: XYcxvXsIZf8Fuuj3PCiap/sXv4cR9z5b00T5aM5YJhY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl
                          rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 05:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154973, serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1
        Validity
            Not Before: Oct 11 05:00:32 2026 GMT
            Not After : Oct 18 05:00:32 2026 GMT
        Subject: CN=6acb17f0-2295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:26:6e:09:65:05:44:4d:4a:f8:9b:75:2f:
                    cc:f0:f7:74:4b:06:c4:24:4a:53:f3:39:43:b0:ed:
                    8f:d3:7c:90:72:27:33:5e:9f:40:11:29:42:62:dc:
                    9b:12:41:03:d1:8d:57:41:da:ed:15:2d:0b:7a:c9:
                    1b:81:b1:20:f6:1a:53:1e:44:c2:f1:b7:33:11:a3:
                    d4:19:54:e7:10:1e:83:af:18:92:a3:a9:63:69:75:
                    ae:13:83:d9:4b:c5:68:73:4a:0a:e9:1e:b7:fd:eb:
                    df:76:2b:86:db:2f:b2:d2:c7:58:f2:67:d4:81:eb:
                    55:e7:e8:01:2c:1e:98:9a:bd:e7:e6:f8:ed:7a:22:
                    d1:e4:a4:a3:02:0c:bb:4d:59:27:c6:36:c5:92:a2:
                    fb:55:e3:a2:6f:c2:b2:7a:24:a7:7d:15:37:48:9c:
                    f6:fb:77:c5:43:90:a5:d4:96:cc:9f:a9:6b:19:78:
                    b5:77:6f:3a:ed:f1:3e:88:4a:af:54:89:bc:4e:54:
                    e0:5b:ce:20:04:e5:0c:b9:73:33:31:91:f3:38:b3:
                    fd:47:43:17:5c:04:1a:0f:79:fb:fe:30:c3:eb:e7:
                    9a:7f:22:a3:45:81:27:2b:e7:8a:be:4f:51:54:10:
                    c6:28:17:56:60:9a:36:59:7b:7d:f5:53:76:02:ab:
                    1f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7D:12:FD:D7:C1:95:88:73:4E:69:DA:B1:72:AB:CD:B6:1B:73:5E
            X509v3 Authority Key Identifier:
                keyid:D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a9:ae:05:54:2b:2d:da:74:23:25:4d:11:c0:bd:27:0e:f8:
         5e:d2:aa:da:06:e9:6d:35:1f:fd:a0:c5:78:e6:2a:e0:8f:54:
         24:76:cd:aa:c9:16:d6:3e:00:0b:3e:b6:44:0f:23:df:ba:13:
         d6:58:5c:5f:78:2e:ec:5e:b8:a7:6f:52:bf:27:dd:c7:a5:e9:
         f1:fa:88:6d:16:15:db:b6:43:bb:02:6c:5f:ef:0a:28:d5:c3:
         cf:d3:83:fa:de:5a:b2:c0:f0:ee:56:68:07:8d:31:6d:e5:85:
         26:e2:d9:ec:91:dd:73:a3:66:c8:8f:17:1f:25:46:41:60:3f:
         84:f8:d2:71:be:54:cd:b0:c4:29:67:48:c4:4c:29:4e:af:16:
         70:04:fb:e4:58:96:fe:4f:92:a4:c3:4f:41:ac:42:bb:f5:cd:
         b5:f4:1d:a5:74:07:dc:9b:20:ab:2b:ff:20:23:f5:41:86:47:
         4f:ed:71:87:c3:59:26:a9:1a:c7:61:97:4a:04:d5:33:7d:fb:
         4b:3c:72:8f:ef:04:6a:02:8a:d8:04:31:89:87:90:2c:63:e3:
         29:f9:49:98:d4:57:34:ed:b3:f2:a6:f6:f1:fa:32:c2:07:ba:
         a5:eb:c2:76:b4:4f:0f:f8:5f:59:48:de:0c:bd:91:2e:a0:16:
         c4:4c:be:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:07:08 2026 by rpki-client