Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
File:                     9fHi3rMlVisihf-LXeJd8srfdwc.mft (raw, json)
Hash identifier:          m0fp03nF3En68Ih485KC7rdVdruXEreICaezFt5CjaQ=
Subject key identifier:   B2:D7:E0:95:2F:FD:F1:FA:14:57:B0:7F:26:D2:F3:AD:A2:05:BB:91
Authority key identifier: F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07
Certificate issuer:       /CN=A915B4B5/serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707
Certificate serial:       01D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
Manifest number:          01CD
Signing time:             Mon 21 Sep 2026 03:42:36 +0000
Manifest this update:     Mon 21 Sep 2026 03:42:36 +0000
Manifest next update:     Mon 28 Sep 2026 03:42:36 +0000
Files and hashes:         1: 9fHi3rMlVisihf-LXeJd8srfdwc.crl (hash: EKoaE0EbEnhZ6lBSIN/FRy0cmBZppqFOpczlmt2ukF4=)
                          2: E0207030F13611EE869F9E34C4F9AE02.roa (hash: yGCwpeHPW0bX2imG5e3bAmsS3SLMwwArtfpt+k0YYa4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl
                          rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:42:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B4B5, serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707
        Validity
            Not Before: Sep 21 03:42:36 2026 GMT
            Not After : Sep 28 03:42:36 2026 GMT
        Subject: CN=6ab0a7ac-aaed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:eb:00:02:12:ea:73:1e:a5:64:9d:dc:c9:
                    c5:52:14:0f:a1:bd:ee:f5:b2:94:11:75:8e:86:a4:
                    cd:cc:92:99:6a:56:e2:05:c2:02:ea:1f:57:b4:c3:
                    f5:ac:3c:bb:4e:74:ba:55:77:62:3c:4d:87:5b:b3:
                    b4:d1:9f:7a:b0:58:a4:50:2c:7b:95:1b:47:ff:9a:
                    79:e3:59:cb:49:66:e8:5c:15:ca:4b:c6:f8:68:d9:
                    b9:aa:0a:54:db:03:de:02:6d:a5:7d:db:ca:08:d0:
                    6d:30:08:c9:92:4e:35:d1:f8:7d:fa:b8:6a:90:9a:
                    6b:93:65:9a:67:d3:40:1d:09:11:c8:8e:a7:6d:90:
                    41:84:e8:a9:d0:cc:fe:5c:c7:79:a3:55:a1:6e:e4:
                    ae:e9:50:02:b0:8c:61:37:08:e2:3e:10:54:25:32:
                    1e:92:8f:43:c1:82:b1:51:a8:2d:04:a7:78:ef:c3:
                    5d:81:a6:08:ae:88:34:10:b9:c0:a4:69:f8:00:63:
                    56:ad:95:ef:17:73:1a:9b:ea:9e:95:37:8f:14:ef:
                    e2:6c:30:37:95:62:7c:9f:b9:f1:47:17:5b:bb:94:
                    6c:27:be:11:6c:f8:10:fc:d3:84:3d:71:3c:45:71:
                    5d:4a:35:a4:3c:a5:ca:d7:d1:4d:14:81:ce:c0:f7:
                    11:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D7:E0:95:2F:FD:F1:FA:14:57:B0:7F:26:D2:F3:AD:A2:05:BB:91
            X509v3 Authority Key Identifier:
                keyid:F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:16:52:0d:1e:7b:6b:a6:de:07:7d:8f:4e:2b:b3:26:ce:ff:
         b4:23:8b:8c:67:d7:b9:75:7c:7c:ec:8b:50:81:f7:c1:ee:c0:
         02:07:b1:d2:fa:cc:fd:a9:9d:4e:e8:be:bf:ba:47:55:b5:69:
         45:b9:95:b3:8f:0f:06:e2:a4:d8:55:fa:5e:a2:ee:e8:9b:c1:
         ad:6a:7a:09:a1:30:e6:bd:9e:18:06:95:cc:9f:1d:6d:86:9d:
         40:33:5d:09:e8:4c:bf:13:47:ac:14:b2:00:c8:8b:0c:15:8c:
         0e:ad:8d:b2:a9:dd:19:8d:7c:e6:b0:e2:c2:c0:06:52:e9:78:
         a5:13:9c:9a:43:5a:6c:37:d6:b5:28:4a:1a:2f:0e:ac:54:3a:
         6e:13:38:53:b2:5a:84:0c:21:63:01:c1:9b:80:fd:16:96:c4:
         76:4c:ce:51:02:b7:69:8c:d4:61:fe:6d:c7:5c:c2:38:ff:09:
         c2:89:ba:18:75:db:b6:08:78:02:c5:6e:ae:03:aa:6f:b4:a1:
         0e:15:75:2a:56:59:09:20:fb:b3:44:5b:74:98:49:40:01:f9:
         b5:b5:88:49:80:95:9c:ef:38:94:b3:31:f0:23:09:de:c5:55:
         5a:50:07:b3:90:9f:21:4a:1b:25:7f:c4:71:0c:e0:af:df:e8:
         49:0b:0e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:16:13 2026 by rpki-client