Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
File:                     39w62zPKqFke-vJ3bDsMVWwIorY.mft (raw, json)
Hash identifier:          QcNnUxO9F+mNYKwwRvuy3JcTKSmtkGvsAZ/bSKFs3cM=
Subject key identifier:   9D:02:AD:D9:8D:7D:FB:87:1E:EF:A9:C1:CF:9F:3E:1E:59:8C:9F:D6
Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
Certificate issuer:       /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Certificate serial:       0465
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
Manifest number:          042E
Signing time:             Mon 21 Sep 2026 00:15:09 +0000
Manifest this update:     Mon 21 Sep 2026 00:15:09 +0000
Manifest next update:     Mon 28 Sep 2026 00:15:09 +0000
Files and hashes:         1: 39w62zPKqFke-vJ3bDsMVWwIorY.crl (hash: ipfCHNSs2znyUzHLCmrSUvoBH3HtfxU6VMXJGcq4UYg=)
                          2: 71A61CE6A21311F1A684C2DF4A11F970.roa (hash: 4JtPxIYcBQBdP2hgHTuTytOYOe77Kdj1wyqXRiUFIFI=)
                          3: 3CDB97F6B03911F09A54BE60C4F9AE02.roa (hash: 0A6Dih+0cuLykil5/eI/JA+3uEl36k4kuqlwR31yggI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl
                          rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1125 (0x465)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B5B1, serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
        Validity
            Not Before: Sep 21 00:15:09 2026 GMT
            Not After : Sep 28 00:15:09 2026 GMT
        Subject: CN=6ab0770d-ccb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:75:40:70:60:d4:ad:04:c2:07:f4:57:32:
                    58:4a:9a:5c:34:c7:24:a2:08:84:ca:32:b3:be:d4:
                    d7:86:4a:84:45:7a:8c:4a:f7:70:70:88:68:35:34:
                    91:72:d8:3f:2c:70:ec:34:07:c5:0a:b6:0d:16:88:
                    d1:1e:88:cb:2c:b3:a3:09:c6:9a:45:50:0e:1b:32:
                    5b:a5:44:16:2c:55:7f:11:d9:71:23:ee:f4:22:c0:
                    06:23:fb:54:27:e8:3c:40:e3:1a:54:38:64:4f:97:
                    02:9b:5c:31:50:45:03:3b:e2:bf:50:40:bc:90:99:
                    ca:86:d7:1d:6b:b6:9d:3d:11:6f:12:08:a3:ee:16:
                    91:f5:bf:77:e5:3b:fd:46:52:95:a9:38:1d:69:81:
                    36:80:30:b3:65:22:f0:06:46:d5:26:4f:15:bd:08:
                    ea:a2:67:df:cc:e8:8b:66:93:e1:50:d5:23:b9:de:
                    5e:e6:ff:d6:62:50:d1:60:05:59:b7:d8:11:a1:fd:
                    57:f2:43:92:ec:0b:51:3f:9e:9f:51:e9:46:6c:a4:
                    ad:37:f8:3f:a7:ec:ae:76:2a:93:fc:ea:7f:67:43:
                    be:e2:6c:a7:f8:4c:f1:d9:d0:2d:c2:fb:36:f4:2d:
                    54:7a:29:45:9b:1a:d7:8d:7a:17:bf:5c:95:97:52:
                    60:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:02:AD:D9:8D:7D:FB:87:1E:EF:A9:C1:CF:9F:3E:1E:59:8C:9F:D6
            X509v3 Authority Key Identifier:
                keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c2:c2:1f:93:b5:18:e4:71:b3:12:04:2d:0a:00:af:54:18:
         f8:7e:7b:25:d8:0c:56:01:74:37:d6:fb:79:2f:78:bd:5a:4c:
         c1:3c:78:fb:a2:f6:e3:df:8a:4c:fa:df:8a:ee:9f:58:7a:b0:
         79:88:de:51:65:53:dd:ea:b6:3a:84:5e:f6:40:b4:05:1d:f8:
         91:e2:64:92:99:35:fe:80:29:7c:c2:72:bc:b2:e9:cb:9f:47:
         c2:30:7e:8c:84:f9:ba:81:63:48:30:31:f7:8a:fd:c7:38:bf:
         7e:cf:ae:a5:bb:f8:e3:ab:d4:21:7a:a4:f6:39:ef:d0:0e:c3:
         b6:4b:bb:94:ba:f7:2b:bf:50:9a:d5:42:a0:97:12:be:08:03:
         b3:9b:4c:9b:e1:50:f7:89:e8:cc:de:9a:92:8f:8d:da:40:ec:
         90:03:98:75:e1:2e:9b:e8:da:f2:a4:0b:91:85:eb:15:97:5b:
         f0:2f:97:8f:47:4f:d3:53:32:0c:4a:3f:93:0b:9e:44:0c:94:
         9a:30:fa:af:62:4f:83:39:39:fb:fb:1f:a1:da:96:6b:a2:94:
         fb:7c:f7:e9:42:0f:19:dc:d7:fc:a0:53:0a:c6:cf:19:50:2f:
         ba:04:aa:27:76:b6:8f:27:6c:68:14:a9:f4:48:d4:ef:cf:d3:
         80:fe:55:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:51:47 2026 by rpki-client