Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/FFdMbIw3bumzwcilrbdcuMJo_6o.mft
File:                     FFdMbIw3bumzwcilrbdcuMJo_6o.mft (raw, json)
Hash identifier:          S8ISlDdC0abGYptM3G+o30F5vktRnOi+qfCPXXbtDFI=
Subject key identifier:   8E:34:70:DF:2B:90:66:4F:EC:69:F9:EB:59:85:34:9C:F2:0D:70:23
Authority key identifier: 14:57:4C:6C:8C:37:6E:E9:B3:C1:C8:A5:AD:B7:5C:B8:C2:68:FF:AA
Certificate issuer:       /CN=A915CBC5/serialNumber=14574C6C8C376EE9B3C1C8A5ADB75CB8C268FFAA
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFdMbIw3bumzwcilrbdcuMJo_6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/FFdMbIw3bumzwcilrbdcuMJo_6o.mft
Manifest number:          6C
Signing time:             Mon 21 Sep 2026 08:01:11 +0000
Manifest this update:     Mon 21 Sep 2026 08:01:10 +0000
Manifest next update:     Mon 28 Sep 2026 08:01:10 +0000
Files and hashes:         1: FFdMbIw3bumzwcilrbdcuMJo_6o.crl (hash: LmeGAyfgz2zzrWjXATmNcpeRUqQ4WD3RV27Tg4tVJ9s=)
                          2: 39BE7BDA196411F18D404492083D8C67.roa (hash: sBJq9qerjhcBYVzMIF6/S8M1X7V6Vei2+aWbrKnJuM0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/FFdMbIw3bumzwcilrbdcuMJo_6o.crl
                          rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/FFdMbIw3bumzwcilrbdcuMJo_6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFdMbIw3bumzwcilrbdcuMJo_6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CBC5, serialNumber=14574C6C8C376EE9B3C1C8A5ADB75CB8C268FFAA
        Validity
            Not Before: Sep 21 08:01:10 2026 GMT
            Not After : Sep 28 08:01:10 2026 GMT
        Subject: CN=6ab0e446-658a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a6:ee:58:dd:de:08:25:cc:d4:08:11:d3:c5:
                    d1:cd:ab:2c:f3:bc:44:88:4d:e2:3a:f9:3a:a5:4f:
                    bb:35:5b:fa:18:1d:b7:d2:d5:af:25:0b:08:06:ab:
                    95:f1:b9:f5:44:63:77:af:60:91:9e:3f:a9:02:b8:
                    ac:4d:92:cd:34:e0:43:f7:bb:a9:9a:3c:61:d8:3f:
                    80:83:71:9a:17:6a:09:16:15:79:4f:aa:a7:38:49:
                    b5:ab:ce:eb:19:dc:95:8c:7f:6b:b0:47:74:b0:75:
                    71:8f:45:da:e4:28:3e:bc:96:db:e7:60:11:80:f1:
                    1f:cf:f5:3a:84:d3:2d:dd:74:03:d7:83:7b:7d:b6:
                    b2:4d:f2:43:1d:ab:de:08:ac:66:b6:33:c3:85:83:
                    a4:d5:4b:8b:c5:bc:b5:ab:5d:34:63:f3:b1:d1:74:
                    4a:b5:33:76:19:ce:c7:4c:c2:2f:c1:54:e2:62:4a:
                    5d:73:1f:f4:87:c0:55:12:c8:3d:7a:84:e0:85:70:
                    d7:ac:21:6e:6f:28:2b:08:61:a7:06:a7:80:65:7d:
                    35:5e:5c:27:ee:b5:50:16:cb:d8:40:75:fd:a8:c7:
                    c1:b2:bd:c7:98:cd:ea:13:58:d5:46:ed:6b:dc:de:
                    14:5e:aa:79:d4:e5:26:6d:fe:46:0f:cf:71:db:da:
                    b2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:34:70:DF:2B:90:66:4F:EC:69:F9:EB:59:85:34:9C:F2:0D:70:23
            X509v3 Authority Key Identifier:
                keyid:14:57:4C:6C:8C:37:6E:E9:B3:C1:C8:A5:AD:B7:5C:B8:C2:68:FF:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/FFdMbIw3bumzwcilrbdcuMJo_6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFdMbIw3bumzwcilrbdcuMJo_6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/FFdMbIw3bumzwcilrbdcuMJo_6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a4:88:4c:09:5b:6e:43:a6:d6:02:3f:0d:46:fc:57:bc:6c:
         69:03:0d:3f:7f:33:ea:47:e0:8b:a0:c3:33:64:0e:ae:e5:55:
         a5:a4:2c:1e:3a:e7:56:1c:f8:24:5d:cc:15:f0:df:e2:4f:99:
         f7:4e:21:c4:36:1c:8f:35:35:a4:f9:63:ac:3e:40:27:b0:89:
         e4:65:c4:95:3d:ee:34:79:7d:56:50:42:bb:0f:fb:a8:86:ed:
         70:53:15:58:c6:c1:25:35:c0:44:48:15:86:2e:b7:35:72:59:
         09:14:36:52:44:4d:64:8d:95:88:f8:c1:5f:9f:a5:b5:f5:70:
         c5:a0:cb:52:a7:7b:ed:73:67:49:79:7b:d1:7c:61:d3:a1:5a:
         21:db:18:de:cd:d0:97:f5:07:be:66:86:84:3e:9b:9e:3f:47:
         21:d8:69:8d:0b:03:20:ce:45:87:e1:78:1d:1c:32:c9:71:7b:
         38:5d:db:89:3d:f5:35:7e:09:d3:1e:b4:13:ee:58:d3:61:b2:
         be:d6:4c:32:9d:48:59:22:f5:2a:43:75:54:b2:5d:8e:e7:a6:
         c6:de:f0:b6:5e:25:3c:cf:ec:be:19:75:b1:2a:e9:fb:b7:31:
         78:c4:67:38:84:66:e0:8c:d2:d1:8d:a1:77:01:95:4d:fa:d0:
         07:41:76:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:46:42 2026 by rpki-client