Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft
File:                     8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft (raw, json)
Hash identifier:          8j47FmSM9zaev2sGqLBMEEqlDD2GtYn2EHogzRu7kWA=
Subject key identifier:   4F:08:0A:A0:B2:10:33:39:13:11:8F:7E:5B:53:F4:C3:43:A2:61:11
Authority key identifier: F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22
Certificate issuer:       /CN=A915E402/serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22
Certificate serial:       DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft
Manifest number:          DB
Signing time:             Mon 21 Sep 2026 06:39:01 +0000
Manifest this update:     Mon 21 Sep 2026 06:39:00 +0000
Manifest next update:     Mon 28 Sep 2026 06:39:00 +0000
Files and hashes:         1: 8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl (hash: BoQ88BI2YtKBECBePp4jpwuZDVRQ32XSA3iqaWKflKU=)
                          2: 9F9EE58C783011F0B097E07BC4F9AE02.roa (hash: fSYltpxk2u14lPvWhCXB9QKuMuDj8l4c6pcDEmZNiXo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl
                          rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:38:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E402, serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22
        Validity
            Not Before: Sep 21 06:39:00 2026 GMT
            Not After : Sep 28 06:39:00 2026 GMT
        Subject: CN=6ab0d104-e756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b7:d1:d9:99:f3:0c:09:42:c8:3d:28:c2:9e:
                    cf:ed:7d:bc:cb:4a:33:84:01:66:6c:db:d1:7b:6b:
                    1c:a5:b8:ac:fb:39:18:17:40:f6:55:ce:1e:f1:8d:
                    3e:4c:1f:8e:52:fc:9e:39:da:9a:e1:f9:77:79:2b:
                    e8:8a:d1:16:5c:c1:17:80:cf:99:1c:67:11:fc:57:
                    a3:3c:8b:10:31:f2:3d:b8:91:fe:ca:6d:ba:80:2f:
                    15:22:a2:92:3c:ee:84:8f:01:63:52:81:b1:80:dc:
                    05:24:4d:1d:95:30:8b:41:39:cd:a1:86:b4:82:6b:
                    7a:17:36:de:af:97:19:45:7f:b9:4f:e9:9d:64:42:
                    c4:29:7c:87:6e:a0:1f:09:eb:d5:5d:3e:aa:62:ea:
                    db:53:7b:66:d8:8a:3a:d3:58:89:91:fc:29:44:76:
                    26:3b:c6:d6:73:cc:4f:21:88:67:b8:d5:e7:37:07:
                    20:ec:c1:aa:2d:a8:33:13:af:ee:c4:63:d2:ef:35:
                    2b:c4:46:99:19:d3:4c:79:4e:62:b0:c3:7e:f0:d0:
                    1b:be:0d:42:f0:d4:01:38:df:47:ed:5f:61:eb:4f:
                    47:5c:6d:b7:3f:40:a9:90:a1:99:e3:ed:ef:e3:9b:
                    47:2b:da:8f:ac:b6:69:4d:57:35:6b:6e:a6:e5:73:
                    b9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:08:0A:A0:B2:10:33:39:13:11:8F:7E:5B:53:F4:C3:43:A2:61:11
            X509v3 Authority Key Identifier:
                keyid:F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a5:21:4d:a3:70:58:ef:17:83:bd:50:df:81:a2:a7:c1:40:
         26:57:5d:6b:29:22:16:3b:70:6a:b0:1d:1c:0e:03:ae:0e:70:
         bf:e4:c5:c1:ce:f2:ca:dc:eb:8d:22:91:6d:4c:47:f6:fa:ab:
         c3:33:68:68:16:26:b1:a9:c1:03:6f:a7:23:3f:bd:c4:28:35:
         7d:8d:3d:52:32:ea:d4:89:d1:cd:3d:d4:09:0d:c6:6d:23:b8:
         6a:39:b1:6f:2b:cd:17:a0:0f:2e:ea:55:6d:b9:29:cb:bb:d0:
         f3:a3:9c:a5:dd:20:0a:b4:aa:6b:97:09:ec:7b:9d:e5:57:af:
         fa:5d:3f:76:cd:3c:84:2a:3d:d7:ac:5a:15:04:d9:eb:f8:ef:
         b1:60:05:b6:c0:85:b3:8b:25:a3:72:bc:c8:62:dc:00:3a:32:
         83:9e:8f:ef:66:ad:50:62:d9:f2:e8:18:78:85:33:67:8a:e7:
         32:75:39:b2:34:01:85:7a:6f:8b:3a:45:8b:b7:10:de:b1:39:
         36:6d:2a:aa:9d:f7:00:dc:78:2d:2e:8d:3d:4b:81:30:54:ff:
         0d:ca:f3:9b:14:b6:96:35:7b:cf:a3:22:fb:7f:0f:eb:8e:aa:
         70:51:a0:75:39:96:ce:5c:89:8f:75:98:4e:c0:1d:cb:d3:d6:
         03:b8:95:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:30:42 2026 by rpki-client