Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91629D4/A8C4E4BE840411F199F5AD1197A30FBC/_jiW4ypTasqUGSZZYmVzarowoWA.mft
File:                     _jiW4ypTasqUGSZZYmVzarowoWA.mft (raw, json)
Hash identifier:          boRhIyMlfi9FqxYAkHMpLT7KsKH0QK5lJA5FDmAK7bg=
Subject key identifier:   48:FB:B2:83:40:FF:8F:43:03:A3:8F:B3:53:78:DE:F0:89:8F:E5:CB
Authority key identifier: FE:38:96:E3:2A:53:6A:CA:94:19:26:59:62:65:73:6A:BA:30:A1:60
Certificate issuer:       /CN=A91629D4/serialNumber=FE3896E32A536ACA941926596265736ABA30A160
Certificate serial:       2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jiW4ypTasqUGSZZYmVzarowoWA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91629D4/A8C4E4BE840411F199F5AD1197A30FBC/_jiW4ypTasqUGSZZYmVzarowoWA.mft
Manifest number:          2A
Signing time:             Sun 27 Sep 2026 09:23:45 +0000
Manifest this update:     Sun 27 Sep 2026 09:23:44 +0000
Manifest next update:     Sun 04 Oct 2026 09:23:44 +0000
Files and hashes:         1: _jiW4ypTasqUGSZZYmVzarowoWA.crl (hash: Bu+nfZmi16ggFhkmZWS9tlWlRABovfrZaYe5bOezYew=)
                          2: E89A614284AC11F1A2853A1C8EA30FBC.roa (hash: VPhwajy+N2wSuiXdOPatR57VMIgQE7fhTICmlszMMqY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91629D4/A8C4E4BE840411F199F5AD1197A30FBC/_jiW4ypTasqUGSZZYmVzarowoWA.crl
                          rsync://rpki.apnic.net/member_repository/A91629D4/A8C4E4BE840411F199F5AD1197A30FBC/_jiW4ypTasqUGSZZYmVzarowoWA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jiW4ypTasqUGSZZYmVzarowoWA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:23:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91629D4, serialNumber=FE3896E32A536ACA941926596265736ABA30A160
        Validity
            Not Before: Sep 27 09:23:44 2026 GMT
            Not After : Oct  4 09:23:44 2026 GMT
        Subject: CN=6ab8e0a1-9a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b3:b2:4b:50:77:da:9e:7c:3e:9e:dd:e5:41:
                    23:c1:39:00:9c:80:47:2b:d0:6b:fd:f4:ec:56:9b:
                    81:6d:df:81:67:5a:27:59:0b:d1:dc:8e:eb:02:27:
                    ab:a0:53:99:44:73:9f:52:af:2c:32:04:1b:07:8c:
                    2a:01:b9:25:11:d5:7e:08:12:b2:f4:7f:19:31:e5:
                    bf:98:a2:31:b9:cd:fd:fb:af:5e:73:cf:b8:f6:4b:
                    e1:64:4a:8a:4b:93:fe:68:00:e7:d9:ea:93:f0:90:
                    f4:62:ae:f3:20:01:21:50:2a:8a:32:04:6d:79:09:
                    d3:ef:a9:94:43:2e:4a:d5:76:f8:69:ad:e1:62:ca:
                    63:2e:91:22:80:26:cf:35:4e:90:41:9b:c5:4a:a1:
                    d0:1b:7e:84:8f:f1:af:9b:dd:37:9b:c9:1f:84:70:
                    d5:8e:e0:d3:9b:52:65:e1:b5:d9:99:5b:a4:0e:4d:
                    26:e0:28:c7:87:cc:98:75:ba:ed:be:6e:0a:34:3c:
                    e8:20:0d:eb:7a:09:d2:a8:a6:6c:62:f0:9b:6a:d8:
                    5b:28:37:a0:b4:c0:76:eb:28:f4:98:af:ff:69:0d:
                    fc:23:3e:a3:c1:5a:b7:29:2c:18:da:21:d3:5b:74:
                    7a:d5:86:32:fa:49:fc:a2:82:0d:fb:1a:2c:7f:fb:
                    13:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FB:B2:83:40:FF:8F:43:03:A3:8F:B3:53:78:DE:F0:89:8F:E5:CB
            X509v3 Authority Key Identifier:
                keyid:FE:38:96:E3:2A:53:6A:CA:94:19:26:59:62:65:73:6A:BA:30:A1:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91629D4/A8C4E4BE840411F199F5AD1197A30FBC/_jiW4ypTasqUGSZZYmVzarowoWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jiW4ypTasqUGSZZYmVzarowoWA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629D4/A8C4E4BE840411F199F5AD1197A30FBC/_jiW4ypTasqUGSZZYmVzarowoWA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:eb:77:6f:e3:2c:77:e1:b5:db:3f:68:fd:da:c1:fc:c9:3d:
         8b:cb:53:ed:11:b5:b0:df:75:87:46:6f:b6:f6:5f:39:e2:a7:
         17:96:b0:07:30:18:85:01:eb:8b:b8:73:dd:24:47:d4:30:8d:
         6e:18:a5:73:2f:e8:63:88:a5:d0:52:6b:3f:50:86:56:b2:87:
         d9:67:2e:95:93:f0:9a:be:e4:20:b9:3f:d5:86:52:0b:8e:ae:
         b2:8d:2a:97:40:d4:20:67:d0:d6:28:37:5e:5e:9d:a6:42:e1:
         eb:57:d6:7b:c3:a3:5a:3f:37:ed:fb:d8:da:c6:21:1c:01:33:
         20:e6:32:77:ad:38:ac:20:a8:39:0e:a5:73:be:8c:ac:c9:71:
         19:24:e0:24:01:94:f5:cb:99:a8:47:34:03:b3:af:4b:b0:29:
         4f:74:84:c9:16:34:76:58:c7:ca:e7:b3:25:db:39:fc:84:9a:
         af:e3:9b:68:e9:7d:d4:d4:93:fe:a2:a9:de:95:e1:ad:41:37:
         40:91:a2:3b:b6:fe:45:82:c1:dc:a7:cb:ed:ac:8b:52:04:7e:
         3c:89:5f:ee:8e:75:a6:63:05:a6:37:70:4d:dd:40:fe:8d:f4:
         78:35:88:f6:b1:4b:72:87:76:11:df:80:63:8d:45:5f:24:7e:
         64:52:4b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:51:19 2026 by rpki-client