Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft
File:                     7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft (raw, json)
Hash identifier:          Hs6cvOULezaeLt7diPx4/FO3FVZhH/dXmWyAhBEqzcQ=
Subject key identifier:   78:4E:F0:28:1B:AE:80:6D:9B:C3:D6:E0:CF:AD:85:C2:89:B3:F3:B8
Authority key identifier: ED:23:A8:E8:9E:56:BC:BD:A1:C0:0E:49:7C:48:83:D7:95:E5:2D:54
Certificate issuer:       /CN=A91652B5/serialNumber=ED23A8E89E56BCBDA1C00E497C4883D795E52D54
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft
Manifest number:          9F
Signing time:             Mon 21 Sep 2026 07:18:03 +0000
Manifest this update:     Mon 21 Sep 2026 07:18:02 +0000
Manifest next update:     Mon 28 Sep 2026 07:18:02 +0000
Files and hashes:         1: 7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl (hash: w4azJIsXI9JVwNmzvZSIKlg7riDTjVuXFuJ9AVxCyc0=)
                          2: 53D55B1CD1AF11F0AD05C10CC4F9AE02.roa (hash: m0+z5eRLT8pv0TnouBrk5fUb2HbYM2GEY2LCpA+SYWw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl
                          rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91652B5, serialNumber=ED23A8E89E56BCBDA1C00E497C4883D795E52D54
        Validity
            Not Before: Sep 21 07:18:02 2026 GMT
            Not After : Sep 28 07:18:02 2026 GMT
        Subject: CN=6ab0da2a-3c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:61:ff:f1:53:a8:8e:1a:fc:80:2c:f7:2e:93:
                    9d:94:e5:d9:54:b4:fb:69:d8:ac:e6:32:f7:8d:cd:
                    e2:f9:6d:81:21:a0:9c:01:53:5f:39:34:5c:01:23:
                    3a:f5:29:c6:11:ec:46:f2:ab:ef:59:42:88:f5:c4:
                    32:65:d9:e6:07:56:c4:ad:3f:31:f3:8f:ae:5c:c9:
                    82:00:30:28:4c:3e:67:12:62:d5:99:4d:c3:98:59:
                    5a:c5:96:cc:58:7b:4b:fe:00:bf:49:ef:ba:4f:43:
                    59:6f:75:ba:79:8f:9e:dd:0d:a5:f3:a3:ab:7f:84:
                    f8:30:84:76:10:aa:a7:68:77:90:91:05:2c:1a:0c:
                    91:a7:fe:c7:5d:61:65:ae:d6:6c:46:41:6a:4b:7f:
                    f4:fd:8a:84:7f:ca:b4:8e:4d:52:08:95:7b:bc:f2:
                    ac:ff:3d:51:0b:58:03:d6:05:92:2e:75:29:af:d4:
                    bb:99:e9:d7:14:94:4c:22:45:56:67:81:70:15:92:
                    1d:a1:43:d6:59:cb:fb:5f:24:b2:04:da:b3:b5:51:
                    d7:14:ea:7b:2f:8a:62:45:6c:2e:49:df:37:96:f0:
                    d2:6c:c2:5f:7a:05:69:ad:64:ab:aa:f7:fb:27:0a:
                    32:c1:9c:6c:22:9c:61:f8:b6:86:0d:23:80:66:b2:
                    65:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4E:F0:28:1B:AE:80:6D:9B:C3:D6:E0:CF:AD:85:C2:89:B3:F3:B8
            X509v3 Authority Key Identifier:
                keyid:ED:23:A8:E8:9E:56:BC:BD:A1:C0:0E:49:7C:48:83:D7:95:E5:2D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:68:65:1e:08:ec:14:ff:8a:73:8e:b7:e2:a5:f6:bc:bf:0f:
         4f:1d:35:dc:a7:33:8b:c9:23:76:51:d4:32:26:41:c4:10:f4:
         83:f8:87:8c:71:23:eb:45:20:59:d6:a0:1d:9d:87:a4:d7:34:
         e9:12:dc:f5:eb:54:f4:04:f2:e0:d3:f5:fd:e1:b5:34:1e:1d:
         25:75:5d:5b:c6:72:d2:0c:b3:87:bd:98:e8:41:a9:a7:79:4b:
         26:c9:15:b4:8c:22:7f:b1:9e:93:62:f2:ca:a3:38:42:74:a4:
         53:fb:42:ae:cc:3b:9b:cd:6f:54:2e:6f:7b:75:dd:c8:6c:11:
         71:2e:de:ce:71:97:df:1b:6a:82:5b:fb:36:8a:95:71:4b:62:
         6c:41:49:62:9d:86:76:79:26:f6:9f:cb:91:9a:43:3c:1e:8e:
         6e:f2:91:ad:76:73:01:7d:96:05:d9:63:d6:ec:5e:22:51:3d:
         a8:e7:da:64:d3:a9:4c:d4:bc:fa:07:e2:4b:bc:3d:63:1f:8e:
         ec:3b:ff:1e:2d:27:3b:c1:2f:5f:83:4b:90:20:ed:49:78:64:
         21:b8:93:65:3d:45:95:81:48:f0:d3:7e:56:2c:46:82:65:29:
         bf:18:99:b2:5d:98:fe:a7:1e:34:7b:9e:a9:b0:9b:64:33:a7:
         db:52:bf:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:16:17 2026 by rpki-client