Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
File:                     EdV6dX7VZXXQSeQpyOxzelYFC3k.mft (raw, json)
Hash identifier:          ZVQJ3Z0YrZYWRtpcOwpkeMS96bRLoGOMZKD7/M2c2Rs=
Subject key identifier:   4C:87:C0:DB:C7:A4:8B:01:B5:44:4B:16:0E:DB:3A:A8:5A:E6:D7:29
Authority key identifier: 11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79
Certificate issuer:       /CN=A91672F2/serialNumber=11D57A757ED56575D049E429C8EC737A56050B79
Certificate serial:       0FE2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
Manifest number:          0FD9
Signing time:             Sun 20 Sep 2026 17:26:51 +0000
Manifest this update:     Sun 20 Sep 2026 17:26:50 +0000
Manifest next update:     Sun 27 Sep 2026 17:26:50 +0000
Files and hashes:         1: EdV6dX7VZXXQSeQpyOxzelYFC3k.crl (hash: uvvQeAuWnaIhvTDcV0FkVDQp3UjNWsHyy+5RfwT/vEE=)
                          2: 6F89ECBE80D611E99C76DF63C4F9AE02.roa (hash: QZTAOImU0Z2WPbI1rkI9qCfJOQspayOIo2PoVTSDncA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.crl
                          rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 17:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4066 (0xfe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91672F2, serialNumber=11D57A757ED56575D049E429C8EC737A56050B79
        Validity
            Not Before: Sep 20 17:26:50 2026 GMT
            Not After : Sep 27 17:26:50 2026 GMT
        Subject: CN=6ab0175b-15e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c6:ad:e4:c4:6a:6a:ef:00:37:b2:2d:fc:bd:
                    53:9f:25:0f:77:c7:f5:55:6c:fe:09:fc:ac:54:5a:
                    b7:3d:dd:a3:3f:49:51:66:82:8a:b9:32:44:33:6b:
                    c6:7c:0c:7d:7a:18:4c:6f:f3:bb:93:1b:86:3c:10:
                    de:19:21:5b:0d:38:8b:51:a5:80:1e:ae:99:38:33:
                    0f:e3:5e:30:79:23:2d:28:d2:e0:d6:43:45:0b:0c:
                    4c:da:d1:2b:90:f0:d4:e1:51:5b:22:ee:aa:b8:c7:
                    73:cb:7e:15:56:ca:b6:95:25:ec:ce:1d:dc:73:c6:
                    83:97:d3:64:72:8e:5e:6f:fb:24:41:f7:0c:57:a9:
                    c0:42:93:05:25:08:e0:cb:59:64:1a:b9:46:01:83:
                    8c:9a:f9:0b:f7:10:1c:aa:92:3f:93:cd:ce:80:d6:
                    e8:1f:14:4e:9f:ec:c7:96:0e:bb:c4:b5:1c:a7:62:
                    6c:7f:8b:86:38:90:e4:3f:03:e8:44:d3:52:e9:79:
                    5b:26:51:9b:ff:9a:c2:1b:1f:72:71:8a:96:49:b4:
                    9a:ae:f4:5b:cf:aa:e5:e1:15:2e:a6:8f:8f:14:3a:
                    ef:15:2e:c6:38:b7:24:96:9f:c0:ed:64:3d:91:4d:
                    e0:3f:c7:51:46:92:75:01:10:3e:2d:99:2e:d4:91:
                    70:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:87:C0:DB:C7:A4:8B:01:B5:44:4B:16:0E:DB:3A:A8:5A:E6:D7:29
            X509v3 Authority Key Identifier:
                keyid:11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d5:5d:56:ff:3b:61:cf:42:d3:e9:85:67:18:fa:2a:24:52:
         12:01:9e:41:7a:2b:d3:64:3b:ac:91:09:b1:b0:6f:b9:06:38:
         17:6d:2a:21:21:23:ba:e4:f8:14:55:49:c9:6a:88:4f:ed:4d:
         c8:07:bc:3e:1b:35:51:e1:98:06:96:96:11:b1:fa:53:cf:0a:
         70:84:7e:18:dd:ac:ed:99:f5:4c:e0:3b:26:f3:6e:57:e5:c8:
         27:27:25:e7:1a:80:1a:65:1d:f3:75:26:e3:32:10:65:53:1e:
         2d:65:c0:f9:60:d5:a0:69:1a:da:e7:3f:68:39:bc:d2:71:06:
         bb:65:d6:dd:65:5e:e1:48:92:b8:50:0e:4d:33:6b:92:55:61:
         01:91:72:4d:f2:ef:49:ce:5b:a9:4d:e1:57:7c:54:46:3d:ef:
         26:22:04:23:ea:2b:9d:d2:9c:5b:94:6d:86:c5:88:6f:27:ca:
         7e:06:75:f2:8a:12:9c:8c:d3:79:65:72:d7:14:50:3c:fb:74:
         15:b9:a5:d9:f4:54:19:14:e9:84:a5:1a:6a:d4:91:b9:c4:ca:
         5f:02:a9:39:07:da:37:41:7a:8e:6b:5f:6c:13:8d:cf:31:96:
         a4:3a:6b:7c:b8:53:da:a9:42:b0:41:e9:c4:69:e1:e9:45:c9:
         e4:8d:2f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:04:35 2026 by rpki-client