Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft
File:                     rRYSQOl6MtEDCZunigKM0J9fW5M.mft (raw, json)
Hash identifier:          4umRZ/fGgoEwOtIFXFGQvHgOWTY1QlXe+aDECcOwZlo=
Subject key identifier:   3A:C2:00:60:F5:32:85:A3:BD:6D:EA:BC:53:C0:25:90:32:3C:52:9F
Authority key identifier: AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93
Certificate issuer:       /CN=A9169BAF/serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93
Certificate serial:       01E8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft
Manifest number:          01E1
Signing time:             Mon 21 Sep 2026 03:31:03 +0000
Manifest this update:     Mon 21 Sep 2026 03:31:02 +0000
Manifest next update:     Mon 28 Sep 2026 03:31:02 +0000
Files and hashes:         1: rRYSQOl6MtEDCZunigKM0J9fW5M.crl (hash: AScOjfRbnfkbjxvdeIEJZIjc510qeGirAK3DyQifZMs=)
                          2: 122C6942D9CE11EEB6EA7F6CC4F9AE02.roa (hash: PpBOU4X+uS2a94ESgw3q/TNVKHg9vw4HoislmYncmAU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl
                          rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 488 (0x1e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169BAF, serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93
        Validity
            Not Before: Sep 21 03:31:02 2026 GMT
            Not After : Sep 28 03:31:02 2026 GMT
        Subject: CN=6ab0a4f7-3ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:06:c0:71:0c:24:13:5e:fb:79:c3:d4:fe:6b:
                    ee:ab:be:6a:68:a9:35:d7:06:e6:23:ec:50:c8:4f:
                    93:f8:38:eb:7c:5e:7f:dc:b0:69:43:f6:9a:14:fe:
                    1c:eb:f9:20:26:20:48:e4:44:8e:3d:23:0d:7e:76:
                    6a:01:6a:2d:38:e3:d3:ed:c8:fd:89:74:a0:73:04:
                    af:01:47:af:66:c3:48:a3:d2:42:2a:4d:97:52:e6:
                    34:88:e3:5a:ab:0e:9a:9a:17:a6:ec:ce:5f:d2:2c:
                    e1:4b:35:6a:ff:a8:49:8d:43:9d:b1:5f:36:6e:02:
                    50:06:f3:fb:35:4d:ec:83:cd:5c:1e:2f:68:d8:e4:
                    f7:26:b8:54:4f:a8:8c:ff:a2:43:99:33:38:8c:9c:
                    e6:1a:b9:5d:35:1f:ed:eb:2c:75:7d:07:b5:6c:b9:
                    78:08:ab:3a:17:65:06:cf:84:5d:a0:95:84:b6:58:
                    34:fe:c4:54:c5:34:57:b4:68:3a:85:37:c7:9c:57:
                    cc:a0:25:95:b3:90:44:7a:cd:ac:0f:19:ed:4d:fe:
                    21:e6:59:61:4e:64:07:5d:15:c1:71:f7:f7:d7:12:
                    9b:78:f8:92:c4:ab:ff:36:57:5c:fd:01:04:77:58:
                    f4:c0:f2:5a:0d:60:08:6a:2a:18:47:f9:a3:d6:53:
                    61:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C2:00:60:F5:32:85:A3:BD:6D:EA:BC:53:C0:25:90:32:3C:52:9F
            X509v3 Authority Key Identifier:
                keyid:AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ac:ac:91:8a:e2:0d:05:6d:ac:df:73:9a:cf:a9:bf:76:26:
         e0:32:80:fe:bb:e6:a5:16:b0:f4:38:ea:79:83:5f:45:31:07:
         23:4c:ec:d2:4e:47:70:01:8b:a2:83:ad:0b:86:79:b9:be:e7:
         41:be:d1:e8:9e:9e:ef:d1:40:75:4d:4d:eb:4d:60:59:55:e4:
         17:34:12:dd:62:9f:9d:a8:e2:a5:66:98:0a:34:00:3a:aa:6b:
         b4:c7:f2:ad:29:5a:24:67:71:58:51:ef:84:73:13:37:b5:78:
         bd:2d:2f:25:5d:cb:8a:a9:e9:b0:a6:e7:4d:d4:d4:5e:8e:b0:
         60:d0:72:31:35:1b:e8:97:a5:4f:00:36:52:e8:5f:4c:ff:da:
         37:0b:f0:c2:9b:20:89:9f:83:8d:1e:04:b0:8f:c2:d4:9b:8c:
         b4:6a:cf:94:cc:4f:ee:c6:cf:27:b4:b3:15:9a:ee:58:82:84:
         97:0b:0b:e6:9c:a6:4a:8c:f3:f8:1b:84:dd:ca:0e:c5:1b:70:
         f7:76:03:dc:c2:bd:e6:32:d0:70:56:cc:fd:ef:9a:41:41:bb:
         41:0d:5d:c7:8d:8d:b3:b1:78:07:ef:aa:d4:89:af:3e:1d:84:
         7f:22:e6:7c:c8:cd:88:55:e4:92:cc:e5:1e:44:66:48:6d:55:
         27:9d:85:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlCQUYxMTAvBgNVBAUTKEFEMTYxMjQwRTk3QTMyRDEwMzA5OUJBNzhBMDI4Q0Qw
OUY1RjVCOTMwHhcNMjYwOTIxMDMzMTAyWhcNMjYwOTI4MDMzMTAyWjAYMRYwFAYD
VQQDEw02YWIwYTRmNy0zYmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtQbAcQwkE177ecPU/mvuq75qaKk11wbmI+xQyE+T+DjrfF5/3LBpQ/aaFP4c
6/kgJiBI5ESOPSMNfnZqAWotOOPT7cj9iXSgcwSvAUevZsNIo9JCKk2XUuY0iONa
qw6amhem7M5f0izhSzVq/6hJjUOdsV82bgJQBvP7NU3sg81cHi9o2OT3JrhUT6iM
/6JDmTM4jJzmGrldNR/t6yx1fQe1bLl4CKs6F2UGz4RdoJWEtlg0/sRUxTRXtGg6
hTfHnFfMoCWVs5BEes2sDxntTf4h5llhTmQHXRXBcff31xKbePiSxKv/Nldc/QEE
d1j0wPJaDWAIaioYR/mj1lNhpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDrCAGD1
MoWjvW3qvFPAJZAyPFKfMB8GA1UdIwQYMBaAFK0WEkDpejLRAwmbp4oCjNCfX1uT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJBRi9BRUY3MDQ5MEQ5
QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10RURDWnVuaWdLTTBKOWZX
NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3JSWVNRT2w2TXRFRENadW5pZ0tNMEo5Zlc1TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OUJBRi9BRUY3MDQ5MEQ5QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10
RURDWnVuaWdLTTBKOWZXNU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZqyskYriDQVtrN9zms+pv3Ym4DKA/rvmpRaw9DjqeYNfRTEHI0zs0k5HcAGL
ooOtC4Z5ub7nQb7R6J6e79FAdU1N601gWVXkFzQS3WKfnajipWaYCjQAOqprtMfy
rSlaJGdxWFHvhHMTN7V4vS0vJV3LiqnpsKbnTdTUXo6wYNByMTUb6JelTwA2Uuhf
TP/aNwvwwpsgiZ+DjR4EsI/C1JuMtGrPlMxP7sbPJ7SzFZruWIKElwsL5pymSozz
+BuE3coOxRtw93YD3MK95jLQcFbM/e+aQUG7QQ1dx42Ns7F4B++q1ImvPh2EfyLm
fMjNiFXkkszlHkRmSG1VJ52FZw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 04:25:12 2026 by rpki-client