Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
File:                     gSJD5rXQ3hGucMcns50fIeOurAM.mft (raw, json)
Hash identifier:          FSpEiiaVEADFtLDhZHkbB/QIdUoZpvWZLEqljjQHyOs=
Subject key identifier:   B7:ED:6F:11:06:D0:62:D4:63:66:64:C3:60:30:B4:27:FF:FC:A3:73
Authority key identifier: 81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03
Certificate issuer:       /CN=A916E44B/serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03
Certificate serial:       01C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
Manifest number:          019F
Signing time:             Mon 21 Sep 2026 04:22:01 +0000
Manifest this update:     Mon 21 Sep 2026 04:22:01 +0000
Manifest next update:     Mon 28 Sep 2026 04:22:01 +0000
Files and hashes:         1: gSJD5rXQ3hGucMcns50fIeOurAM.crl (hash: VWTDC9VNpJ50OUCk4VD6ujvunjoHGTKNm0iI5lrJ69w=)
                          2: B02CCB344E0C11EF9175067FC4F9AE02.roa (hash: 9CYjpAjEKPnEF+FQPILjYe8BG993NnJI6vG3A2BwbG0=)
                          3: 38216BFE9A2711F1AC1341F35811F970.roa (hash: ehZOhCm/N9mqNloQEM0g1Ww+m+pcdNZLTx27BwAa5LA=)
                          4: 546C4C7C4E1911EFA1FB9E57C4F9AE02.roa (hash: 1mQpGfxmVNz6LnGdtFvsyOE2VFm9oALVAj0QUVxdEuk=)
                          5: 1169361899C811F18BE645E93A11F970.roa (hash: EyxlYQ+yrprOKsuQkWdYXDcZ6/ylberdOPhfo2Bnlqg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl
                          rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E44B, serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03
        Validity
            Not Before: Sep 21 04:22:01 2026 GMT
            Not After : Sep 28 04:22:01 2026 GMT
        Subject: CN=6ab0b0e9-1e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f2:26:7b:b0:39:36:59:8b:49:ab:bf:75:b0:
                    2f:42:37:3e:1e:1a:3a:43:b9:1d:67:89:f2:29:cf:
                    da:70:29:74:d5:e4:50:26:b5:68:34:e3:36:38:c8:
                    99:ee:e1:0f:20:57:3e:af:f0:2c:25:97:5c:57:37:
                    35:03:bd:cd:0e:38:4e:ed:f4:80:57:79:ee:4b:00:
                    a3:16:31:63:a0:fe:64:61:67:0b:7f:62:19:19:75:
                    8b:2d:97:f4:f1:76:f6:97:70:4b:a8:a9:67:54:26:
                    62:3f:a2:7c:7f:0f:47:ef:da:1b:d8:95:52:55:e7:
                    96:08:a7:31:bf:84:14:5c:3e:96:d6:d4:a0:73:7b:
                    77:3c:fa:0a:31:e2:07:2a:dd:e7:31:c1:40:08:f0:
                    e9:30:15:05:49:e5:59:b9:ce:d9:43:2c:6d:9d:c3:
                    b2:7c:55:bc:90:83:9b:75:1b:00:aa:3d:ac:bd:e3:
                    35:0e:ac:b6:14:49:80:1b:d8:1c:ba:04:0a:87:d5:
                    bd:6c:58:7b:da:5a:a7:70:df:2f:9f:c9:3c:e5:af:
                    7e:2c:cc:50:29:9d:4c:ec:4f:e4:c5:2f:80:20:7c:
                    07:6f:4f:08:4b:1f:b2:99:ae:b3:85:fd:98:87:35:
                    8a:a7:4d:fa:e1:37:12:bd:e6:7e:4b:45:0d:f9:9c:
                    74:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:ED:6F:11:06:D0:62:D4:63:66:64:C3:60:30:B4:27:FF:FC:A3:73
            X509v3 Authority Key Identifier:
                keyid:81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ff:5c:78:5c:d4:5a:50:b8:04:89:61:9b:c4:5b:b3:50:3b:
         ff:1c:4f:06:57:b1:cf:11:d7:06:74:e7:05:cf:fe:83:b3:83:
         95:8c:48:b7:7a:dc:a4:f3:35:16:7f:cc:fb:b5:21:1d:43:dd:
         b7:34:51:bd:2d:ae:74:0c:aa:ac:20:7d:fa:98:64:1f:21:f1:
         94:2c:6c:46:22:85:92:62:44:51:4b:85:35:a9:00:37:55:b1:
         19:c7:1b:a9:95:1a:fd:f5:0a:48:7b:7e:cb:4d:13:d8:55:90:
         bd:74:30:c7:71:cc:ea:d5:39:f3:72:91:c6:d4:23:40:7e:ec:
         cb:f3:66:af:74:1a:91:2e:87:b6:7c:0b:32:29:6e:02:db:34:
         1f:a7:c3:b1:6a:b1:f6:ec:35:1a:4c:3c:86:66:a5:f4:18:cc:
         31:2c:24:f9:a9:b0:3b:3d:ec:3a:86:89:82:60:0f:0a:7a:60:
         04:24:b5:fe:af:aa:65:51:44:5c:16:f8:f8:04:50:28:15:6d:
         eb:2e:27:96:d4:3e:50:6d:32:41:3f:0a:13:c8:d3:2f:02:38:
         84:2f:c4:61:c8:ca:aa:f1:88:e0:19:20:b7:dc:ce:e0:47:57:
         76:f5:8b:87:ae:dc:b3:2f:a2:08:99:96:bc:8b:c5:df:5a:bd:
         07:e3:e6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:32:25 2026 by rpki-client