Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft
File:                     79iPiiibFMeUQxKLu7eRtS2lEa0.mft (raw, json)
Hash identifier:          HPv7OxcZpRweWCKd/NqgeKVtmWCLopPsEyfdC8gtbZ8=
Subject key identifier:   42:9F:2D:46:AA:2F:AD:96:C8:A1:07:A4:93:86:49:F9:F0:3C:43:D2
Authority key identifier: EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD
Certificate issuer:       /CN=A9171D3F/serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD
Certificate serial:       02B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft
Manifest number:          02A8
Signing time:             Wed 23 Sep 2026 01:26:38 +0000
Manifest this update:     Wed 23 Sep 2026 01:26:37 +0000
Manifest next update:     Wed 30 Sep 2026 01:26:37 +0000
Files and hashes:         1: 79iPiiibFMeUQxKLu7eRtS2lEa0.crl (hash: auh5DiMw+0gaXeBK0++eowUXnu8/nCyO0vnOnLFyLYU=)
                          2: D0A263DCB09A11F0937ACB4DC4F9AE02.roa (hash: sGhpkR6yhXyOK18x4RQlxvcaTO+7oSqNbdwtlNU5FBw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl
                          rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 692 (0x2b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171D3F, serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD
        Validity
            Not Before: Sep 23 01:26:37 2026 GMT
            Not After : Sep 30 01:26:37 2026 GMT
        Subject: CN=6ab32ace-5444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2e:a6:ce:6b:f1:98:11:e5:96:25:c3:ce:4e:
                    ac:9e:03:7c:30:ae:06:a0:0a:ef:87:a9:d3:ef:34:
                    d2:18:72:28:d1:91:27:5c:d3:1c:5b:71:1d:5a:2c:
                    76:10:03:bb:f1:7d:58:4b:9f:ab:f3:b2:54:7a:3b:
                    f0:8c:50:7c:b5:f5:d5:22:57:11:69:13:e0:1e:d9:
                    15:12:05:45:a6:48:f6:04:1b:43:36:91:6a:cf:55:
                    b6:c0:12:42:4d:bf:2c:e8:35:43:c2:b3:b5:17:6f:
                    4b:50:5c:6b:0a:de:f1:e8:50:bb:a6:5a:37:64:ef:
                    cd:b3:cd:06:b1:52:97:e9:8c:28:1e:d1:54:1c:5d:
                    5e:1b:01:3e:cc:3e:b9:7d:b0:53:25:19:01:01:f1:
                    41:08:68:1e:0b:bd:aa:d2:5d:17:e8:53:e8:4f:a7:
                    f6:a7:e7:ae:1b:3c:14:cd:20:c7:7f:ae:53:d4:d5:
                    d3:c4:6b:3c:d9:54:07:27:c0:3c:a9:df:85:d8:c8:
                    52:24:c6:b9:02:59:1c:04:d5:45:1c:93:b3:63:2e:
                    1b:c3:5a:d0:9d:89:7f:0b:8c:b3:37:2a:7a:c4:88:
                    a3:cc:c9:0e:18:89:2f:90:44:f5:15:0d:30:25:c5:
                    0a:fd:5d:a3:e9:3e:26:bb:b1:79:9e:42:f6:47:75:
                    0b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9F:2D:46:AA:2F:AD:96:C8:A1:07:A4:93:86:49:F9:F0:3C:43:D2
            X509v3 Authority Key Identifier:
                keyid:EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:90:d2:cd:22:1c:85:82:61:0a:1b:75:80:89:a7:2b:ca:72:
         32:22:dc:32:c0:54:9e:2a:eb:47:53:e4:37:7f:5f:7d:2f:37:
         3c:ef:b1:dd:6c:00:8f:2c:1c:5b:0c:b6:5f:15:17:25:c9:94:
         ad:1f:f6:63:97:b8:dd:51:57:f3:43:b1:93:d4:6c:07:a2:56:
         17:a5:7e:39:26:b3:80:7f:b2:50:40:45:02:7f:4e:2d:b4:4f:
         e5:18:6a:da:09:4b:a5:d6:e6:3c:37:0e:14:b4:e8:78:40:4f:
         1a:d8:fc:86:b1:aa:88:40:95:9c:ec:d6:69:e0:de:bb:a4:b6:
         1d:08:05:74:83:95:1d:03:27:7f:29:b0:bd:63:96:13:49:63:
         de:dc:7a:4a:b7:70:f1:c9:93:55:a5:e1:b1:e2:23:2f:24:3f:
         3e:05:39:37:bb:3e:59:88:5a:a2:d3:f3:58:0d:78:21:e6:bc:
         3e:dc:c1:81:01:ea:ca:eb:01:41:2f:6e:6c:8b:64:4d:2b:d1:
         c6:5e:87:80:8a:d7:0e:a2:db:2d:3f:b9:c0:4d:34:e5:2a:f8:
         00:47:23:84:b7:d5:ba:f7:ee:75:e6:cb:17:90:38:54:65:13:
         de:a1:4e:f2:e5:eb:4d:ad:52:9d:30:ba:99:93:80:c9:73:3a:
         60:1d:0c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:55:10 2026 by rpki-client