Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
File:                     tU4IRltUXO7x4uEAl3XZG6QStj0.mft (raw, json)
Hash identifier:          9oPWSt7+p4JQl2sUnLzdFY8QNWYkdwFnxdf4TxwAm4g=
Subject key identifier:   E7:4A:2B:31:46:B3:FB:98:0C:1E:55:99:16:73:59:CC:13:44:62:3D
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
Manifest number:          0122
Signing time:             Sat 19 Sep 2026 07:08:24 +0000
Manifest this update:     Sat 19 Sep 2026 07:08:23 +0000
Manifest next update:     Sat 26 Sep 2026 07:08:23 +0000
Files and hashes:         1: tU4IRltUXO7x4uEAl3XZG6QStj0.crl (hash: FS6IIhBsRhsEF+zK+msaItrS/AeTDwgkCIIcu3J39bk=)
                          2: D2D5E3A2429111F1A9B50A47B2833773.roa (hash: JNJnwJdlLDhaD1G/+iNzHqjRU67B9dzGcdSz2okho74=)
                          3: 0F05CF767A6011F1976E05638BA30FBC.roa (hash: 7B1bqD+6h9jyiiQRYsB8Q16/B9nLv79GenM8klf3G4g=)
                          4: 36B69F0C218F11F19319393A0D3D8C67.roa (hash: Rqu5d6Iyt5RvWg05t+Bs6MR1vP48lOt2FAst15Iu7bg=)
                          5: CFF23F5457FA11F1947AF89298833773.roa (hash: 70J08+H/ExNxc8jpD+BsqCt2q0k+wbGOjpsoiz2ROjA=)
                          6: A4BC6B5699C811F19653C7033B11F970.roa (hash: DqYOnXpwLmKKYMjJJokS/b8klmENEW8C0tDont5K9Pw=)
                          7: 23967BF24A7711F1A7BED77BA6833773.roa (hash: Fp0dYx6TPqms3ShBwcnNza2eQIEhSvJF0hdWgmkuGzo=)
                          8: 9FA8D4DCA50411F18265DE6C3311F970.roa (hash: ncxhXez+ge66tRuP9GlI5BQTNpxBURFVOTzkOlVAARM=)
                          9: 5B9CF7B8541011F193006E3293833773.roa (hash: UEPdDUTRui+ayW3AbcnrWggT880Cdd6becbTRiUrqEI=)
                          10: 0A4D26588F9811F187E520485C11F970.roa (hash: 3DRYyDNZn0xnswRBJSAxhjSfQjHsJA8mc7gZgee0QnE=)
                          11: 88221330A26D11F19D29C37F6511F970.roa (hash: z551IATQrx2AVRTObISYemc3UykqMiktmWx2mC6/YLM=)
                          12: DF86A79EAA4711F18D6FC91D5811F970.roa (hash: di6G4Ok2YL2ICDAjJ+SX840gtU1xkz52o/rsk7i69L0=)
                          13: DF3E21307BFE11F198B5A8F78EA30FBC.roa (hash: NT30pur8xhY9PcKqmg6IwjPQmddy3T3G46Qh5vdQmt8=)
                          14: B9DCE45A347111F19700968FA5833773.roa (hash: 6QpnuOmxKQrcMtBDCLToCXkzosmzHxUQUPokRTTJH3w=)
                          15: 050E38E62E3E11F18FB4E28692833773.roa (hash: /JFZwhWSwSdVNSAIA2VslFfJ0mFpMyrPcYB8jKhIelI=)
                          16: 04910FD2A1A311F1B09ED42E6611F970.roa (hash: YhlkiTpSvf0X1OyOQCbOLY2s/yzWRi7pqB/JUq+tVwg=)
                          17: 3A70BFEC8C6F11F185F85D156111F970.roa (hash: XCQ95gaGyvxA7SNwZiogDe3J8T2Hjl5LHuJIkuOVpsw=)
                          18: 5493E832AF1511F09DB9CB78C4F9AE02.roa (hash: uIjz1D93M1fso+Y//Hqt4d2aDi49XaTeerlMUnOZ7Ao=)
                          19: A5C7652899C811F19653C7033B11F970.roa (hash: VH6+CPwDbSz/ISDti0F/lzMzff0Xd0BlKucLWf6GuRY=)
                          20: 80CB68A68EC811F1946CF5105A11F970.roa (hash: Ow3UmxXOic3HNzm9LDvmvAwHX174ghnh0IzFZYxiFW0=)
                          21: 1E9FD7DA27DE11F1A118CE77A7833773.roa (hash: 4HZ72AqLXMi7Oo7fFl4c7MxtfYI6Hr7/6V24G0+ZxdI=)
                          22: 620D8D92B24311F1B988EDDC6311F970.roa (hash: qxlzMzNMGw6ZR6vXmyZ4a2jsUlkB5KPOP3YwetQdzwA=)
                          23: 1A44C40648FF11F1AE16E45D93833773.roa (hash: q7YWA5SPxz9lm686m7SUsJ/DXFlxCYiGkRbWYzw7qBs=)
                          24: 300E55D2645B11F19DFE990E7247A888.roa (hash: B8rZI43b2LUCXU8rE+xRAPdthQYs+K3MurmJh+dDXVg=)
                          25: 2AFD25C0A10311F1ABE0DDFE3411F970.roa (hash: hiQnkW/a3aw4sFHOLrSxIlaGj0c/SkbWMstmNg55aU4=)
                          26: D33618D2A59011F193111DFE6011F970.roa (hash: HrkKSxhRpAmy9I0iwuLSShrDvnrHJsSmxa97enwplS8=)
                          27: 8FFB3BA07E4A11F1907D372082A30FBC.roa (hash: 2pEoKCofwg8TjGaQHu2CywBBegMX4ui6vfX3Ybywow4=)
                          28: A7349B8A499E11F19CE2905A97833773.roa (hash: tv8Ttyi8smlY2FRZQxJdaalHWRaIZpl5MIGpz7txhiY=)
                          29: A2517D166EAD11F18743D71861A30FBC.roa (hash: EXYW07HU+PDuF2Sjxw7qGLvDdb4Ds1WxfwmESxYCYx4=)
                          30: 0E6E84F47A6011F1976E05638BA30FBC.roa (hash: HtUuAkol0mHQrD42lO6MoPJ+Ejb03iZZDhqfCwpcfTY=)
                          31: D1D5C8C0A59011F193111DFE6011F970.roa (hash: qCJvwBrlqKx5E3VgjdWqgEUqcE6G1sCbDQGpoZR3Wb0=)
                          32: ABCCE66C445C11F1AD9768EE92833773.roa (hash: 9iBZLQ9uktWZ65mu8nlRlZWV5ecR8Ndx/Ji4IWLuSGw=)
                          33: AFBA3B6099CC11F1A36A837B3B11F970.roa (hash: H/OHVH3gHMbF1VZocaHnojjYPp+zCG+XnnmhJV9htu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Sep 19 07:08:23 2026 GMT
            Not After : Sep 26 07:08:23 2026 GMT
        Subject: CN=6aae34e7-0006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:56:8f:fa:93:ee:63:e3:7f:c7:60:ab:c2:f5:
                    31:fa:68:a3:fa:ff:6f:16:7a:d4:bd:00:36:88:3d:
                    61:c8:8e:1e:44:bb:4e:d1:29:b1:32:67:6f:dc:20:
                    a5:30:2f:c1:d7:20:d7:6a:ef:32:62:fd:bb:18:30:
                    a1:26:b1:46:ed:90:9a:9d:f0:a6:be:d5:0c:d7:8a:
                    2a:b3:1d:f3:72:56:7e:94:d0:a2:39:3c:d0:92:c8:
                    99:b7:51:7a:52:a1:61:39:09:1c:2a:d2:8f:cb:d0:
                    3f:81:b5:43:80:f0:04:f1:2a:67:9a:53:1e:f5:38:
                    7e:91:2d:78:74:da:b5:73:46:4e:93:4e:9d:04:9a:
                    b9:29:bc:21:e6:8e:7f:1e:bd:11:96:b2:28:f0:4e:
                    d9:7f:52:8a:39:41:b0:ac:9d:d3:5c:1d:43:d0:79:
                    d8:7d:89:dc:13:b8:09:39:15:1d:3a:73:cd:0f:60:
                    3e:38:a5:7a:eb:c5:7d:ff:04:6c:67:40:f0:6f:63:
                    5b:ad:f0:ec:ac:fe:84:9d:86:bb:6b:3b:e1:aa:70:
                    d9:a7:96:88:70:24:60:dc:f7:9b:07:52:95:ec:bc:
                    a7:4a:de:50:62:d5:cf:75:84:c3:e2:bb:39:a0:b6:
                    06:27:a2:e0:77:b0:d5:53:2a:a6:97:a8:94:56:7f:
                    5b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4A:2B:31:46:B3:FB:98:0C:1E:55:99:16:73:59:CC:13:44:62:3D
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:0d:79:24:36:e9:11:09:55:9a:fb:e4:ce:e9:50:6c:e2:ac:
         15:35:9e:6f:4c:bd:29:a5:6e:32:25:73:d4:2b:85:0e:40:e4:
         cf:a4:a3:62:09:19:f6:68:26:92:aa:d2:f6:29:e4:e1:e3:a9:
         fa:01:27:b2:e2:f6:c1:c1:6c:b8:bc:a6:60:aa:a3:a9:0b:2f:
         de:4c:49:58:7b:e0:25:aa:68:52:46:e1:66:c8:0c:a2:2f:b2:
         22:d6:89:63:a7:ef:e6:a0:c8:ab:33:3e:45:5e:dd:da:a0:8a:
         1f:d8:9b:0d:b8:73:8d:e4:cf:56:64:c5:6d:0a:55:d9:ff:2c:
         2e:17:a5:4a:ef:32:e0:fe:bc:ec:24:d3:1c:f0:13:7d:b4:ac:
         56:75:12:89:77:a8:43:2a:04:10:aa:9a:0d:e7:4b:15:46:e9:
         a3:6f:e3:9a:75:66:91:91:6a:d5:e1:97:97:a8:6a:70:7e:71:
         ad:d4:1e:4b:5d:f0:61:7c:13:8f:dc:4e:cf:8f:f7:a8:d6:e6:
         03:99:ea:ab:a2:25:19:95:95:8b:ca:3b:79:e5:d1:5d:56:be:
         25:68:e7:0e:3a:91:22:9d:75:ac:f2:0e:5d:96:ea:65:42:e4:
         2f:10:4c:32:8b:2f:e5:a3:f5:88:94:6d:79:0a:c6:16:c8:75:
         45:d5:b2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:43:04 2026 by rpki-client