Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
File:                     4XcstdOWUnbPTpjTdmtjDX4_gXg.mft (raw, json)
Hash identifier:          mcOVeW7teaPICj8u5XXAfWwNki/rHsj3Ebnd5rMuEuw=
Subject key identifier:   55:04:47:9D:14:ED:01:AB:FD:2B:29:40:60:84:82:A0:E3:FD:70:FD
Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78
Certificate issuer:       /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178
Certificate serial:       0890
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
Manifest number:          0869
Signing time:             Sun 20 Sep 2026 20:55:25 +0000
Manifest this update:     Sun 20 Sep 2026 20:55:25 +0000
Manifest next update:     Sun 27 Sep 2026 20:55:25 +0000
Files and hashes:         1: 4XcstdOWUnbPTpjTdmtjDX4_gXg.crl (hash: CuItpjxkjujF1FIWK6UtzB8t603xc4v6Gaefi4DwDc4=)
                          2: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (hash: 4V6lPO7ag/YW0Vp0T9oZKnRuFp3L/Sg6PmpvkYR7JtQ=)
                          3: xGs6rug6WDHyh1ZySeTGRrJxMY4.asa (hash: 9yEt3DikIep4O7B9SercxIT/lUI+BT7pT0etSvn7IqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl
                          rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2192 (0x890)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175027, serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178
        Validity
            Not Before: Sep 20 20:55:25 2026 GMT
            Not After : Sep 27 20:55:25 2026 GMT
        Subject: CN=6ab0483d-f323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1b:c3:3d:1b:48:0c:a9:16:0c:8a:df:c3:f8:
                    29:ba:78:99:f6:cb:28:1e:a0:c4:04:da:14:43:55:
                    4d:cd:91:ae:fb:0c:f1:d6:9d:dc:73:0d:f9:fd:f8:
                    2c:49:bf:4a:19:ce:d3:af:a9:73:11:6d:b3:33:e4:
                    af:85:dd:3d:6e:06:02:e6:48:57:ec:85:74:74:e6:
                    14:82:b3:98:5d:19:ca:16:68:0f:ec:24:1f:95:96:
                    58:81:25:a0:27:0f:33:19:5f:1f:2e:63:c7:08:f2:
                    99:b9:0d:35:a3:28:8c:23:db:b1:0c:34:09:96:36:
                    c1:44:2a:8c:ba:e7:89:9a:89:54:1b:4f:8a:63:41:
                    ce:06:e0:02:5c:f2:c2:b4:4b:6c:bb:b8:4a:99:83:
                    7f:ff:d7:c2:bd:22:6e:6b:4b:d2:69:56:ba:4d:72:
                    f6:43:b0:f0:11:c0:89:d7:14:3d:82:13:b7:ba:6a:
                    64:1f:96:ea:74:bc:50:84:aa:3b:1f:7f:cd:37:c1:
                    2b:f0:53:30:78:ba:3e:d8:f9:9c:5c:87:bd:f7:bc:
                    67:ab:0a:33:77:6a:d6:c6:71:c2:7e:35:15:11:5e:
                    19:3c:52:f6:e9:cb:db:b6:5b:fa:b2:e7:f6:6e:f3:
                    23:af:25:b8:88:f1:8f:e8:68:a4:fc:fb:ba:27:b6:
                    3c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:04:47:9D:14:ED:01:AB:FD:2B:29:40:60:84:82:A0:E3:FD:70:FD
            X509v3 Authority Key Identifier:
                keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:86:4e:29:c6:27:c0:f1:6a:20:c9:b7:a4:95:0f:93:a0:5f:
         d4:df:42:be:0b:f3:1f:cc:93:ed:8a:78:22:94:8d:a5:dc:f5:
         c6:bf:94:0b:a3:18:99:d7:30:a1:08:9d:82:b6:24:91:d0:88:
         98:6f:c6:d2:60:a1:7b:be:ec:7b:15:3e:bb:a2:28:26:e1:c9:
         e7:4b:58:5a:32:1d:26:b9:c3:d1:da:32:4d:b0:3c:c9:2f:b8:
         42:c3:11:02:4f:8e:8c:56:9b:d8:0b:80:ea:6e:34:78:0f:b1:
         b4:06:42:53:77:d5:fe:45:28:62:f0:5a:03:eb:45:9b:f5:4e:
         e5:d0:d0:7c:b0:af:82:c1:40:f9:09:e6:ac:d7:dd:e1:27:31:
         f9:f4:44:19:cb:ec:7c:6e:39:ff:62:e0:ee:7c:c0:23:28:0e:
         b4:f7:79:48:e6:b1:91:0c:e7:15:98:df:dc:4e:57:67:ad:7f:
         6f:f3:86:57:66:f0:d2:7f:da:61:34:4d:e6:d7:9f:1c:6c:bf:
         c7:a3:7f:09:1f:bc:1f:fc:ae:1a:60:97:9e:c2:87:5a:9f:6c:
         43:a5:a9:1d:42:6e:1e:12:d5:01:c5:72:98:58:59:9e:b8:91:
         2f:34:b4:6f:23:04:59:ae:a4:1f:a4:56:5d:7c:81:b0:4e:c2:
         8e:ff:8b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:07:06 2026 by rpki-client