Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
File:                     gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json)
Hash identifier:          VSU4IoB9S115ycVS4t2fXiZPJGIUJXtiQkXnQUeEFMY=
Subject key identifier:   C5:CB:D0:0C:A7:23:F6:ED:FA:B2:EA:28:18:2F:47:AA:81:17:26:A1
Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
Certificate issuer:       /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Certificate serial:       054D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
Manifest number:          04F6
Signing time:             Sun 20 Sep 2026 23:37:57 +0000
Manifest this update:     Sun 20 Sep 2026 23:37:57 +0000
Manifest next update:     Sun 27 Sep 2026 23:37:57 +0000
Files and hashes:         1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: QhVTOZqWnUd7atNtUxKPUkiWUzIw45geLwI413vdl9s=)
                          2: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: eYPDqk6CiCVss4EkZuowgeG638Civi0MVQZq29pSYbk=)
                          3: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: naDu5Ja+nUZ+iaPxJzaO5xNctRuZdG06y3HniPa528I=)
                          4: A5D75708E07111ED9601E941C4F9AE02.roa (hash: g0/tJc0JW/CRmQeJicEs0HkSx3ITHzBqjIOAcBLM6FE=)
                          5: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: PEgw27of0MFqunEKz93iWKmEM4bPPmkxIAHYsCgJElI=)
                          6: B5BFAB442FE111F19DB441919E833773.roa (hash: P12NrwuEVi8wdx/kCABaTswenwo867fCicXtnmsvepc=)
                          7: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: 1ib5ZHiX2c+Ay9rYC1Z/Jru6mlw71yvanvthh2v+7bo=)
                          8: F5B3F2F02FE111F183FB5F929E833773.roa (hash: adpxHreCn3jxtJ88fU3gS6rSVCPiga5e2uj5/vlUSuY=)
                          9: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: Z/QK88M5uL5DdEz3ATOtjxO2eM1sapV5OhRj3AH8iQw=)
                          10: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: IFm6rzchuTr/Ghy/abEkmajej4rQuJFBH9uiFcUCM2Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
                          rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:37:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1357 (0x54d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
        Validity
            Not Before: Sep 20 23:37:57 2026 GMT
            Not After : Sep 27 23:37:57 2026 GMT
        Subject: CN=6ab06e55-8c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:87:41:b5:65:73:2a:3c:7c:04:7d:78:c3:
                    a5:b6:6e:60:41:d7:76:03:76:e7:a9:d0:27:ec:81:
                    af:81:12:6a:0c:7f:43:ed:2a:ae:1b:a0:72:0a:bb:
                    77:66:80:f0:da:b3:9c:e3:b9:8d:c6:33:d0:3d:6f:
                    5a:fd:4a:7c:9d:46:49:5b:75:d9:c3:7e:c6:50:4b:
                    63:20:1b:4c:92:c8:41:0e:cb:ff:bc:e8:b3:ad:eb:
                    c1:5a:2d:fb:e4:95:1f:bd:4b:82:50:45:17:77:57:
                    31:01:4b:cf:27:b5:6b:15:ae:ad:93:6e:23:d2:ec:
                    08:c5:43:ef:ca:0d:18:80:10:90:04:48:36:ef:4a:
                    b5:9e:dc:dc:37:9c:01:0d:08:e0:3f:fe:f3:11:d7:
                    fc:60:79:e5:cc:09:51:fb:fa:b2:ae:3e:ef:c3:78:
                    b1:2f:69:9a:e7:85:eb:8e:36:2a:94:f8:35:6c:36:
                    c5:18:3b:89:91:c9:3e:d7:00:74:68:0e:13:5a:a9:
                    98:c5:e9:ec:d6:95:e4:a8:18:ba:73:9b:56:6a:3f:
                    a2:54:4d:fe:67:80:cc:b0:16:93:f2:5e:9f:c8:9c:
                    91:71:d3:83:a1:3b:8c:8b:ca:eb:f7:55:4c:0f:9c:
                    0b:6a:2a:25:1c:05:a1:56:3c:77:34:c9:91:39:9e:
                    fd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CB:D0:0C:A7:23:F6:ED:FA:B2:EA:28:18:2F:47:AA:81:17:26:A1
            X509v3 Authority Key Identifier:
                keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:d5:11:12:18:1c:e2:34:06:1f:63:67:82:8a:ed:70:17:55:
         99:46:3d:e2:70:6e:26:4e:04:fa:0e:78:25:d0:25:30:7c:c3:
         d8:d6:4a:a1:aa:46:b9:0f:b7:8c:40:7a:aa:96:8b:7a:82:36:
         32:d1:41:76:3d:88:f2:98:e3:ff:30:df:28:e0:23:69:7f:9a:
         e6:b1:5f:d6:69:35:f6:ba:ac:5c:24:f6:0a:48:9f:e2:68:8e:
         62:ad:7d:c3:99:67:a2:3b:bd:86:10:82:3c:dd:ad:83:17:0b:
         1f:db:f8:d8:7a:38:f6:8f:50:58:e2:a4:e0:6a:62:e8:7b:c5:
         05:1e:1b:34:fc:d7:2b:86:b4:51:c4:25:d7:c9:9e:44:31:f7:
         6e:9e:36:7b:bd:d7:01:af:59:b9:fc:77:5b:10:83:f7:bf:cc:
         4a:7a:84:e6:fe:0a:de:a4:38:d7:64:2a:08:93:b4:8e:64:4f:
         57:4b:ac:7e:d9:f0:fe:45:ea:c5:73:a0:cb:08:37:e1:12:b6:
         4c:c8:36:32:5b:63:ef:d8:03:06:92:23:58:e1:32:ef:d6:7a:
         7f:31:18:9c:29:53:0b:70:41:78:9e:1e:26:8b:f1:6c:79:94:
         ee:59:02:b7:1b:93:ec:61:58:7d:4a:0a:90:d6:f9:09:86:c8:
         ee:fc:c6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:52:06 2026 by rpki-client