Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
File:                     mKWpVZLATr7Thxa8Hc41F7exLQg.mft (raw, json)
Hash identifier:          t9BcX2BVevEJH1P7+2HxRICv0IRBJRKG2NwQbgZRBsM=
Subject key identifier:   D2:99:43:B2:86:C2:72:77:F5:C0:2B:EF:23:DC:D1:72:6D:9B:0A:1A
Authority key identifier: 98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08
Certificate issuer:       /CN=A917B647/serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08
Certificate serial:       069D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
Manifest number:          0693
Signing time:             Sun 20 Sep 2026 22:21:57 +0000
Manifest this update:     Sun 20 Sep 2026 22:21:56 +0000
Manifest next update:     Sun 27 Sep 2026 22:21:56 +0000
Files and hashes:         1: mKWpVZLATr7Thxa8Hc41F7exLQg.crl (hash: S4VxZdtrvhwc8n3W3G2dZIn9fHFY14kL9JAXN8W92TA=)
                          2: BF8F70C67B8211ED9C4EDD3BC4F9AE02.roa (hash: 3aFodImKWMo+HHP106nEDJyeLQ2LYiLD1hjDTf3lt2Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl
                          rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:21:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1693 (0x69d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B647, serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08
        Validity
            Not Before: Sep 20 22:21:56 2026 GMT
            Not After : Sep 27 22:21:56 2026 GMT
        Subject: CN=6ab05c85-8741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c9:90:57:5d:4c:0c:f5:50:5b:ff:a9:48:9e:
                    75:48:b1:ed:5f:fc:39:b8:5c:03:7b:71:fb:9b:dc:
                    6b:c3:b5:95:3d:99:9e:0b:32:41:c9:39:82:b9:fa:
                    e6:0a:00:6c:40:0c:d7:50:22:b0:2c:9e:82:89:a8:
                    a8:a8:95:65:df:d4:d2:15:99:fb:77:1b:da:55:9c:
                    b1:53:ba:f2:73:04:0b:cd:89:2d:37:36:05:1e:82:
                    41:bb:14:f4:a6:17:3f:bf:fe:33:e5:47:6d:a3:01:
                    50:b4:88:f4:75:49:1a:02:bd:3d:7c:6a:fb:04:cb:
                    5f:80:b9:ab:ae:a3:7c:3e:12:9d:82:91:5a:d8:c8:
                    d8:30:c9:58:7c:16:2c:9c:7f:09:c1:1d:fa:1d:03:
                    29:09:e2:d7:5d:3e:04:52:28:75:19:08:a0:cf:4d:
                    55:6a:74:1f:35:63:ac:b1:76:4b:d9:35:b7:2a:0f:
                    c5:a6:66:f4:9f:4d:11:3b:57:d2:b5:26:09:7b:f0:
                    9a:22:cb:8f:e4:30:bc:af:c5:d7:52:a1:ef:92:72:
                    d4:d1:f6:db:80:29:6a:ac:6f:cb:a7:4d:ac:74:a4:
                    7e:37:da:ab:06:04:69:42:6b:4f:8e:20:a1:e6:a9:
                    4f:66:3b:31:39:8e:d0:c7:fa:fc:f7:3a:88:e4:50:
                    41:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:99:43:B2:86:C2:72:77:F5:C0:2B:EF:23:DC:D1:72:6D:9B:0A:1A
            X509v3 Authority Key Identifier:
                keyid:98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:ac:7c:42:f9:32:1e:74:0d:c7:b2:87:1f:ac:90:d8:83:fb:
         3e:e1:0f:9b:0f:bf:bf:6e:4b:fa:55:15:25:3b:4c:c9:24:2f:
         e0:90:82:45:43:1a:ab:b7:ff:fd:78:6b:f7:f1:fb:00:07:7b:
         95:cb:1b:4e:4f:59:b0:9b:fa:08:21:8c:b4:59:6d:68:8f:63:
         2e:7d:51:14:1e:76:77:85:5a:db:aa:4a:7c:0d:dd:f1:7f:42:
         5d:6b:15:15:6b:ec:41:1b:f7:7c:ef:44:27:f8:06:07:4f:ac:
         93:18:5d:36:11:06:8c:8e:7f:e9:49:b5:06:a0:33:78:7d:15:
         2f:c0:dd:c9:3c:51:28:0a:f2:9a:fc:4a:8c:74:76:1e:11:24:
         eb:d1:9f:2d:51:9c:58:d5:e2:48:9c:96:e3:50:ec:f4:97:19:
         98:20:32:e8:28:60:bd:f6:d1:40:a4:95:db:90:db:f8:d1:d7:
         12:af:e4:5f:81:c3:bc:5a:ac:17:f4:06:df:e5:3e:90:c0:4d:
         ee:05:c2:7a:f5:26:26:e3:ed:ca:29:bc:c4:23:49:3e:5b:11:
         8e:69:f9:be:b3:94:83:a4:62:cd:f4:c3:fd:b8:2c:f1:2c:c5:
         21:78:15:b3:41:4d:1d:18:ce:20:5f:f6:4c:4a:9c:82:30:0c:
         48:c2:ae:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:55:40 2026 by rpki-client