Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
File:                     PqQ0fS2f1utqAbROVXH4iwiswls.mft (raw, json)
Hash identifier:          6QZ6O7onv+agrGmA1uvgAfH/jZ87g+SJ+2Aj9v+3afE=
Subject key identifier:   3B:D7:B5:26:9E:73:28:8A:AF:71:DC:81:72:C0:66:D4:F2:CB:FB:00
Authority key identifier: 3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B
Certificate issuer:       /CN=A917BB51/serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
Certificate serial:       0207
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
Manifest number:          01F7
Signing time:             Fri 25 Sep 2026 03:25:24 +0000
Manifest this update:     Fri 25 Sep 2026 03:25:24 +0000
Manifest next update:     Fri 02 Oct 2026 03:25:24 +0000
Files and hashes:         1: PqQ0fS2f1utqAbROVXH4iwiswls.crl (hash: 7IJW9VQZ36WHiL1ql7TjZLv9Ca1cKJav5m5hGOIjMuM=)
                          2: A9C5C1CAC4B811EE8A03D547C4F9AE02.roa (hash: RLvkJQC71Slj35G4jfs9BmOdtDEiBC1wT0j0eVVXx8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl
                          rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 03:25:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BB51, serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
        Validity
            Not Before: Sep 25 03:25:24 2026 GMT
            Not After : Oct  2 03:25:24 2026 GMT
        Subject: CN=6ab5e9a4-7cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:54:4b:8f:1d:73:27:29:f4:4f:bb:0b:5e:a7:
                    db:82:8d:dd:6f:d9:5b:ec:10:a5:f4:4b:4b:65:59:
                    30:87:d3:b7:37:2e:f6:85:7a:69:7f:02:9a:4a:f3:
                    94:f3:b4:27:74:6b:0e:71:cd:3b:35:77:27:b4:98:
                    21:95:ab:24:73:98:ba:0f:c6:73:59:99:28:4d:dc:
                    a1:72:9b:b1:03:cf:6c:3b:11:f8:82:9d:b5:64:b8:
                    c7:e9:78:40:86:73:e6:ca:08:8a:a0:4b:16:1c:69:
                    da:08:59:d8:a3:c6:42:49:15:42:b9:56:2f:80:e5:
                    10:e6:b6:e0:db:fc:fe:ad:11:fd:4b:7a:c5:eb:a9:
                    71:58:29:cc:10:02:f7:76:47:e7:47:eb:7e:ac:64:
                    61:ea:3b:9d:17:83:af:b6:35:82:49:cf:ab:31:bf:
                    ed:30:50:a4:87:6a:7c:ad:ce:34:e0:06:12:1f:e7:
                    20:3b:73:90:e8:82:25:5c:b8:72:39:6c:3a:d1:d9:
                    67:f2:9b:7e:d5:a0:26:3b:59:b3:de:64:27:15:70:
                    b7:f8:98:a7:67:a9:44:9a:42:3a:27:de:1a:6c:2c:
                    13:fe:1c:f7:f0:d7:d2:57:b7:af:03:1f:3e:60:e2:
                    3c:d8:c9:11:cb:2b:f4:fc:29:0b:30:b6:b7:2c:33:
                    24:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D7:B5:26:9E:73:28:8A:AF:71:DC:81:72:C0:66:D4:F2:CB:FB:00
            X509v3 Authority Key Identifier:
                keyid:3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ad:2d:b2:fa:83:8f:84:36:aa:e2:af:c3:f2:c0:f1:42:15:
         fe:12:ea:41:5c:82:b7:35:2b:34:ae:34:55:5b:f9:5a:f6:3b:
         65:e2:af:e7:88:76:15:d1:27:c7:e7:d0:8c:04:38:c9:72:2f:
         97:ac:59:6a:f3:37:81:8c:80:1a:2a:e3:e5:68:1b:14:3e:e7:
         f6:57:0a:dc:38:3a:06:4b:1c:af:74:24:a4:e5:1b:f2:68:70:
         fb:db:06:98:9f:5e:29:79:64:5f:9e:e1:bf:7c:71:c8:cd:06:
         f5:9b:c0:9d:a3:2e:e4:5d:a0:38:db:8a:4c:d1:16:c6:68:b3:
         76:7f:21:c3:8c:0c:d8:c3:95:6f:71:a1:06:3e:98:58:38:50:
         78:86:d7:32:0b:06:50:f7:78:ec:e8:e6:fb:9e:79:75:68:0f:
         60:ae:6b:a7:ff:d4:2b:9c:32:f4:18:92:1f:75:73:9f:8e:ad:
         42:12:47:fc:6f:06:32:dc:3f:96:b7:fd:94:94:91:fb:8e:87:
         0b:aa:b3:bc:a7:95:99:d2:2d:46:8f:68:c7:e0:30:82:69:15:
         71:07:8e:f9:42:19:5d:39:ad:19:c1:3d:12:ba:b2:cd:29:1f:
         65:d9:a7:3e:f7:ff:ed:8c:de:84:72:65:b0:0e:bb:03:3a:69:
         be:49:a6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:23:26 2026 by rpki-client