Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft
File:                     g2LSOGrBMH7vi7_YdPc45tqjVXI.mft (raw, json)
Hash identifier:          +XQKxa01O55bgMc3SYqJMtsSvmrzL7H8cgjTLJlk3VA=
Subject key identifier:   97:39:18:43:59:58:5E:C6:2F:E2:C2:52:C6:12:45:9F:A0:E8:27:39
Authority key identifier: 83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72
Certificate issuer:       /CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572
Certificate serial:       0E19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft
Manifest number:          0E10
Signing time:             Tue 22 Sep 2026 17:43:10 +0000
Manifest this update:     Tue 22 Sep 2026 17:43:09 +0000
Manifest next update:     Tue 29 Sep 2026 17:43:09 +0000
Files and hashes:         1: g2LSOGrBMH7vi7_YdPc45tqjVXI.crl (hash: A0WEYTD9tY48cJ4DFP+4OeACt7zLy3lgXKXJns8c3y4=)
                          2: D11C8B12DB7111E981104A54C4F9AE02.roa (hash: az5Wu3rdmwem1fp3sJ1LkEbrXCOkEOGTGhmGNaaRozA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl
                          rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 17:43:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3609 (0xe19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C0F5, serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572
        Validity
            Not Before: Sep 22 17:43:09 2026 GMT
            Not After : Sep 29 17:43:09 2026 GMT
        Subject: CN=6ab2be2d-c1a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b9:73:02:1d:de:53:54:12:ef:cf:de:7c:c2:
                    84:5c:37:50:c7:bf:7b:65:90:7d:2a:88:01:d4:51:
                    0a:18:b9:ef:e7:fe:3b:41:7d:eb:b6:38:7c:54:8b:
                    21:af:79:b0:c1:37:86:6b:6c:c8:01:c1:77:bb:72:
                    37:23:71:84:76:29:06:08:86:ac:f8:24:60:d7:0b:
                    9c:8b:98:3b:7a:f5:06:51:af:2a:5d:22:c6:f6:f2:
                    11:9f:ed:fe:f5:43:c9:1c:03:00:6e:58:a3:eb:50:
                    8a:18:60:34:ec:92:46:de:82:47:3a:be:7a:db:f7:
                    c4:2a:9c:6f:3a:bf:d6:89:14:1e:b7:f9:2a:7a:32:
                    07:56:63:57:aa:12:d3:60:0f:86:bc:1e:01:af:b7:
                    fa:ea:ff:5d:39:ec:aa:f3:ec:67:98:26:5d:43:2e:
                    d3:c6:c3:ed:8c:dd:53:12:2d:fa:f2:f5:29:13:3e:
                    5d:72:d3:98:c6:cf:d8:12:63:85:9f:5d:1e:78:0a:
                    dc:f2:b6:d1:38:79:90:27:24:f1:a4:69:7b:af:fd:
                    be:cd:91:57:60:02:be:e2:f4:40:3c:e5:2e:c3:62:
                    b3:fe:3b:f6:18:17:30:ae:4b:84:56:b7:9e:95:b3:
                    be:fa:be:f0:bb:09:a8:3b:f1:ce:c5:69:ea:8d:98:
                    ea:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:39:18:43:59:58:5E:C6:2F:E2:C2:52:C6:12:45:9F:A0:E8:27:39
            X509v3 Authority Key Identifier:
                keyid:83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:d3:a3:39:9e:43:ea:59:5a:d1:e5:e6:3b:95:ce:e2:fa:56:
         96:56:5e:63:ce:8c:a7:df:40:98:16:e1:be:f2:f6:d1:df:75:
         9d:7d:c9:62:ce:3d:ef:f1:91:e8:85:cb:5e:f9:24:0e:98:81:
         bb:5a:86:b9:de:01:78:ec:f3:ed:a7:f1:59:87:e6:c8:ff:f3:
         f5:5c:a3:2c:16:bd:d3:14:e6:93:27:a6:99:31:ae:59:5f:04:
         cd:80:44:85:5e:3a:3e:39:87:d7:2a:01:42:1e:46:af:5a:33:
         9b:21:8a:80:02:a0:8a:93:7a:7a:50:af:2b:d0:22:03:4a:1c:
         9a:79:d6:d7:6c:5c:43:23:65:79:38:b4:2b:eb:a2:89:78:b9:
         4a:ae:60:78:b7:8d:f6:7d:f3:65:76:6c:49:49:0b:bd:bf:1f:
         1e:6a:3d:08:00:b9:22:95:5a:67:5b:99:4a:44:63:a2:c9:63:
         5f:29:8f:77:92:04:e5:a5:0b:ce:b3:5b:db:b8:4b:05:1e:97:
         df:8d:2f:f0:ee:99:b7:0e:e7:62:e3:a9:c9:aa:2d:37:fa:5f:
         a1:c8:3b:4e:f8:c2:76:b0:04:24:aa:18:d0:98:a3:7f:24:34:
         a9:59:14:52:5f:01:4c:84:59:88:05:95:24:06:23:b1:e6:6b:
         3b:3d:fd:dc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MwRjUxMTAvBgNVBAUTKDgzNjJEMjM4NkFDMTMwN0VFRjhCQkZEODc0RjczOEU2
REFBMzU1NzIwHhcNMjYwOTIyMTc0MzA5WhcNMjYwOTI5MTc0MzA5WjAYMRYwFAYD
VQQDEw02YWIyYmUyZC1jMWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt7lzAh3eU1QS78/efMKEXDdQx797ZZB9KogB1FEKGLnv5/47QX3rtjh8VIsh
r3mwwTeGa2zIAcF3u3I3I3GEdikGCIas+CRg1wuci5g7evUGUa8qXSLG9vIRn+3+
9UPJHAMAblij61CKGGA07JJG3oJHOr562/fEKpxvOr/WiRQet/kqejIHVmNXqhLT
YA+GvB4Br7f66v9dOeyq8+xnmCZdQy7TxsPtjN1TEi368vUpEz5dctOYxs/YEmOF
n10eeArc8rbROHmQJyTxpGl7r/2+zZFXYAK+4vRAPOUuw2Kz/jv2GBcwrkuEVree
lbO++r7wuwmoO/HOxWnqjZjqxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJc5GENZ
WF7GL+LCUsYSRZ+g6Cc5MB8GA1UdIwQYMBaAFINi0jhqwTB+74u/2HT3OObao1Vy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBGNS8xRUM0RTA5QURC
NzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1IN3ZpN19ZZFBjNDV0cWpW
WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2cyTFNPR3JCTUg3dmk3X1lkUGM0NXRxalZYSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzBGNS8xRUM0RTA5QURCNzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1I
N3ZpN19ZZFBjNDV0cWpWWEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwtOjOZ5D6lla0eXmO5XO4vpWllZeY86Mp99AmBbhvvL20d91nX3JYs497/GR
6IXLXvkkDpiBu1qGud4BeOzz7afxWYfmyP/z9VyjLBa90xTmkyemmTGuWV8EzYBE
hV46PjmH1yoBQh5Gr1ozmyGKgAKgipN6elCvK9AiA0ocmnnW12xcQyNleTi0K+ui
iXi5Sq5geLeN9n3zZXZsSUkLvb8fHmo9CAC5IpVaZ1uZSkRjosljXymPd5IE5aUL
zrNb27hLBR6X340v8O6Ztw7nYuOpyaotN/pfocg7TvjCdrAEJKoY0JijfyQ0qVkU
Ul8BTIRZiAWVJAYjseZrOz393A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:00:38 2026 by rpki-client