Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
File:                     Sn0mxMvxZwAkXWf79pULcSkYmTk.mft (raw, json)
Hash identifier:          lBd9kx0MxDJzlzg1tg03sLqOdejR5c3DqZdhdd9ID6k=
Subject key identifier:   6C:89:F5:E4:84:FB:32:19:31:72:EA:7C:83:29:2C:94:37:A1:94:C2
Authority key identifier: 4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39
Certificate issuer:       /CN=A91839CF/serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939
Certificate serial:       0163
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
Manifest number:          015A
Signing time:             Mon 21 Sep 2026 05:10:20 +0000
Manifest this update:     Mon 21 Sep 2026 05:10:19 +0000
Manifest next update:     Mon 28 Sep 2026 05:10:19 +0000
Files and hashes:         1: Sn0mxMvxZwAkXWf79pULcSkYmTk.crl (hash: LxIU+YH1ktLCEYnnblMRx85CKeo/wTIrKqwNpDNADws=)
                          2: 305EB30EA98D11EF8C023466C4F9AE02.roa (hash: k13/oiDM+4Sed6PAxjKJdfsAARWmsAIGq3EH0KkUFBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl
                          rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:10:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91839CF, serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939
        Validity
            Not Before: Sep 21 05:10:19 2026 GMT
            Not After : Sep 28 05:10:19 2026 GMT
        Subject: CN=6ab0bc3c-36f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:be:6f:7b:fb:2d:4b:50:00:71:ef:06:f5:2f:
                    25:3d:d6:4d:e9:18:83:08:36:96:ed:1d:eb:9d:f8:
                    fa:37:48:e1:57:3e:f8:4f:55:ab:2e:fe:d2:e9:d3:
                    d7:49:dd:bb:2d:16:f3:a6:cf:ce:15:4c:99:7a:fc:
                    e2:c4:a1:f1:ce:0a:58:9c:e4:73:1a:53:5c:63:21:
                    61:1a:22:5b:4e:aa:38:c5:0f:b8:ba:dc:42:bb:f9:
                    90:e5:c8:34:cf:4d:7d:f6:88:7b:3a:27:ee:3d:e4:
                    87:18:04:31:4f:d2:96:52:bb:e0:b8:4f:f0:8c:4b:
                    96:31:31:47:d3:24:a2:95:0e:dc:fa:db:00:50:15:
                    91:02:fb:4f:6a:16:04:61:fd:35:9d:c8:ea:00:da:
                    c8:b0:dc:66:68:54:f8:cd:db:98:b9:9a:74:bd:77:
                    8d:de:b1:d8:b1:d2:58:19:91:33:59:a9:06:c6:94:
                    81:15:2a:a2:0f:17:3b:63:b7:74:a0:44:35:ee:e5:
                    04:b8:d1:bc:ef:1a:9a:70:bc:b0:7d:2c:53:6a:dd:
                    4f:04:df:61:c4:bb:75:00:1c:bd:45:14:d9:45:f4:
                    d9:8d:7f:d6:b4:7f:10:cf:24:8d:65:1e:9e:4c:a0:
                    eb:eb:63:39:d8:6f:cd:7e:56:85:36:d4:3e:03:06:
                    70:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:89:F5:E4:84:FB:32:19:31:72:EA:7C:83:29:2C:94:37:A1:94:C2
            X509v3 Authority Key Identifier:
                keyid:4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:00:83:1b:68:fc:f8:24:a3:0a:0e:5e:74:c6:8c:0b:3d:39:
         17:49:b7:aa:e6:62:91:23:6a:83:c6:15:71:05:5b:f1:79:35:
         33:5b:6b:a1:d8:c0:fe:9a:4a:07:86:32:c3:b1:47:19:b3:df:
         31:e9:23:cc:4a:d7:8e:cc:10:d9:5c:48:06:9e:4d:02:17:7e:
         b6:15:62:39:86:e3:e5:7b:6a:bd:36:db:cd:b6:34:b8:14:12:
         18:ba:08:4c:61:e7:ea:b1:12:10:76:6c:c1:ff:e2:fb:61:80:
         a1:ac:95:64:29:e6:99:9f:06:af:2b:99:b5:b0:82:63:16:fd:
         c4:ca:06:5d:37:8f:d2:f5:a4:eb:5f:f7:5f:c1:9f:c5:39:7b:
         c8:af:77:bc:d5:72:cb:0a:37:57:70:12:73:06:6e:7b:70:1e:
         30:e0:2e:a5:e1:cd:d9:c6:ab:48:f2:29:87:be:c0:c7:e8:d9:
         e0:fb:be:fb:29:7b:1f:fb:5d:62:30:5d:77:4e:17:4d:fa:59:
         dd:c7:1c:20:ef:60:ba:91:d3:07:22:d0:05:b4:b3:7e:e1:a8:
         17:8e:e8:be:d5:77:d8:87:33:77:84:9a:1e:d3:9d:e9:57:a5:
         32:30:f9:35:e1:e4:42:07:d3:3e:38:6d:7a:54:7c:4f:b9:40:
         0f:a0:29:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:29:38 2026 by rpki-client