Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
File:                     mc3A6r4YBBJhGaHVGpjMhxkT86k.mft (raw, json)
Hash identifier:          StdBTdVVCWRxr0lUpKYjJMDoSHfR6PuAC3wuHrRhJAY=
Subject key identifier:   A3:69:16:D0:BF:EF:D4:F0:E9:83:46:6D:C7:D6:20:F2:AB:F7:E5:B4
Authority key identifier: 99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9
Certificate issuer:       /CN=A9183F7F/serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9
Certificate serial:       0884
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
Manifest number:          0879
Signing time:             Sun 20 Sep 2026 20:46:04 +0000
Manifest this update:     Sun 20 Sep 2026 20:46:03 +0000
Manifest next update:     Sun 27 Sep 2026 20:46:03 +0000
Files and hashes:         1: mc3A6r4YBBJhGaHVGpjMhxkT86k.crl (hash: rXRcg3CjWZvrHw+pzhHsorft6psx0/LqRFHdexe1aCY=)
                          2: AE26CE12180911EB962CB216C4F9AE02.roa (hash: xktL8xnt8d8VvVMvmkgTHPe7LUSoKc1zKJuGX9n3RSw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl
                          rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 20:46:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2180 (0x884)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183F7F, serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9
        Validity
            Not Before: Sep 20 20:46:03 2026 GMT
            Not After : Sep 27 20:46:03 2026 GMT
        Subject: CN=6ab0460c-fa44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a1:be:dc:c3:d2:7c:0c:d1:11:e2:b7:28:e7:
                    f8:31:cc:c1:7a:33:ce:3f:d7:53:88:36:d8:cf:45:
                    62:5e:14:ca:c0:3a:a2:5d:6b:14:1f:0c:d6:e5:a3:
                    2a:80:e0:23:a3:1c:a8:07:6a:67:11:ab:76:cd:c5:
                    ef:48:11:e2:25:f5:20:b4:a5:ae:c5:85:b7:17:5d:
                    c5:c7:de:58:35:b6:01:e7:97:4a:d9:99:c1:ef:0e:
                    c1:3c:0a:b0:c8:3e:7f:ca:73:26:9a:4a:dd:c4:6f:
                    80:eb:d6:ef:a9:b3:3b:ca:af:5b:81:74:f6:03:ba:
                    f4:12:a8:bd:cf:6b:90:f1:38:f6:f9:7e:2d:d7:f8:
                    4a:9c:3f:68:72:e9:c4:09:89:69:18:2b:8f:fa:92:
                    9f:e3:e5:43:1c:45:15:a4:45:a9:0c:0b:3b:20:a5:
                    12:cc:8f:0b:a3:2b:35:b2:03:08:8e:ca:53:6c:25:
                    5d:ec:5b:49:34:dc:f9:9f:e5:1d:cc:c1:29:83:85:
                    ae:49:15:64:57:df:82:05:d3:7a:0d:4c:fc:82:1e:
                    cb:9d:12:86:59:67:d9:01:86:26:46:b3:bc:14:5b:
                    ed:d4:c2:3c:97:30:cb:52:18:21:d2:bc:47:22:aa:
                    f6:37:25:cd:47:e7:14:9e:6f:55:a9:01:30:5b:15:
                    e1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:69:16:D0:BF:EF:D4:F0:E9:83:46:6D:C7:D6:20:F2:AB:F7:E5:B4
            X509v3 Authority Key Identifier:
                keyid:99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:47:57:48:60:9b:98:cf:bb:3d:86:17:b6:32:19:3f:fa:bc:
         ad:bf:aa:e7:61:ff:e8:10:d4:55:18:9f:81:a2:59:bf:f0:b7:
         39:e5:3b:41:63:e7:35:fd:39:dc:02:d5:3c:7c:97:53:44:dc:
         46:84:2c:28:38:30:4a:5c:d4:f9:ad:f8:38:c7:31:a4:3d:19:
         d8:87:c4:d3:24:47:78:88:fa:b9:67:f7:ab:4e:c8:7c:84:59:
         9a:b9:fb:05:85:5e:31:5d:e1:c4:c5:0f:81:78:dd:19:fb:d1:
         88:5e:d5:c0:c5:90:71:d7:b9:d1:53:c4:37:34:c2:80:69:eb:
         9b:c7:10:ec:b0:ed:5e:ef:14:c5:3f:b3:a0:19:f8:0d:e1:8b:
         81:c4:12:78:47:75:83:44:2a:ed:f2:0e:f0:c9:aa:69:a3:2b:
         47:4d:e0:cf:df:23:4f:9c:4a:e6:2b:01:60:6c:2d:9c:14:10:
         65:a1:57:c6:b8:59:57:6d:83:b8:3d:ea:a4:27:d6:ca:87:4b:
         51:3c:06:2f:24:6f:bd:f4:7f:bf:68:3d:8a:25:7f:3f:95:fb:
         01:d7:c9:6c:e9:20:0a:2a:0b:d1:14:13:3b:b6:f4:24:b8:1e:
         a0:b0:7c:2c:f2:8b:89:e6:ad:cf:a8:6f:e2:93:eb:6d:83:38:
         f5:a3:47:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:33:25 2026 by rpki-client