Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft
File:                     D2tHILCjVyLYXzRG79R0C9NBg04.mft (raw, json)
Hash identifier:          +AIPO08Ve4SS3E/sj8ZM8sHb6tIPsZm4O71VTuZagtI=
Subject key identifier:   4C:F6:EC:5E:F1:A5:76:8D:F6:B3:A2:8F:E9:6B:59:73:42:4C:AB:2C
Authority key identifier: 0F:6B:47:20:B0:A3:57:22:D8:5F:34:46:EF:D4:74:0B:D3:41:83:4E
Certificate issuer:       /CN=A91850AD/serialNumber=0F6B4720B0A35722D85F3446EFD4740BD341834E
Certificate serial:       0193
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft
Manifest number:          0187
Signing time:             Sat 19 Sep 2026 04:39:21 +0000
Manifest this update:     Sat 19 Sep 2026 04:39:20 +0000
Manifest next update:     Sat 26 Sep 2026 04:39:20 +0000
Files and hashes:         1: D2tHILCjVyLYXzRG79R0C9NBg04.crl (hash: pFBppQO3h14hxImf+/VwKSW1MQXxEdXnApHi6Z8YVF4=)
                          2: CD1FB5C2643611EFA2C41948C4F9AE02.roa (hash: Oees07yYoqgn5PrN7dD6R0kAM+w8GIQPtiPs4eqC920=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.crl
                          rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91850AD, serialNumber=0F6B4720B0A35722D85F3446EFD4740BD341834E
        Validity
            Not Before: Sep 19 04:39:20 2026 GMT
            Not After : Sep 26 04:39:20 2026 GMT
        Subject: CN=6aae11f9-81c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4f:2c:18:2e:1d:45:54:7f:d3:48:cc:21:80:
                    32:46:37:de:ed:27:d0:5e:72:90:83:85:94:79:53:
                    07:55:68:c5:f4:e5:5c:c9:60:42:51:91:b3:f8:37:
                    ff:88:7b:2e:4e:1a:b2:9b:90:8a:b2:b6:a6:58:0c:
                    53:f8:69:27:2b:6e:78:b6:86:e4:eb:9b:88:4e:e4:
                    ff:5f:44:34:6f:12:96:ca:3a:57:04:0e:b5:f5:7e:
                    56:6b:99:2b:af:a0:ea:f4:80:16:c3:08:f9:e2:de:
                    ca:4d:d0:63:bf:49:b3:9d:e0:84:49:e3:78:7f:91:
                    d7:62:92:99:7b:4e:96:ff:bd:bd:c0:af:61:10:c3:
                    a6:4f:e6:9a:7f:5f:a8:41:39:c2:c4:02:71:64:33:
                    a2:6b:77:fa:80:52:ca:2b:72:7d:5d:cb:d4:c3:26:
                    f9:ba:84:18:c9:c7:92:8f:6a:99:ad:ae:7e:5f:df:
                    db:5c:a4:53:c5:7f:1d:d8:f4:19:bc:d6:18:23:7d:
                    20:3a:46:e1:9b:c0:ea:2c:95:1c:62:6d:2a:73:14:
                    6b:c9:f1:f6:76:75:91:9f:95:af:8f:d9:51:d3:79:
                    15:b7:3a:85:6d:f2:f5:40:c9:f1:96:8e:6f:4b:89:
                    fa:2f:95:ac:5d:22:67:2a:68:fd:41:f6:a1:2c:91:
                    40:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F6:EC:5E:F1:A5:76:8D:F6:B3:A2:8F:E9:6B:59:73:42:4C:AB:2C
            X509v3 Authority Key Identifier:
                keyid:0F:6B:47:20:B0:A3:57:22:D8:5F:34:46:EF:D4:74:0B:D3:41:83:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ea:34:dc:8e:25:bc:c1:c6:f1:39:4f:32:15:dc:00:77:94:
         13:70:3a:7a:f1:55:62:7b:92:3c:b7:ce:1e:9a:71:5f:94:d1:
         8a:15:5c:8c:ba:7c:8d:4d:d4:7e:08:1a:72:1b:4b:aa:b8:cd:
         78:d2:4d:a9:31:65:50:4e:f7:23:fb:a1:67:dd:bd:4c:77:41:
         24:c9:6d:9e:15:2f:7c:9a:ee:f7:f2:3c:37:f2:d5:67:be:6f:
         bf:73:26:29:f0:f5:64:53:3a:54:39:28:b7:ee:5a:f6:7d:e3:
         e1:94:b7:64:83:84:c3:b3:a7:90:c7:f7:82:25:f5:3e:90:19:
         df:52:27:a5:22:cf:ab:35:57:19:43:71:3e:da:45:bd:55:6f:
         e2:2a:80:be:6a:98:10:0d:ca:54:16:dc:18:05:fe:35:e4:f7:
         31:9f:6e:da:6e:da:85:73:02:29:c1:cd:95:c8:5d:08:1f:a9:
         e7:ec:ec:49:c8:39:6f:9f:c6:80:41:e0:32:cf:49:bf:9b:90:
         bd:40:0b:37:b3:b0:bf:27:35:8f:bf:89:29:f7:ac:ed:6f:e7:
         40:58:e2:5b:83:95:0b:d4:24:d8:35:02:3f:d0:e2:a5:d5:c2:
         e2:79:b9:70:f0:b2:d5:40:60:85:75:f6:a0:f0:00:0e:81:2a:
         37:40:21:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODUwQUQxMTAvBgNVBAUTKDBGNkI0NzIwQjBBMzU3MjJEODVGMzQ0NkVGRDQ3NDBC
RDM0MTgzNEUwHhcNMjYwOTE5MDQzOTIwWhcNMjYwOTI2MDQzOTIwWjAYMRYwFAYD
VQQDEw02YWFlMTFmOS04MWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8k8sGC4dRVR/00jMIYAyRjfe7SfQXnKQg4WUeVMHVWjF9OVcyWBCUZGz+Df/
iHsuThqym5CKsramWAxT+GknK254tobk65uITuT/X0Q0bxKWyjpXBA619X5Wa5kr
r6Dq9IAWwwj54t7KTdBjv0mzneCESeN4f5HXYpKZe06W/729wK9hEMOmT+aaf1+o
QTnCxAJxZDOia3f6gFLKK3J9XcvUwyb5uoQYyceSj2qZra5+X9/bXKRTxX8d2PQZ
vNYYI30gOkbhm8DqLJUcYm0qcxRryfH2dnWRn5Wvj9lR03kVtzqFbfL1QMnxlo5v
S4n6L5WsXSJnKmj9QfahLJFA0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEz27F7x
pXaN9rOij+lrWXNCTKssMB8GA1UdIwQYMBaAFA9rRyCwo1ci2F80Ru/UdAvTQYNO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTBBRC82MEVCRTFBQzY0
MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9EMnRISUxDalZ5TFlYelJHNzlSMEM5TkJn
MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0QydEhJTENqVnlMWVh6Ukc3OVIwQzlOQmcwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTBBRC82MEVCRTFBQzY0MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9EMnRISUxDalZ5
TFlYelJHNzlSMEM5TkJnMDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAeo03I4lvMHG8TlPMhXcAHeUE3A6evFVYnuSPLfOHppxX5TRihVcjLp8jU3U
fggachtLqrjNeNJNqTFlUE73I/uhZ929THdBJMltnhUvfJru9/I8N/LVZ75vv3Mm
KfD1ZFM6VDkot+5a9n3j4ZS3ZIOEw7OnkMf3giX1PpAZ31InpSLPqzVXGUNxPtpF
vVVv4iqAvmqYEA3KVBbcGAX+NeT3MZ9u2m7ahXMCKcHNlchdCB+p5+zsScg5b5/G
gEHgMs9Jv5uQvUALN7Owvyc1j7+JKfes7W/nQFjiW4OVC9Qk2DUCP9DipdXC4nm5
cPCy1UBghXX2oPAADoEqN0AhQQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:30:09 2026 by rpki-client