Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
File:                     Ps7q_orHtLE44oRfeGEtk9XFMMY.mft (raw, json)
Hash identifier:          DKoljEQmbFuinL1xO4WC0I/71IJM/DjZfFJsOWOhTsc=
Subject key identifier:   0D:91:1C:C6:BE:5D:FF:83:28:03:07:4E:B2:7A:87:22:01:29:1A:7F
Authority key identifier: 3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6
Certificate issuer:       /CN=A9186537/serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6
Certificate serial:       0B3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
Manifest number:          0B2F
Signing time:             Thu 24 Sep 2026 19:14:14 +0000
Manifest this update:     Thu 24 Sep 2026 19:14:13 +0000
Manifest next update:     Thu 01 Oct 2026 19:14:13 +0000
Files and hashes:         1: Ps7q_orHtLE44oRfeGEtk9XFMMY.crl (hash: PWvj/N0Q80Mj5YcyLSWZANfuXNEmT3rJj5EGjF4XZns=)
                          2: C50E0D60B31F11EF9044054FC4F9AE02.roa (hash: dcrlUq/LfqIpPMteaZR03KFsAdJIOdisOuX79mITHI0=)
                          3: 74637BD8AB5911F0A8E57D4AC4F9AE02.roa (hash: th+/tvMvg+ad5+YQ/zoIufkXoQMlFYiSs+rYqVFCmXs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl
                          rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 19:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2879 (0xb3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186537, serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6
        Validity
            Not Before: Sep 24 19:14:13 2026 GMT
            Not After : Oct  1 19:14:13 2026 GMT
        Subject: CN=6ab57686-75a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b7:0b:8c:2a:37:74:3c:a6:d8:9d:e9:a9:21:
                    63:9e:ba:c8:78:02:eb:a5:50:8a:d3:ba:03:48:16:
                    3d:07:36:00:2e:9a:a4:8f:cd:91:5c:16:11:f6:89:
                    9b:9f:2c:47:f0:b9:07:82:15:21:9b:7e:2d:b4:7b:
                    db:8c:b5:d4:51:16:e6:23:32:33:d7:02:5c:21:cf:
                    9c:71:43:ba:7d:50:5a:d3:aa:11:b6:c8:89:e1:c0:
                    6b:59:fe:90:0a:b2:bc:03:12:e2:9c:b5:f2:d2:20:
                    11:5d:6b:63:4d:5e:19:29:d2:8b:fd:39:7f:05:08:
                    e0:dd:99:86:6c:fe:46:96:63:a5:95:6e:5b:4c:c2:
                    6f:b5:42:07:b4:c7:0d:c1:f4:4a:4c:91:1f:a9:a8:
                    56:fb:a9:85:01:56:4c:34:98:01:fa:52:08:6a:c6:
                    90:38:06:ad:a4:4f:c3:69:cd:00:51:0e:6a:67:94:
                    34:eb:60:9f:22:8b:c1:2a:b3:5c:67:66:f3:a9:44:
                    a5:5b:ce:1e:77:f7:70:17:7d:6c:d5:4d:9a:4d:bb:
                    cc:8c:bb:9d:a8:b2:6d:c0:be:34:58:46:e9:8a:e7:
                    94:36:53:d1:70:e6:93:2d:af:ee:23:9c:b4:fb:dd:
                    c5:5e:29:0a:34:4b:bc:94:79:9e:e0:ba:69:e6:6c:
                    32:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:91:1C:C6:BE:5D:FF:83:28:03:07:4E:B2:7A:87:22:01:29:1A:7F
            X509v3 Authority Key Identifier:
                keyid:3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:88:0b:fa:93:0d:ba:a2:0b:ac:11:70:26:19:eb:00:34:03:
         d6:b7:fd:24:af:d7:14:e3:63:3d:f8:d4:08:72:53:8d:c8:be:
         9d:58:bb:83:c8:fc:68:44:98:6d:3b:a9:ab:aa:a6:c9:d1:80:
         06:42:e0:0e:74:b8:20:7d:95:03:ae:eb:ec:18:a1:a3:f0:8c:
         ac:2f:c6:56:2a:11:67:ef:8c:52:3e:04:02:69:b1:43:b9:3a:
         d7:23:b2:2a:a2:3e:3e:64:6b:22:97:ee:10:ee:b8:25:5f:5a:
         64:4a:b0:be:2a:a5:ee:f0:f8:53:6a:d5:63:ed:1c:7d:f0:55:
         f0:29:32:60:1e:1f:91:21:38:f7:cf:63:a5:9a:db:7e:31:2e:
         cf:47:55:25:00:9f:0d:51:69:d1:29:5f:01:8c:b1:bb:61:73:
         69:11:2b:9b:fe:17:54:db:ef:3a:0f:de:69:e7:e9:aa:ec:a2:
         c2:01:6e:ef:e4:c4:a6:33:a4:fe:e2:6f:0d:bc:9a:1b:9f:bc:
         3e:97:b7:09:8c:66:55:88:b0:15:d6:f9:64:e9:86:e1:34:00:
         2b:0c:e1:3b:49:c5:77:a7:21:4f:e4:a4:77:bf:f4:55:48:a9:
         4f:60:f3:7a:03:e4:a9:e6:00:45:b4:f1:fc:2c:42:df:33:2e:
         bc:27:46:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:34:03 2026 by rpki-client