Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft
File:                     vXIUPbev9hPoLqKQtMnCv_qIvCY.mft (raw, json)
Hash identifier:          k631sYFlE/0LXlZAPogmEEpiq9T1Cj1uyfE8wYFsyf0=
Subject key identifier:   A3:BD:97:08:E6:42:60:79:C8:22:39:CD:A6:51:E2:E5:97:30:05:BB
Authority key identifier: BD:72:14:3D:B7:AF:F6:13:E8:2E:A2:90:B4:C9:C2:BF:FA:88:BC:26
Certificate issuer:       /CN=A918C287/serialNumber=BD72143DB7AFF613E82EA290B4C9C2BFFA88BC26
Certificate serial:       C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft
Manifest number:          9E
Signing time:             Mon 21 Sep 2026 08:00:13 +0000
Manifest this update:     Mon 21 Sep 2026 08:00:13 +0000
Manifest next update:     Mon 28 Sep 2026 08:00:13 +0000
Files and hashes:         1: vXIUPbev9hPoLqKQtMnCv_qIvCY.crl (hash: 3SrpViDjhkBr+KtgNOHjRXLAJUnWmmpCjLDyQhQlL0c=)
                          2: lZjASyab0c7RfvwUJDPxDC8JwgE.asa (hash: d5Q9Pgb4Ku9F5+/eRo1lWERyAtnuHKz175HDGv/aVNc=)
                          3: OYmENbQI99sfPFKWIvIamyjSh68.asa (hash: IBzo1q2zkiYyD79AM+NzePip/JPKHh9UNCtDgeKOIIo=)
                          4: 7B144F6CB57F11F1BC37C19F6711F970.roa (hash: kD/+SO70UYNXN3Kh7SDbkC5M5pbtQmhEj05NDxrZJIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.crl
                          rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C287, serialNumber=BD72143DB7AFF613E82EA290B4C9C2BFFA88BC26
        Validity
            Not Before: Sep 21 08:00:13 2026 GMT
            Not After : Sep 28 08:00:13 2026 GMT
        Subject: CN=6ab0e40d-c535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:30:96:07:c7:01:a4:c2:43:55:6e:3a:0d:fa:
                    bf:a2:9f:e1:7d:d2:f4:31:fc:b8:f4:c2:b6:da:16:
                    3e:e3:11:9f:0d:5c:96:5c:c1:9c:99:ef:b4:60:ee:
                    73:34:3a:12:99:be:92:04:48:eb:a0:05:ee:3c:8a:
                    16:0b:89:9f:30:20:92:f3:59:f3:f2:7e:a9:57:72:
                    dc:4c:42:d0:08:21:f4:6c:78:e9:63:42:37:0f:24:
                    7b:c3:fa:a3:9b:de:2b:0c:52:90:4d:d1:21:8e:69:
                    e9:42:8c:7c:48:e4:60:08:1d:fb:2b:c5:85:aa:47:
                    62:a8:4b:0f:b3:a7:ca:34:9b:20:64:cd:3e:ba:de:
                    a1:31:36:72:57:59:84:be:b7:24:04:b7:3b:5f:1b:
                    02:23:fc:77:8a:0f:4c:11:75:9e:73:69:94:9c:61:
                    bb:df:a5:2c:c3:5a:d1:be:7a:b3:ec:10:ef:2c:47:
                    54:1f:3f:e1:0a:06:71:c3:6d:3d:9f:7b:63:c1:44:
                    99:3f:f7:98:07:86:a7:81:62:49:eb:b3:32:24:e4:
                    1c:df:90:eb:fb:c7:e1:62:37:d7:87:50:52:4a:78:
                    5e:08:30:41:fc:4a:86:9d:5e:8e:85:1d:f1:3d:0a:
                    95:8c:d4:01:d1:48:e7:a0:b5:df:c0:d5:60:df:59:
                    a8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:BD:97:08:E6:42:60:79:C8:22:39:CD:A6:51:E2:E5:97:30:05:BB
            X509v3 Authority Key Identifier:
                keyid:BD:72:14:3D:B7:AF:F6:13:E8:2E:A2:90:B4:C9:C2:BF:FA:88:BC:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:da:1a:e1:de:bf:bd:2c:1f:94:28:f7:00:69:d4:7c:52:62:
         ad:48:96:6e:bf:91:bb:94:3e:09:9d:83:0a:f2:76:c2:ff:26:
         06:21:0d:96:b0:63:93:39:b4:9b:68:58:a0:bb:c1:c4:c4:1a:
         c4:25:3f:43:88:c8:76:ca:79:76:67:c1:7d:06:fa:b9:c3:02:
         70:82:d2:ea:f2:7e:0b:7e:51:79:d3:ca:40:e0:36:b6:28:de:
         6c:23:2c:64:f7:69:3a:01:fc:ea:cc:52:08:8c:a8:11:e7:81:
         65:62:e7:3d:3c:4e:04:78:45:6d:fc:d0:bd:04:a6:db:0c:b5:
         75:be:2a:d3:72:a5:16:02:46:2b:bf:1d:98:25:2c:4b:23:29:
         3d:36:77:2c:95:81:92:54:cc:67:c7:93:19:26:a3:bc:c7:b3:
         56:62:72:3d:3a:0d:44:3d:a3:5a:05:12:02:16:1b:a1:67:19:
         43:10:05:b2:9b:3d:43:17:dc:d3:8f:8d:fe:c8:65:58:af:31:
         2f:c3:e6:a1:96:01:11:8d:3b:f1:b3:91:c5:a1:b8:57:e9:08:
         e9:5a:dd:6c:74:f3:62:81:5e:7b:45:22:cc:1b:28:87:c7:61:
         b1:d0:8a:a0:28:f3:a1:27:d9:56:b2:46:7f:a9:99:04:42:c4:
         ba:a9:8e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:00:11 2026 by rpki-client