Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft
File:                     C-qOMYe9SY0l8kldarDunkU0p_E.mft (raw, json)
Hash identifier:          YJcOXEkfbiXLrpfFiKPcIRc2v8hKwXj22sDWVHsIfRg=
Subject key identifier:   EE:72:F7:7E:04:3B:D0:8D:0F:AC:8F:05:8B:77:79:DD:3B:43:29:E0
Authority key identifier: 0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1
Certificate issuer:       /CN=A918C64D/serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1
Certificate serial:       08DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft
Manifest number:          08D5
Signing time:             Tue 22 Sep 2026 20:12:37 +0000
Manifest this update:     Tue 22 Sep 2026 20:12:36 +0000
Manifest next update:     Tue 29 Sep 2026 20:12:36 +0000
Files and hashes:         1: C-qOMYe9SY0l8kldarDunkU0p_E.crl (hash: 24VHFxwJeWhU4Tpjput8GWLMau+SQbWjzkzqBJjEjM0=)
                          2: B7362AE0EDC811EAAFF8BD46C4F9AE02.roa (hash: 6a6Rqm3Ogc9dWzUizIVhfa5zp9t3Zi/+f1eh86x8ovE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl
                          rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2270 (0x8de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C64D, serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1
        Validity
            Not Before: Sep 22 20:12:36 2026 GMT
            Not After : Sep 29 20:12:36 2026 GMT
        Subject: CN=6ab2e134-f9b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ec:cc:ef:64:61:ad:a9:90:40:05:60:4f:3f:
                    93:ad:9c:19:4b:3e:5a:ab:a6:d0:eb:10:ac:22:24:
                    87:44:de:1c:c3:4c:9b:61:66:78:28:92:10:5a:c0:
                    97:20:69:25:16:a7:ed:20:49:26:e6:af:de:67:ca:
                    f6:a2:a8:8f:93:27:7c:a8:2c:20:d9:34:66:72:86:
                    17:b2:cb:eb:34:86:b1:4a:09:ab:f5:af:5f:5c:92:
                    ea:ad:64:89:30:7c:28:2d:dc:60:95:1f:20:79:00:
                    7c:03:07:41:d7:8c:86:97:29:28:57:9d:a5:1d:44:
                    65:85:c4:7b:dd:2e:53:80:61:bd:fd:f8:af:e5:1b:
                    46:94:bf:f7:50:ab:be:78:83:30:3b:42:cc:80:a5:
                    49:6b:ab:dd:36:bb:9f:e3:75:72:7e:3b:11:03:6c:
                    2d:df:fb:0b:1e:63:45:c3:1a:2b:c0:28:c0:18:11:
                    eb:bd:90:93:e8:60:c1:53:af:92:e5:64:5e:41:0d:
                    50:35:c7:f8:ae:43:aa:ac:a8:ab:0b:10:d7:fc:02:
                    32:bc:5b:3c:4c:a5:af:83:14:db:0f:95:4a:a9:21:
                    3c:84:d3:b4:d4:cf:cd:f5:9f:d8:76:3b:cc:7d:01:
                    e4:f4:d0:db:c6:86:11:3d:8f:4c:d8:a0:17:72:22:
                    ba:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:72:F7:7E:04:3B:D0:8D:0F:AC:8F:05:8B:77:79:DD:3B:43:29:E0
            X509v3 Authority Key Identifier:
                keyid:0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c1:06:b5:f0:57:fd:e4:7f:be:2d:e8:63:17:20:70:54:d4:
         11:f8:ef:c8:49:3f:5a:35:0e:db:27:91:78:7a:48:8d:02:bd:
         b8:78:5c:c5:9d:84:83:42:92:55:19:c7:82:d5:f8:bc:9b:94:
         40:3d:c4:da:d8:6c:28:27:51:1d:4f:6a:7a:69:35:85:26:32:
         e3:03:b2:ae:0a:eb:99:87:5c:07:7b:2c:8e:17:b5:d6:fe:6b:
         1c:a2:ee:87:33:37:72:34:35:b1:15:cf:3a:22:04:43:59:84:
         43:89:84:de:87:2c:01:00:2b:7a:d8:4a:56:f6:de:32:cf:88:
         e0:31:50:53:f4:37:63:09:01:d5:73:ac:3b:02:17:c6:1f:02:
         d0:01:03:b1:c3:f5:0e:b5:ff:b7:8f:d1:f9:e9:83:4b:93:43:
         74:f4:49:98:fc:63:4c:81:b7:63:2e:47:e3:ff:ea:16:c2:ee:
         57:df:3c:9e:19:b3:48:93:d4:57:7e:32:60:8b:47:74:0f:f3:
         f6:e4:b9:d1:b2:52:52:70:c3:cc:37:a3:09:4c:82:b4:3b:15:
         c9:9c:ad:cc:a8:7c:7c:2e:27:ee:da:68:d9:95:42:9f:2b:11:
         76:2f:fc:81:21:53:6e:04:54:26:3e:66:24:ed:5f:2f:4c:50:
         11:72:ef:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:22:19 2026 by rpki-client