Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft
File:                     61aZQ1LrAeQOYMeKQ7lXrikO90U.mft (raw, json)
Hash identifier:          Xox0X7hKFhm4SYfsPntorcv/mjq19Pl/5UIkBmedF9s=
Subject key identifier:   AF:19:46:25:7C:41:D9:C3:B1:1E:29:11:35:FC:D0:A9:62:75:54:77
Authority key identifier: EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45
Certificate issuer:       /CN=A918CDEC/serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745
Certificate serial:       06DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft
Manifest number:          06D0
Signing time:             Sun 20 Sep 2026 22:11:05 +0000
Manifest this update:     Sun 20 Sep 2026 22:11:05 +0000
Manifest next update:     Sun 27 Sep 2026 22:11:05 +0000
Files and hashes:         1: 61aZQ1LrAeQOYMeKQ7lXrikO90U.crl (hash: R4IOomsf9IfoQ5DhGn8qIAb+3BZO98TCQiWd0wUAPKc=)
                          2: 70253888478111EEAF9EB62EC4F9AE02.roa (hash: ElSqHATQah1AYmHedSqCrSlQMzAoiWYC3nFcEAi0qso=)
                          3: 7EC2F352BAB711EB8648EE28C4F9AE02.roa (hash: DJIDF3gVsj0NLJmqdA6q7kn8knSL/aei6xR0vVpba4c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl
                          rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1757 (0x6dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CDEC, serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745
        Validity
            Not Before: Sep 20 22:11:05 2026 GMT
            Not After : Sep 27 22:11:05 2026 GMT
        Subject: CN=6ab059f9-3f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ec:ac:2e:6a:14:00:95:52:66:29:8f:88:c8:
                    38:a6:32:34:bb:c8:60:1b:62:df:98:24:83:93:c8:
                    17:6f:95:d0:34:27:a4:ce:b8:ac:b0:b3:43:44:cd:
                    52:b2:52:d2:a2:57:94:48:46:93:35:0e:ea:bc:76:
                    69:66:96:ff:03:b5:dc:dd:1e:c8:04:41:89:bc:a6:
                    f8:e3:e7:62:16:80:92:39:7f:df:58:36:9a:36:79:
                    f7:72:fa:b1:7e:8a:83:8a:39:29:48:b0:47:62:54:
                    0d:3d:0f:ea:34:f5:06:6f:dd:59:93:35:28:07:df:
                    f2:d7:a0:1f:9c:72:83:bb:8b:45:9a:dc:9e:45:b9:
                    59:29:be:f7:7b:31:16:f7:81:fe:01:1f:f3:58:1b:
                    33:54:7f:f8:89:1d:34:9b:a8:7b:99:ad:b6:6f:9a:
                    4e:00:e4:1e:e8:03:77:8d:8e:58:45:be:94:2d:f4:
                    a8:d5:aa:44:d7:77:6b:bb:63:a6:ae:da:c4:f3:57:
                    7b:80:a9:86:6f:1d:c4:c4:dc:a4:01:52:9d:fc:f9:
                    c4:48:9b:98:e8:5b:b3:62:61:60:12:e8:fa:f3:65:
                    48:8c:dc:aa:62:66:13:d6:8c:49:3a:04:9b:c8:d0:
                    d7:ee:6f:d8:3d:4a:0a:cb:0d:cd:40:35:19:45:4e:
                    1b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:19:46:25:7C:41:D9:C3:B1:1E:29:11:35:FC:D0:A9:62:75:54:77
            X509v3 Authority Key Identifier:
                keyid:EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:13:f7:f5:a8:7f:8f:be:7a:cd:95:2f:bb:ed:db:02:2c:b6:
         9a:f7:8b:69:6d:98:83:8d:4d:3a:6c:ba:29:60:f3:df:1f:06:
         8f:90:53:9b:85:56:fc:2f:60:05:ac:e4:de:62:b3:7c:0a:7f:
         52:f3:7a:1a:11:b6:66:67:80:2a:af:14:0d:2c:f4:e5:61:d2:
         ad:1d:12:ac:36:7f:2d:a8:16:8d:4c:21:fd:78:3f:d1:9f:68:
         08:0f:f9:aa:27:88:31:d8:18:9f:6f:8d:02:c7:cc:58:92:c0:
         cc:09:ef:00:2a:33:04:ff:6d:75:b0:3d:84:1a:60:b2:3d:34:
         a0:eb:b3:2d:93:86:9d:1a:63:35:b8:74:f4:ff:88:b3:ef:6b:
         d4:e8:8b:60:f4:3b:52:26:bc:3b:33:e0:83:4b:6c:d6:44:02:
         5e:f1:fd:95:71:27:7b:ac:50:bb:3a:54:d4:9c:57:f8:94:b9:
         c0:c6:8b:9c:00:6d:eb:65:af:15:ae:7c:84:70:5d:cc:28:85:
         61:f8:1a:9c:3c:0a:6f:7b:d3:6c:31:d8:eb:22:78:11:a4:1f:
         b3:36:60:70:6c:93:06:7b:32:ef:92:5e:95:d9:d8:22:2c:8a:
         6c:99:18:2d:18:00:dd:43:0c:85:2f:e7:70:44:e2:54:5f:37:
         84:64:94:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:36:38 2026 by rpki-client