Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
File:                     vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft (raw, json)
Hash identifier:          2JHOznyPVqmJd2/Kw/E6me82UH1xAQA9BwX+Su6gXd8=
Subject key identifier:   A6:FE:41:2F:75:B9:B4:8C:E1:B1:98:B5:AF:1D:80:1B:66:59:7E:4F
Authority key identifier: BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97
Certificate issuer:       /CN=A918E1C4/serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
Certificate serial:       A4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
Manifest number:          9E
Signing time:             Mon 21 Sep 2026 07:24:36 +0000
Manifest this update:     Mon 21 Sep 2026 07:24:35 +0000
Manifest next update:     Mon 28 Sep 2026 07:24:35 +0000
Files and hashes:         1: vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl (hash: lIMrUxgEgNaWVl8VuVPgNlTNECOVzVDpw6ncNRRwmpI=)
                          2: F30027F69C9011F1893698345711F970.roa (hash: D+j1sM6eCYVgN9wCNM0rcIbl0hAUaUHWwy+gzdAQe8o=)
                          3: A32543BA9BEB11F190BD09186411F970.roa (hash: 9WaHx+LUDXVMm3BI2K4FD2A1kDHdB0yt3Gwu4DhlqgU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl
                          rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:24:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E1C4, serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
        Validity
            Not Before: Sep 21 07:24:35 2026 GMT
            Not After : Sep 28 07:24:35 2026 GMT
        Subject: CN=6ab0dbb4-4b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ef:36:85:f0:2e:93:dd:f5:ff:ff:24:a4:8f:
                    4c:29:bb:ca:9b:2d:6f:0b:f6:6d:fd:a2:c4:04:32:
                    39:1e:62:f1:4b:d7:62:9a:43:5b:d1:53:77:f9:85:
                    9e:d5:81:5a:ce:b3:bb:3f:3f:59:6a:73:68:3f:61:
                    95:5d:a9:38:22:84:75:36:a3:2b:eb:43:d3:f6:48:
                    14:a2:6a:3d:f1:52:a1:b3:41:ad:53:19:14:aa:4a:
                    e9:a5:f9:6b:c9:1d:27:e2:60:8f:7d:81:b7:60:31:
                    1e:4c:de:08:d7:10:6b:8c:21:b4:98:a4:55:01:10:
                    20:e3:ed:56:76:95:b6:05:a2:49:42:ef:d6:af:40:
                    d0:6a:ab:02:59:8d:e3:9e:6b:2b:42:e9:63:c7:23:
                    8f:14:de:41:f2:23:c5:c6:1c:bf:b1:6a:73:84:cc:
                    d3:0d:f0:b6:f2:b6:29:7e:39:b3:d8:13:35:73:89:
                    9d:90:57:69:1f:86:9c:c3:83:c7:b9:ce:f8:ca:83:
                    d9:9a:a0:ea:c4:36:f0:47:19:35:f2:53:37:18:ad:
                    bf:cd:bd:ce:96:1d:15:36:b3:88:f5:11:fc:47:05:
                    57:6d:68:3c:b4:7b:98:a6:f5:dc:8a:ce:45:1d:c0:
                    5a:0d:38:54:92:1f:91:bb:81:58:10:6f:17:27:22:
                    ae:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FE:41:2F:75:B9:B4:8C:E1:B1:98:B5:AF:1D:80:1B:66:59:7E:4F
            X509v3 Authority Key Identifier:
                keyid:BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:f6:92:8a:64:05:ea:c9:83:1d:6f:3b:7f:3c:6d:a7:cd:b1:
         70:e9:0f:8d:be:62:25:d1:6b:f4:9d:fd:6b:92:f1:ab:5e:75:
         51:75:51:ef:8d:96:3c:f7:7a:09:1f:f5:3e:4f:7f:f5:40:00:
         1a:6a:1f:60:7c:a6:fb:b2:10:56:a7:45:64:84:06:65:1a:9c:
         fe:68:8a:f9:96:59:9d:9c:dc:a5:6a:9b:2a:38:2c:c3:f7:f3:
         2c:76:c6:3e:ed:98:2e:fe:0b:80:0d:bd:df:57:5e:d9:7f:e9:
         88:25:d1:63:73:27:e8:df:11:48:44:65:ad:5e:f5:78:c3:af:
         11:94:93:7a:50:98:8f:67:a8:4d:ba:3d:ea:12:63:8e:41:82:
         33:87:c8:95:66:3f:e8:67:27:68:f2:ed:1c:8a:ea:46:fe:64:
         e7:79:78:b1:b0:d2:cf:a5:a0:51:d4:d7:29:34:1b:4e:90:fa:
         87:36:c2:f7:81:f6:1c:a3:c1:50:2f:4b:e8:31:39:ce:2e:d6:
         54:eb:c7:99:c3:46:7e:0a:da:79:aa:51:c3:ca:b5:27:96:9c:
         c6:28:71:83:c4:34:71:d3:5f:b2:cb:a4:96:99:9e:1f:d7:d6:
         9e:32:b1:d7:94:0a:a8:8a:b8:a6:18:51:48:db:ca:c1:88:a7:
         eb:1d:0e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:19:20 2026 by rpki-client