Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
File:                     2DkrDZFbmsH00jv5hBlxQG-2GsY.mft (raw, json)
Hash identifier:          rMF+YFiMkyZhLcuewjOKtlvELgtVz0N3tRcElUtRkfE=
Subject key identifier:   4A:93:9E:55:D0:2A:AE:1B:8A:4F:CC:45:01:AB:39:01:72:C1:FF:2C
Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6
Certificate issuer:       /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
Certificate serial:       0AA9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
Manifest number:          0A81
Signing time:             Tue 22 Sep 2026 19:28:44 +0000
Manifest this update:     Tue 22 Sep 2026 19:28:43 +0000
Manifest next update:     Tue 29 Sep 2026 19:28:43 +0000
Files and hashes:         1: 2DkrDZFbmsH00jv5hBlxQG-2GsY.crl (hash: /h1mokWQAZyEoqv5G0TJcuCTABXmHGUswdHsMLrvS7M=)
                          2: 92B2469A90D411F09BC0A564C4F9AE02.roa (hash: BkbQUsKXIX52vzOm2/vANASw4HXX+/0xUFcUl5+7lq8=)
                          3: 5AEF27A42ECD11F1AE5BE4D1C4833773.roa (hash: pJrOfhLTXJrzDjh1PttmKiJG9g18KY+/mTy+A26VFpE=)
                          4: 7AAA81CC97A211F1B4CCDFD05411F970.roa (hash: ehD/IdSO6obCGGX3OBULfP/M0Zb6tSmU7+GXTV+zo0I=)
                          5: 41622F82F82E11F0BC7D9928396F56BC.roa (hash: BOsXgTgRuoFK1Abqu9y4jRVX+t+6P8y+y8+yHdVIkmA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl
                          rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2729 (0xaa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
        Validity
            Not Before: Sep 22 19:28:43 2026 GMT
            Not After : Sep 29 19:28:43 2026 GMT
        Subject: CN=6ab2d6ec-e0d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f1:ce:f2:7e:f2:d8:fc:cf:98:da:7a:1d:bb:
                    f1:9f:75:10:06:1e:ab:69:d5:51:1b:e3:d8:fb:da:
                    6d:ff:68:de:16:7d:43:b5:ec:07:d5:95:a6:16:ba:
                    6f:a9:f2:68:75:d9:97:5e:70:87:af:87:d6:b7:a3:
                    35:6a:ef:78:64:15:a4:6f:08:dd:38:43:91:f6:12:
                    bc:9f:4f:0f:1c:51:4c:e8:79:f4:38:5b:8d:f6:f9:
                    b8:52:7a:48:4c:5f:dc:82:0c:30:33:a3:56:25:0a:
                    46:3b:51:b1:8e:81:8e:75:74:37:bd:b7:61:f4:2f:
                    76:13:22:e4:0e:98:00:8d:50:75:e6:db:20:cc:51:
                    73:66:a5:f4:89:de:4f:62:46:8a:4f:1a:a3:3e:6c:
                    9e:89:63:57:06:49:e0:7b:ce:e8:65:8f:e2:3f:e9:
                    eb:e7:e1:43:4a:26:ab:bf:5c:c3:00:68:10:cf:b9:
                    8e:a6:bf:db:30:74:a9:e1:71:3f:b6:68:c8:0a:72:
                    0f:40:cc:72:de:5b:d7:01:f0:59:9d:17:1d:c7:51:
                    6c:12:2c:02:87:cb:25:bc:42:44:d0:f1:6e:5f:77:
                    99:84:b1:2d:c8:50:d8:ee:94:d8:bb:f8:9b:d7:85:
                    68:0d:dc:ed:d0:a4:19:60:92:8a:be:69:52:f2:4f:
                    8f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:93:9E:55:D0:2A:AE:1B:8A:4F:CC:45:01:AB:39:01:72:C1:FF:2C
            X509v3 Authority Key Identifier:
                keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:42:6a:62:ec:9b:74:d6:b3:01:4b:e7:82:20:84:f1:5d:b9:
         0d:30:16:ed:06:f4:5f:88:61:b7:69:59:98:13:7c:3b:25:4d:
         d8:03:a1:24:56:e3:c9:33:14:60:4f:ad:13:cd:d4:c3:9b:a1:
         2e:be:da:b8:ec:12:66:fe:b5:47:72:8d:43:df:b0:d0:3a:14:
         2b:a5:f0:72:dc:0e:88:17:81:fb:22:22:2a:9d:29:80:34:06:
         28:fe:94:80:65:ed:24:dc:f2:85:3e:1a:a0:60:1c:cd:46:68:
         e5:2a:1a:c6:da:5f:9c:34:29:74:36:cd:83:73:a9:fb:f8:18:
         51:d5:c2:a8:67:d7:2f:33:a5:18:21:d7:9a:ce:8b:57:64:44:
         5a:f0:ea:3a:c6:46:42:b3:d5:bc:a1:0a:e8:31:da:7d:e3:f8:
         48:de:bd:46:1d:71:f4:b6:b5:68:cb:16:d1:d5:4d:2c:e1:88:
         4c:56:1b:a9:45:d8:be:6c:4e:cd:f6:38:c7:b1:dd:41:bd:4e:
         ac:05:eb:79:cc:c2:c5:89:39:b5:4c:57:a0:76:7f:7e:15:f7:
         ff:9b:80:68:9a:c9:c5:c0:cf:69:7c:ec:cd:0b:c2:95:c8:aa:
         35:8b:70:6e:a6:5d:99:f6:66:66:27:9c:78:d7:c8:06:3e:d3:
         22:20:23:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTZERTUxMTAvBgNVBAUTKEQ4MzkyQjBEOTE1QjlBQzFGNEQyM0JGOTg0MTk3MTQw
NkZCNjFBQzYwHhcNMjYwOTIyMTkyODQzWhcNMjYwOTI5MTkyODQzWjAYMRYwFAYD
VQQDEw02YWIyZDZlYy1lMGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApfHO8n7y2PzPmNp6Hbvxn3UQBh6radVRG+PY+9pt/2jeFn1DtewH1ZWmFrpv
qfJoddmXXnCHr4fWt6M1au94ZBWkbwjdOEOR9hK8n08PHFFM6Hn0OFuN9vm4UnpI
TF/cggwwM6NWJQpGO1GxjoGOdXQ3vbdh9C92EyLkDpgAjVB15tsgzFFzZqX0id5P
YkaKTxqjPmyeiWNXBknge87oZY/iP+nr5+FDSiarv1zDAGgQz7mOpr/bMHSp4XE/
tmjICnIPQMxy3lvXAfBZnRcdx1FsEiwCh8slvEJE0PFuX3eZhLEtyFDY7pTYu/ib
14VoDdzt0KQZYJKKvmlS8k+P7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEqTnlXQ
Kq4bik/MRQGrOQFywf8sMB8GA1UdIwQYMBaAFNg5Kw2RW5rB9NI7+YQZcUBvthrG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRFNS83MkM1QTlDQzk0
MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1zSDAwanY1aEJseFFHLTJH
c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJEa3JEWkZibXNIMDBqdjVoQmx4UUctMkdzWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NkRFNS83MkM1QTlDQzk0MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1z
SDAwanY1aEJseFFHLTJHc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUkJqYuybdNazAUvngiCE8V25DTAW7Qb0X4hht2lZmBN8OyVN2AOhJFbjyTMU
YE+tE83Uw5uhLr7auOwSZv61R3KNQ9+w0DoUK6XwctwOiBeB+yIiKp0pgDQGKP6U
gGXtJNzyhT4aoGAczUZo5SoaxtpfnDQpdDbNg3Op+/gYUdXCqGfXLzOlGCHXms6L
V2REWvDqOsZGQrPVvKEK6DHafeP4SN69Rh1x9La1aMsW0dVNLOGITFYbqUXYvmxO
zfY4x7HdQb1OrAXreczCxYk5tUxXoHZ/fhX3/5uAaJrJxcDPaXzszQvClciqNYtw
bqZdmfZmZieceNfIBj7TIiAjag==
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:58:44 2026 by rpki-client