Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft
File:                     IMAbBSwVg-NofN7L_BPplBAa1C8.mft (raw, json)
Hash identifier:          5oQajxFhllAwWyweLIZFzfhAjWBBS21oMEbPdtF6bcM=
Subject key identifier:   80:F5:3D:E2:AE:8F:18:13:7A:5B:4F:D1:6F:A7:13:9A:C8:23:94:34
Authority key identifier: 20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F
Certificate issuer:       /CN=A919794D/serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F
Certificate serial:       0285
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft
Manifest number:          0280
Signing time:             Mon 21 Sep 2026 01:54:54 +0000
Manifest this update:     Mon 21 Sep 2026 01:54:54 +0000
Manifest next update:     Mon 28 Sep 2026 01:54:54 +0000
Files and hashes:         1: IMAbBSwVg-NofN7L_BPplBAa1C8.crl (hash: SATflKraZTRxpby0Z7sFdb9zxLNJ4HsAT8Hdy9grqHw=)
                          2: CFC4BC00EB2911ED882B8A32C4F9AE02.roa (hash: VW+45wcSvSFoip2OKN04CIY/5Rv2n17vde5Y8vwKCik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl
                          rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:54:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645 (0x285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919794D, serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F
        Validity
            Not Before: Sep 21 01:54:54 2026 GMT
            Not After : Sep 28 01:54:54 2026 GMT
        Subject: CN=6ab08e6e-23d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:eb:be:3a:6f:9d:1b:e8:bf:12:13:63:28:aa:
                    c6:d0:51:34:46:08:84:bc:7f:fe:8a:cb:d5:a4:f1:
                    68:c2:47:b1:e0:3b:f6:37:bb:b0:36:a0:0c:e8:db:
                    90:f8:5e:e1:28:71:b4:bb:9b:69:8c:ec:5b:f5:52:
                    be:fb:05:e7:f3:57:cf:04:dc:2c:cb:84:0c:36:ec:
                    c0:05:da:d0:df:32:d9:ca:5f:ed:9e:a5:c2:1f:fc:
                    2f:fc:96:16:dc:46:29:8b:12:e0:17:60:7c:6d:9b:
                    ec:27:19:73:af:14:69:d0:1d:fb:11:3b:d3:96:ba:
                    81:c2:ec:02:62:8f:21:28:76:1d:24:0d:38:49:99:
                    b5:66:76:de:5b:c5:91:23:d2:f2:25:60:52:da:49:
                    b7:7e:4e:10:48:3e:39:48:df:b4:8b:e8:d3:b3:56:
                    5f:28:b1:9f:61:fe:3d:46:d7:c9:56:3f:f9:52:08:
                    b6:37:a5:73:71:9f:43:d8:54:99:13:0e:33:00:b3:
                    a5:db:d0:1f:90:f4:39:9a:b1:e3:27:df:68:b8:94:
                    61:96:f4:2c:27:ee:85:79:54:42:b1:c0:20:80:59:
                    8d:5b:2d:df:67:30:9f:56:16:aa:2d:a9:8a:cb:3e:
                    8a:cc:cb:36:b8:37:31:48:ce:00:07:aa:57:e8:a5:
                    ef:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F5:3D:E2:AE:8F:18:13:7A:5B:4F:D1:6F:A7:13:9A:C8:23:94:34
            X509v3 Authority Key Identifier:
                keyid:20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:bd:09:75:80:d9:5c:77:1f:21:b6:a2:93:a4:60:65:cf:a0:
         dd:41:6d:67:f3:ee:86:e3:70:4f:67:fc:2e:d9:54:4c:b8:a3:
         b3:0a:a9:ed:ab:89:58:8b:b4:5b:77:00:99:42:1d:73:9d:13:
         63:3e:88:6c:02:08:cb:08:8d:16:6e:62:d5:97:71:49:f1:63:
         4a:6c:9d:77:39:8a:e2:50:79:78:91:67:dd:1c:84:8e:85:ff:
         97:f5:80:07:85:ba:66:9c:85:ff:16:af:05:4e:5d:82:40:65:
         2e:7d:d1:ae:61:1f:50:55:ce:b8:90:02:ed:94:f2:72:91:66:
         b2:ac:2d:ef:fd:c6:e4:8b:62:c6:a0:60:0a:61:23:e3:97:4c:
         4b:39:1b:bb:ee:7c:df:6d:55:e5:fc:09:6d:b3:66:09:71:38:
         6a:2f:a8:c8:0b:9d:dc:6d:61:2d:22:aa:0a:ed:44:47:c9:5e:
         94:36:e0:bd:d2:d4:71:3b:a2:b5:e4:ad:c4:18:b5:da:88:00:
         61:0c:09:66:3b:20:38:c1:35:60:2d:e6:ef:3e:de:32:2f:a4:
         8c:f9:fd:9f:75:17:ac:83:67:53:a6:ef:cc:3d:64:df:4e:26:
         0b:f4:b9:01:cc:cf:7d:6e:d5:4f:54:12:c8:31:fe:da:5b:69:
         06:02:37:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:33:40 2026 by rpki-client