Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft
File:                     dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft (raw, json)
Hash identifier:          x41uyBjlgPx/JltyUxt8xqdBN7gfYSZL/rrpYmhfxHw=
Subject key identifier:   62:8F:C7:65:9F:CD:67:10:B7:12:61:D7:57:2F:77:82:29:F5:DF:F2
Authority key identifier: 74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84
Certificate issuer:       /CN=A91AD705/serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284
Certificate serial:       03A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft
Manifest number:          039E
Signing time:             Mon 21 Sep 2026 00:28:16 +0000
Manifest this update:     Mon 21 Sep 2026 00:28:15 +0000
Manifest next update:     Mon 28 Sep 2026 00:28:15 +0000
Files and hashes:         1: dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl (hash: DiaBD8Ba/zxzLRheS22JKzIauDSW7QWkt+QUIG5erHk=)
                          2: D628208AFB7611EC96592431C4F9AE02.roa (hash: TtrTIWnfFIl37m5rTP9ZdJpu1u1f7Kc1NjF4hf7dx38=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl
                          rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 933 (0x3a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD705, serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284
        Validity
            Not Before: Sep 21 00:28:15 2026 GMT
            Not After : Sep 28 00:28:15 2026 GMT
        Subject: CN=6ab07a1f-29fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1d:8f:ab:54:d6:6b:7d:1e:23:ad:5d:f5:16:
                    5c:4f:09:88:65:fd:e5:30:b8:f4:fd:ac:3a:14:ea:
                    02:69:b5:44:ba:a5:e8:17:35:02:e4:90:28:f3:87:
                    1c:62:e3:e3:2b:d1:61:c6:54:cd:9d:c4:db:ca:7b:
                    9d:91:5d:d6:9c:24:df:da:40:e9:b6:fc:0f:32:21:
                    8d:00:37:49:67:53:4b:43:b9:47:c2:24:ff:05:ee:
                    10:cd:d1:ea:d4:1f:4e:16:a5:f9:ff:03:cf:50:04:
                    44:d0:5c:51:4d:02:16:b4:f9:3d:99:db:62:9a:e4:
                    ec:65:ca:58:ff:c5:32:6f:80:03:66:9d:92:bb:31:
                    06:ac:30:cb:5a:01:91:a7:86:96:f3:75:db:81:df:
                    73:3f:cc:fe:3e:1b:d7:be:ec:4b:d9:9e:5f:a0:08:
                    25:3e:03:1d:3b:6b:b7:a1:df:65:79:26:4b:2b:fa:
                    81:45:bc:86:9a:87:f8:26:85:32:5d:9b:dc:11:b7:
                    41:fa:ce:a0:39:2e:ce:d8:13:30:cf:c0:c3:ae:66:
                    73:c2:2a:c7:26:da:9c:8c:90:bb:67:77:a2:95:0d:
                    af:86:0b:8e:a1:bb:18:df:db:dd:f1:a9:53:aa:c2:
                    8a:f9:ce:eb:63:c9:57:2e:e7:60:0c:f3:0e:f4:ba:
                    5e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8F:C7:65:9F:CD:67:10:B7:12:61:D7:57:2F:77:82:29:F5:DF:F2
            X509v3 Authority Key Identifier:
                keyid:74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:b1:10:f3:bd:54:36:8e:6a:0b:c5:46:d9:17:7b:cb:4c:05:
         50:aa:89:da:02:b0:2f:b9:3e:a3:49:cd:c8:66:af:29:eb:97:
         82:30:2f:e2:a6:bc:56:4c:1e:83:bb:c5:3e:69:e1:e7:62:6f:
         e4:f4:32:77:6e:9a:97:28:37:f2:92:cd:c5:d4:3a:b8:47:10:
         00:4f:19:a5:1a:00:d0:d4:62:18:94:f2:72:b2:e0:24:0f:9c:
         a7:f2:d5:a3:78:b6:54:13:99:40:40:e7:df:f0:a0:85:f8:92:
         5f:e6:19:90:4c:9b:2b:18:17:ba:54:20:21:96:db:09:a2:3b:
         a8:3c:2d:66:0f:3a:05:23:20:ea:18:45:69:11:ed:a0:b4:29:
         b6:bf:94:38:ee:3c:67:7d:a3:f1:72:ac:f0:0f:1f:d7:af:f6:
         82:16:b6:2c:44:d5:ab:f4:3b:be:4f:9a:d0:2c:3c:01:f3:2f:
         49:34:09:70:cc:a9:e8:53:1f:41:55:f3:13:f0:43:e5:d2:7c:
         f8:2c:87:97:c5:dc:e1:1b:95:9d:39:1a:6c:91:eb:b6:4e:a1:
         7e:58:61:b7:a7:68:48:83:6e:90:f3:e3:f3:2b:e7:f7:6e:0c:
         ad:3b:ca:d3:76:2f:ed:c8:6c:cc:3c:11:56:9c:80:6e:74:37:
         16:b5:2c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:13:11 2026 by rpki-client