Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
File:                     -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json)
Hash identifier:          M685xnMbQXdATL67S3dciOM5aQPxV6cGt/V5rnUCbtA=
Subject key identifier:   A8:D8:B3:5C:22:24:56:3B:3C:42:74:BF:18:C4:61:8C:32:D8:8A:7E
Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38
Certificate issuer:       /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
Certificate serial:       01A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
Manifest number:          0182
Signing time:             Wed 23 Sep 2026 04:28:03 +0000
Manifest this update:     Wed 23 Sep 2026 04:28:02 +0000
Manifest next update:     Wed 30 Sep 2026 04:28:02 +0000
Files and hashes:         1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: CXvjh7IRlI4X2JssC7Syiq9E4W+/0pu4b4RPetjPT+A=)
                          2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: QHT2EqJHyPujaDEriJMd/9h9fPZLETh+MJuliPGlg9k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl
                          rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
        Validity
            Not Before: Sep 23 04:28:02 2026 GMT
            Not After : Sep 30 04:28:02 2026 GMT
        Subject: CN=6ab35553-c6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:57:13:2a:4a:0e:fe:2c:0f:2f:a4:e6:22:6b:
                    a5:da:f0:69:eb:76:b0:9f:f4:fc:8a:14:23:ad:95:
                    e2:a0:1a:70:19:8f:8d:7e:40:d8:63:4c:20:09:4e:
                    26:4e:9f:2f:b0:67:ef:f9:6f:cd:36:61:49:e8:15:
                    59:e5:87:bc:a8:ba:10:11:a0:01:fb:bc:30:99:de:
                    09:3d:10:47:57:89:a5:68:09:73:de:e6:c7:db:5f:
                    99:41:4d:0d:04:19:07:79:a0:4a:98:12:53:b4:21:
                    52:f7:28:77:49:00:de:7f:b9:a8:db:00:e0:7d:67:
                    c4:9a:10:75:27:4b:c4:f2:3b:85:d6:24:db:18:75:
                    4f:94:4d:5d:b2:55:15:ee:bd:18:b7:7f:35:87:dc:
                    a2:70:22:e2:fe:62:bc:fe:cd:30:0d:73:a3:f8:51:
                    b6:47:4d:25:d7:f4:59:3a:85:b3:eb:5f:7e:8c:a3:
                    69:00:fb:6b:19:93:f7:46:6a:68:31:08:28:61:12:
                    9d:2a:87:9e:8b:67:a8:58:a9:0c:04:51:d1:7e:42:
                    dc:9d:3b:1d:e0:fa:1a:14:bf:f9:30:f0:eb:fb:cb:
                    bb:ff:a2:0c:52:96:5b:ec:1d:4b:bd:00:f8:8b:08:
                    cd:7f:c3:29:c5:67:33:a2:ac:70:9b:b7:51:50:ee:
                    55:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D8:B3:5C:22:24:56:3B:3C:42:74:BF:18:C4:61:8C:32:D8:8A:7E
            X509v3 Authority Key Identifier:
                keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:32:e1:03:87:de:8b:cf:89:49:62:78:66:b6:d4:60:0e:f7:
         79:12:84:fe:2d:8d:4f:d4:0f:cb:80:6a:d8:dc:cc:b4:d6:83:
         ff:1e:af:f6:55:c1:ff:83:32:99:d2:a8:29:da:2a:f8:80:9d:
         f3:4e:84:3b:ce:90:d2:11:33:a2:54:fd:83:04:93:92:fd:13:
         5c:1d:42:56:14:aa:60:2c:ac:d0:ea:f9:31:e4:78:2a:24:e6:
         bc:1d:b9:56:a4:2d:cc:5b:4d:e1:76:9f:69:ed:5d:2b:a9:6c:
         6d:50:86:fc:67:13:d2:d0:88:98:f3:0f:5d:24:bc:97:69:c1:
         90:71:f0:a5:4e:40:e1:60:94:51:dd:01:6a:db:43:c0:4e:18:
         c4:ad:de:69:7d:17:6b:b0:4a:9d:dc:6b:7f:a1:d1:f1:dd:c8:
         09:22:ff:9c:a6:96:6f:3a:8d:d1:27:2a:de:b5:f0:29:94:98:
         2b:72:ac:a5:54:ad:8a:25:f3:e1:d9:9e:ce:b0:e5:db:63:44:
         f5:70:43:20:ff:13:ad:d9:c8:56:93:0c:54:19:fa:36:9a:bf:
         30:9f:7f:11:e9:83:71:5d:0e:2e:de:eb:f2:9b:4b:56:f3:6b:
         21:ce:bb:e3:ed:b1:0d:38:6e:6c:5b:d7:1e:83:61:40:02:04:
         76:9d:39:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:23:28 2026 by rpki-client