Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
File:                     iXCkAMzM8BCTPDMMN2Ch7F204K0.mft (raw, json)
Hash identifier:          4ba0mYlWfWIRMxS3cUxrNfdJxgFJ4Jl7StSPw83U5Mk=
Subject key identifier:   34:D9:B7:EE:6F:04:85:31:67:14:8A:7A:09:5A:CB:F4:BF:29:BE:CC
Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD
Certificate issuer:       /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD
Certificate serial:       063D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
Manifest number:          062D
Signing time:             Sun 20 Sep 2026 22:37:24 +0000
Manifest this update:     Sun 20 Sep 2026 22:37:23 +0000
Manifest next update:     Sun 27 Sep 2026 22:37:23 +0000
Files and hashes:         1: iXCkAMzM8BCTPDMMN2Ch7F204K0.crl (hash: H56hPS0DzzXtCpIKFWAbRLXCfjrXGyx6VW4pdr025cE=)
                          2: C3CE90CEF99A11EB936CCA1EC4F9AE02.roa (hash: Wnvaq8Ww3Bk3d2vemeHqavsME8uCxGuZGCjNCIrVG9I=)
                          3: AD1469EC7A3911ECB5639D41C4F9AE02.roa (hash: 96gxdKQyCmuf4UCiLnFZLLSpfBwM2iUrQWCesjIYcd0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl
                          rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:37:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1597 (0x63d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C92DC, serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD
        Validity
            Not Before: Sep 20 22:37:23 2026 GMT
            Not After : Sep 27 22:37:23 2026 GMT
        Subject: CN=6ab06024-50e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:44:44:08:18:ba:bd:bc:77:24:58:92:78:73:
                    b9:e0:10:00:57:5d:3c:10:4a:72:29:3f:74:19:7f:
                    df:23:27:e0:8a:61:18:3f:10:a9:94:ee:32:c6:d4:
                    5a:5e:ad:6d:cd:c9:14:c3:2a:21:47:fc:c2:66:0c:
                    94:8e:12:03:b4:41:c3:af:4b:00:cd:b5:0b:b7:eb:
                    85:3a:80:f0:0c:6a:76:e0:66:b3:67:bf:87:37:c2:
                    6a:dc:91:71:81:68:60:e9:7e:7e:5c:b6:d4:00:1b:
                    e5:5a:e1:6a:31:2c:74:9d:7e:25:dc:af:cd:b6:79:
                    59:01:d3:67:01:7c:d4:e0:a6:0f:70:75:d2:b8:d1:
                    83:51:88:31:10:de:0e:85:a9:f6:17:8b:26:ed:a9:
                    c8:39:18:29:9d:93:bd:c2:50:7f:4c:fb:6b:5e:40:
                    9f:73:af:b3:5f:d2:26:b4:76:58:98:1f:13:80:e1:
                    73:7a:9d:27:c4:8d:de:b0:4b:a5:d3:2f:9e:39:b5:
                    4a:40:37:7e:63:3a:67:83:4f:7c:50:08:ee:6a:1d:
                    0a:59:62:9b:5d:0f:6b:94:11:04:88:48:5c:05:03:
                    1c:5c:0f:49:6b:ab:17:26:4f:30:59:b6:0d:9c:44:
                    67:50:aa:06:c7:d0:d4:12:3f:21:92:52:be:3b:30:
                    a3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D9:B7:EE:6F:04:85:31:67:14:8A:7A:09:5A:CB:F4:BF:29:BE:CC
            X509v3 Authority Key Identifier:
                keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:20:8d:f4:12:f7:b1:24:34:3a:68:dc:55:14:38:08:dd:b7:
         d8:1b:e0:be:30:b4:ff:2b:5c:ce:24:61:7a:07:35:e7:6e:0d:
         a6:19:51:65:25:e0:78:59:9a:ec:83:6b:8b:40:f5:99:15:0f:
         8b:f7:bd:1c:c7:8f:d0:f8:7f:bf:53:33:a0:46:61:8e:4b:f2:
         9b:0f:ce:8e:4e:b7:fc:3f:bc:1c:f6:57:4d:46:ba:0b:b0:be:
         78:19:25:1c:e2:35:49:22:15:51:cd:c2:ad:42:f3:58:7a:3e:
         77:de:3d:86:d2:2b:3f:cb:47:f5:7e:77:e0:26:5e:d6:0b:6a:
         fe:94:1d:27:15:8a:c3:18:9c:ed:00:45:b6:ae:43:e0:8e:08:
         c8:34:65:fa:aa:68:3e:e5:f6:84:5c:ef:62:04:21:99:df:37:
         c3:70:00:79:98:30:a6:3c:67:14:2d:06:b1:9e:2e:ad:14:42:
         dc:ae:5c:a9:7a:5a:15:06:dc:17:e6:22:08:74:7c:bb:02:cb:
         70:f3:58:fa:e7:e2:86:d5:ba:15:10:9c:92:19:fe:ea:b1:78:
         f6:37:0a:36:f7:38:dd:7a:11:7d:df:35:09:c8:56:14:5a:03:
         cd:c2:2d:6e:f9:ff:36:65:11:95:e0:58:9d:e1:9c:a9:6c:8f:
         0a:9d:e2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:41:42 2026 by rpki-client