Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft
File:                     CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft (raw, json)
Hash identifier:          xTqd4QzaQXHFaCzuQgxW3aHZh8hjP60Ivw+LC1KvpLw=
Subject key identifier:   FC:EC:04:37:95:37:BA:95:78:03:09:C7:A3:CC:1D:D9:D6:9B:52:84
Authority key identifier: 09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E
Certificate issuer:       /CN=A91CE533/serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E
Certificate serial:       1A4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft
Manifest number:          1A3D
Signing time:             Sat 26 Sep 2026 16:22:55 +0000
Manifest this update:     Sat 26 Sep 2026 16:22:55 +0000
Manifest next update:     Sat 03 Oct 2026 16:22:55 +0000
Files and hashes:         1: CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl (hash: toTCdElNa53HI01UELKKOCmfzsxJJZYGSDVBXVBt1DU=)
                          2: 290732FC79A211E79F34D81FC4F9AE02.roa (hash: DCBXdQ3TUOdDXYDH2IWIye/rRhJnHFBuWi5K22qghWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl
                          rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 16:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6732 (0x1a4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE533, serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E
        Validity
            Not Before: Sep 26 16:22:55 2026 GMT
            Not After : Oct  3 16:22:55 2026 GMT
        Subject: CN=6ab7f15f-d6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:70:40:45:16:0a:79:50:65:4e:7c:44:17:
                    7f:68:b9:c4:69:36:c2:2a:d7:6b:54:9c:82:7c:e6:
                    aa:e0:33:87:ac:4b:84:15:e1:5f:65:ee:f4:9f:9e:
                    91:3f:90:cb:38:a6:94:13:40:e3:9a:f6:a5:ae:83:
                    a2:58:66:5b:28:e6:79:f6:9c:c4:a7:1d:a4:b5:16:
                    15:e8:2f:4b:65:d2:65:24:5f:c0:f7:26:90:88:a9:
                    8f:6e:19:3f:4c:96:5e:ab:4b:62:53:b7:30:95:31:
                    b2:ad:66:26:c1:b9:79:3b:28:dd:75:f6:5d:c6:81:
                    61:a7:ed:9a:17:a0:79:66:66:2d:20:e2:fb:bb:be:
                    4d:fd:d6:87:a0:f9:4b:dc:84:a2:00:e4:16:83:71:
                    60:84:10:fd:1e:9a:be:80:e0:f0:64:d0:ee:a2:ce:
                    41:70:3c:d1:66:5d:3c:2e:71:b9:8f:fc:93:f0:31:
                    5e:d1:03:e9:8b:90:59:fb:84:a1:dc:a7:27:ee:dd:
                    af:a2:7f:d0:72:d3:c4:5d:83:e2:d6:96:01:51:f4:
                    98:7f:ae:78:ee:81:df:c7:64:54:c3:d8:76:20:5d:
                    04:23:e6:69:39:a7:37:b0:83:68:40:b9:83:90:a3:
                    98:f7:68:51:eb:e4:60:3a:fb:12:72:61:c5:23:2d:
                    cd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EC:04:37:95:37:BA:95:78:03:09:C7:A3:CC:1D:D9:D6:9B:52:84
            X509v3 Authority Key Identifier:
                keyid:09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:fd:c4:8b:12:21:f4:23:2e:45:1d:94:ba:ae:6d:91:a3:94:
         c9:20:9f:96:b2:1c:d3:b6:76:97:93:d3:54:11:7f:fa:09:b0:
         41:37:ed:76:b8:af:74:28:a7:5e:15:80:f9:77:66:ee:65:fd:
         4e:c1:8e:99:d5:63:6c:f4:e1:07:d4:3d:48:20:56:ca:c5:27:
         99:b8:df:6e:12:00:63:ce:84:d6:76:65:7f:21:bb:dd:6a:e6:
         4d:72:c4:b1:52:ea:a6:28:c4:f9:1d:df:39:f8:d1:df:a6:c4:
         ef:d6:8d:62:6d:39:ec:54:83:28:83:63:3d:f6:25:01:da:b5:
         d6:66:20:c6:72:d7:87:e5:67:ca:00:98:f0:b1:66:6a:72:34:
         93:b1:e7:ce:39:09:ba:89:88:2c:dc:b9:f1:5e:c7:66:93:ac:
         e6:d5:6d:36:f2:ef:64:f2:0e:81:a1:87:2f:32:85:2e:ca:1d:
         0f:08:2c:85:b1:37:3d:bf:6d:1f:a1:34:06:d9:aa:ae:a8:63:
         34:43:7b:a1:35:a1:be:53:1d:fb:30:43:54:69:53:7a:55:89:
         73:c3:24:07:71:e1:ea:a8:86:97:fb:40:3b:cb:7d:de:04:4a:
         3b:c2:2f:fc:f8:49:18:1d:1b:9e:37:ac:06:1a:e3:3a:ee:3e:
         4b:89:d0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:15:02 2026 by rpki-client