Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
File:                     MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft (raw, json)
Hash identifier:          MD17nEEQ/u6n0vDXRK+FOGYrNACr0fM115/mYp7NLpA=
Subject key identifier:   AA:D6:C5:BF:0F:5D:8E:AC:7A:C8:05:98:26:9D:1E:40:DA:24:24:4B
Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
Certificate issuer:       /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Certificate serial:       02CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
Manifest number:          02AE
Signing time:             Mon 21 Sep 2026 01:48:34 +0000
Manifest this update:     Mon 21 Sep 2026 01:48:33 +0000
Manifest next update:     Mon 28 Sep 2026 01:48:33 +0000
Files and hashes:         1: MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl (hash: 5UpDJtv3JCPpSlMYJRh4US7KHKFQBPjtPaq4puDGhZM=)
                          2: E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa (hash: eeLCdmHI4DVoBIKt5fe2w5/hqqdnpeD4LytUQmmILxA=)
                          3: ABC69EAEEE3C11F0B9A6920D4D6F56BC.roa (hash: QbYcHC8sEaaqzKI4aZ+szj1qFExhkAsjpip5wt7ACvM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
                          rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 717 (0x2cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEBAA, serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
        Validity
            Not Before: Sep 21 01:48:33 2026 GMT
            Not After : Sep 28 01:48:33 2026 GMT
        Subject: CN=6ab08cf1-42ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:30:4f:07:61:20:f7:26:6d:34:1e:09:8e:bf:
                    65:da:41:b9:b1:55:07:97:e2:35:f0:03:eb:d4:f6:
                    56:67:98:bc:63:df:c6:60:3e:ed:f7:ae:a5:59:46:
                    1e:14:97:b4:18:85:32:cd:cf:c0:22:98:0a:3f:42:
                    17:ee:27:e6:b2:fd:7a:b2:d7:34:ea:db:f4:0a:34:
                    b9:f5:3b:e6:ef:7a:27:09:df:7c:67:e7:4a:fb:61:
                    dc:fe:cd:67:8a:df:7c:c7:c7:f0:59:55:ca:16:94:
                    9a:31:de:68:58:c7:e1:bf:b6:13:0b:f8:ec:a5:99:
                    b8:c3:b2:11:75:7b:11:b4:24:4d:75:93:4f:53:78:
                    86:42:4e:51:15:b1:ce:96:37:05:30:67:e3:24:7a:
                    6c:0b:f4:ba:70:bb:39:57:81:c8:94:07:5c:57:6f:
                    9d:fd:e6:6b:c5:75:00:5c:c5:a4:27:4c:33:c0:9e:
                    0d:81:24:e0:66:2b:61:4a:c3:61:b1:c3:96:dd:13:
                    a5:98:66:01:f3:2a:ef:6e:d3:06:e3:da:f5:47:dc:
                    fc:4d:1f:c9:50:57:96:4d:71:45:f4:6b:4e:fe:34:
                    65:d5:dd:f7:c7:8c:c2:99:8f:1d:ff:46:48:17:a4:
                    de:21:98:17:fd:2a:60:47:78:a6:43:7c:85:21:c5:
                    1d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D6:C5:BF:0F:5D:8E:AC:7A:C8:05:98:26:9D:1E:40:DA:24:24:4B
            X509v3 Authority Key Identifier:
                keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ac:77:35:f3:db:d7:44:d1:48:95:e3:2c:f6:41:a3:bd:e7:
         52:3a:29:ab:a5:fa:d0:dc:4f:db:ab:e8:b0:fd:e2:a5:7f:0e:
         9c:0b:54:3b:16:3e:b2:08:c4:12:9c:c3:4a:9f:a6:ee:15:eb:
         07:f8:41:25:69:b7:e3:4c:00:ec:e2:71:ab:d7:e0:ad:de:7b:
         a4:72:c5:29:a2:ee:89:00:2d:bf:42:01:b5:2d:ae:bc:21:df:
         e4:dd:c1:8a:a3:dc:97:a5:6f:45:91:75:b0:db:bc:05:f9:5c:
         56:05:9e:f3:0d:e5:34:89:3c:c9:c2:b6:45:81:52:6c:c8:c7:
         a0:ea:89:72:54:b9:60:52:a1:f6:ff:33:a0:63:9c:26:ba:34:
         46:92:76:d0:e0:95:84:86:71:20:f1:56:83:a6:b9:55:e3:82:
         c3:76:06:26:2b:07:e6:7d:f8:f3:5c:73:ec:bf:4f:8e:19:1d:
         7d:ed:35:6a:33:4e:d5:12:a9:57:4b:f3:61:45:1a:69:68:f6:
         6a:79:4e:e1:04:68:d7:db:e3:13:4b:71:21:89:24:f1:47:ee:
         9b:a0:53:05:ba:b3:5c:04:57:0b:ce:e1:56:46:98:d6:93:64:
         20:93:b9:67:55:21:ab:e5:6d:a5:37:0a:b1:25:28:54:4d:26:
         23:30:d4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:38:25 2026 by rpki-client