Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
File:                     A0a2NPJj9jaEI52232S7us33-KQ.mft (raw, json)
Hash identifier:          OA6JfPAT6zpgnG577Gjs8iRwgWaqKT+n6/ytfNimdIk=
Subject key identifier:   97:2A:53:93:0F:48:28:5E:E9:30:8C:EE:22:AB:C6:E2:04:4B:A9:8F
Authority key identifier: 03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4
Certificate issuer:       /CN=A91D7156/serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4
Certificate serial:       127A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
Manifest number:          1020
Signing time:             Sun 20 Sep 2026 17:52:31 +0000
Manifest this update:     Sun 20 Sep 2026 17:52:31 +0000
Manifest next update:     Sun 27 Sep 2026 17:52:31 +0000
Files and hashes:         1: A0a2NPJj9jaEI52232S7us33-KQ.crl (hash: gXovKHfdWUE3TtGiX3E2AYqwCc4sYncpqzRkVlly5UU=)
                          2: A25B6E909E0311F18E1FD92A4A11F970.roa (hash: 0qfS4Tulhh74VpatYXS3ztYz0ycVKBZwgb1B/JbsnRg=)
                          3: BD60B6F059A211F183AF6F31B8833773.roa (hash: cNwv63/9s+kMtXt+Cr4yAjM1fI/LlZbgaRJaSG3g5nA=)
                          4: 26DA1E16247411EA8E1A1178C4F9AE02.roa (hash: kccLJAAJUftI3LLIsTKo7BiUv/BhOLEvY3/TqmL54Ss=)
                          5: 55D1A87064CC11F18E187B1B6847A888.roa (hash: 7Z2NciEgokUCo5EnpCBiXza/5v3JJ7UnsmlRE5tDajQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 17:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4730 (0x127a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7156, serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4
        Validity
            Not Before: Sep 20 17:52:31 2026 GMT
            Not After : Sep 27 17:52:31 2026 GMT
        Subject: CN=6ab01d5f-a061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a4:c6:55:85:5b:6c:5e:0f:e2:4b:c3:ef:56:
                    9c:0b:01:b6:24:3f:b7:1a:87:85:06:f9:18:5b:f6:
                    bd:42:3e:36:36:62:7b:e2:fa:60:43:69:e4:e8:19:
                    0a:26:31:49:92:4e:ce:ec:a1:32:29:96:04:af:03:
                    f6:fc:c0:b1:c4:d9:f7:27:07:05:4c:55:84:d1:71:
                    38:98:cd:30:65:e7:a5:57:b3:2c:a4:65:5d:3d:69:
                    6b:45:de:e6:ba:9a:0f:16:92:6c:97:a2:e3:a4:9c:
                    59:9d:6f:22:82:aa:a7:74:bf:51:a5:a5:a0:0f:cc:
                    23:0f:f8:3b:e1:09:c8:94:5a:5c:a7:02:06:08:16:
                    c0:81:9d:7b:97:5c:d7:e6:55:36:ff:b4:d7:88:c7:
                    cd:e1:10:f3:33:7f:d1:b7:6e:eb:b2:91:5c:69:04:
                    37:30:6c:f7:fa:89:e0:2a:c2:8c:71:cf:b4:8b:d7:
                    c9:15:bf:95:72:c3:2e:64:b0:21:2a:4e:29:44:c2:
                    05:52:06:d9:12:6a:bc:5d:90:e1:c4:4e:04:e8:c9:
                    eb:fc:c7:1c:27:07:24:cc:72:4a:f8:56:0a:89:bb:
                    22:22:60:03:a0:e6:e8:59:1f:18:41:fd:37:66:5a:
                    30:e5:a2:ae:12:74:ac:f3:5a:b4:94:2c:dc:cb:a5:
                    86:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2A:53:93:0F:48:28:5E:E9:30:8C:EE:22:AB:C6:E2:04:4B:A9:8F
            X509v3 Authority Key Identifier:
                keyid:03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d8:1f:d8:46:2f:71:0c:da:87:5d:9b:2a:0b:b5:af:7a:86:
         c0:75:e2:9c:d9:a1:f7:bf:63:81:af:43:c2:42:b8:1d:6c:ea:
         d7:95:82:5a:e9:d1:83:37:35:08:8d:64:3e:b4:7f:5a:ce:9e:
         b9:6b:35:7f:a9:cc:ed:2c:be:a2:09:00:43:d0:66:f3:e8:d9:
         dd:0d:b4:c4:d5:c1:c2:5a:68:20:fb:0b:65:30:ac:e2:69:53:
         f5:5e:c9:e6:24:2c:e1:7b:7f:36:94:a1:60:d9:39:69:27:86:
         70:44:73:50:85:0b:06:bc:91:9f:7e:01:fd:98:c5:14:b2:a4:
         ae:8b:2f:7c:95:e7:dc:2a:03:92:0e:5c:29:01:91:ff:7f:1c:
         54:87:db:5d:6b:fa:70:b4:4c:8b:52:f1:e7:ec:a6:70:ea:8f:
         53:aa:fd:15:39:15:0e:19:11:3a:75:c2:0e:56:bd:a7:68:b3:
         a3:fd:4c:e8:bb:12:c8:03:21:d4:8d:04:8c:65:34:02:bd:1a:
         af:dd:c9:c0:27:c4:ce:06:79:7f:15:ae:01:a1:41:a1:d8:b6:
         38:ec:75:b7:a9:67:2d:a6:41:ac:d6:b5:7c:aa:e9:ac:f1:55:
         c2:67:c3:ba:be:82:c6:4e:6d:e3:79:4b:d0:30:39:da:5c:dd:
         b6:13:93:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:39:05 2026 by rpki-client