Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft
File:                     T-09NyGnirIEhs2vNKOuaRfYfL4.mft (raw, json)
Hash identifier:          g6MWe3/phriXcDzMx6EqZ3Q75o503XrnI3tVJO/XyW0=
Subject key identifier:   B5:EB:9E:57:9F:C7:AA:72:13:07:5C:BC:CF:63:C6:28:F4:C0:CD:50
Authority key identifier: 4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE
Certificate issuer:       /CN=A91D8F57/serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE
Certificate serial:       0D77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft
Manifest number:          0D60
Signing time:             Sun 20 Sep 2026 17:58:34 +0000
Manifest this update:     Sun 20 Sep 2026 17:58:33 +0000
Manifest next update:     Sun 27 Sep 2026 17:58:33 +0000
Files and hashes:         1: T-09NyGnirIEhs2vNKOuaRfYfL4.crl (hash: RVO4Bnnv3gvZBHhCh4kXH0Guc4+eSiFfGY/OipwDJ64=)
                          2: 21997AB0FEBC11E9B0463650C4F9AE02.roa (hash: JwOjYA/Jw9dwtNja6OhiUESlnckDLqCGhIODnzf58NE=)
                          3: 2WoULcyaOwLKeaIJth7CVjpxQLg.asa (hash: SL6OwRPsWHRB4bKs+npcCF5BsUIB6xDOB2b8KBHe94c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl
                          rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 17:58:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3447 (0xd77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8F57, serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE
        Validity
            Not Before: Sep 20 17:58:33 2026 GMT
            Not After : Sep 27 17:58:33 2026 GMT
        Subject: CN=6ab01eca-d983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7e:e4:79:d5:2d:31:de:72:7d:be:c8:85:5d:
                    dd:08:24:71:1f:d1:eb:2f:1b:e2:19:5b:50:de:8b:
                    d6:ae:64:be:d4:d3:89:06:15:e4:fa:a6:05:3e:17:
                    91:a1:82:33:10:88:e7:91:b6:c7:61:85:b7:08:e9:
                    46:71:72:43:c7:71:6d:0c:23:3c:fe:ac:1c:16:86:
                    b3:10:57:1e:1a:e4:17:26:89:c7:3e:d8:78:91:f5:
                    06:53:4e:44:ec:4a:18:15:62:f8:ad:a4:28:37:69:
                    dc:71:0a:c6:dd:33:79:d5:70:b3:ec:74:c8:5d:47:
                    75:bb:c7:0c:a4:1c:4f:7d:8e:4b:cb:9f:4c:6c:08:
                    18:42:69:2a:61:d8:36:eb:5e:39:32:a4:61:37:40:
                    52:b3:e6:7c:e8:4f:ad:bb:83:65:ca:27:ef:3e:1d:
                    5c:51:f3:36:c1:0a:cc:d4:ad:19:ea:3f:db:c3:21:
                    59:ed:42:23:29:61:ea:b6:d2:08:ff:56:17:46:b0:
                    81:4b:71:23:62:26:be:05:aa:a2:67:fe:2d:3f:73:
                    da:7f:a7:ad:bd:66:1b:c2:b4:73:1f:18:7e:01:ca:
                    eb:0f:91:c5:2e:6e:1a:1f:cb:a1:4f:3c:f2:19:0b:
                    f8:04:bd:1c:02:97:9c:9a:9c:1d:a5:27:63:86:a9:
                    3e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EB:9E:57:9F:C7:AA:72:13:07:5C:BC:CF:63:C6:28:F4:C0:CD:50
            X509v3 Authority Key Identifier:
                keyid:4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:67:58:2c:50:1e:b3:54:b7:25:22:00:7f:51:a2:c0:88:dc:
         45:de:5d:d6:af:58:bc:f6:52:7f:51:0b:ce:a7:ae:c8:06:6c:
         c2:cb:5f:6e:24:78:87:d2:82:34:c2:b2:e0:b4:59:47:45:c7:
         89:0e:61:77:c0:3f:8b:e6:9e:a4:73:2e:72:1f:83:a1:13:13:
         94:53:5b:5a:76:49:bc:b7:b5:02:68:f9:81:2e:a4:ad:54:42:
         43:83:9c:ca:02:80:b8:8e:a9:f0:8d:19:61:c6:6e:9f:a4:26:
         4b:88:d0:fb:e1:7c:43:6d:d8:79:a0:da:cb:c0:e8:13:b0:30:
         f3:c8:1f:52:f6:7d:11:5e:ce:f0:dc:de:2c:32:8e:bd:06:a7:
         76:84:b1:0b:88:c1:5f:86:cb:63:86:8b:49:32:f0:07:d6:81:
         ee:ef:56:19:eb:9d:ec:37:d8:19:ee:68:c1:ed:0e:eb:eb:68:
         8d:05:ed:80:7e:8f:3e:35:ae:5e:9b:21:a4:c5:7d:56:2e:dc:
         9d:3a:49:be:85:c0:af:ea:47:ce:e1:94:fe:98:f2:d7:16:67:
         e4:06:f9:b3:cb:2e:a5:b2:75:2f:89:5f:e0:3c:29:1d:90:57:
         d5:25:b8:ce:4a:94:b0:8d:c3:4b:1b:62:1e:99:90:c8:dd:e9:
         76:5f:5e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:36:35 2026 by rpki-client