Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
File:                     fzUqdpVtdwL8d69g_MEp5h_b6jI.mft (raw, json)
Hash identifier:          KHJ/LHT21LUDCiTjrIVfYJ//AJw4OPykKZBXgzJZr1Q=
Subject key identifier:   BA:01:C1:90:5B:B0:5A:D1:E7:B5:C3:FE:51:1C:8B:8F:66:52:DC:9F
Authority key identifier: 7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32
Certificate issuer:       /CN=A91E15AD/serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
Certificate serial:       025F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
Manifest number:          0227
Signing time:             Wed 23 Sep 2026 02:44:53 +0000
Manifest this update:     Wed 23 Sep 2026 02:44:52 +0000
Manifest next update:     Wed 30 Sep 2026 02:44:52 +0000
Files and hashes:         1: fzUqdpVtdwL8d69g_MEp5h_b6jI.crl (hash: MUzkuGNJBSJlZJOtA/DEHi/pwv/TDMBWbLC/7pkuTHg=)
                          2: 2A26D2607E1311EEAF8FD93EC4F9AE02.roa (hash: 2pNCzrFLeuNwJ+o+omJeHhkXCESRdRl7rsiGuuIXYT0=)
                          3: 3C2B0A98259911EFB9393E2EC4F9AE02.roa (hash: 5gWMY2ABlQc7NzKLI4CrxZ0mtja8StGBiRjgg1qjDGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl
                          rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:44:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E15AD, serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
        Validity
            Not Before: Sep 23 02:44:52 2026 GMT
            Not After : Sep 30 02:44:52 2026 GMT
        Subject: CN=6ab33d25-6050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6b:dc:89:78:af:5e:30:a7:ab:33:9a:9e:b4:
                    05:75:51:96:94:bb:08:c9:02:e5:68:58:2c:a6:d1:
                    da:5a:3e:05:b7:b2:de:86:7c:f1:51:50:db:aa:a7:
                    1e:1a:d5:60:82:17:54:67:a7:b1:e1:74:10:9f:84:
                    59:89:fd:1a:32:6d:1d:9e:24:6e:ea:d2:9f:18:cc:
                    aa:f3:8e:93:c6:94:b8:a9:a7:e8:ef:7c:d1:24:1b:
                    27:19:53:61:4b:d8:38:4e:b2:c4:1d:53:88:7c:a6:
                    60:2b:c9:f7:d2:0c:f4:cb:cd:69:2f:b4:5b:b0:f1:
                    14:2e:f4:38:13:0f:2d:fc:45:0b:fa:ae:9c:09:d1:
                    68:a0:eb:c0:6a:f1:33:6d:76:1c:59:b8:d6:54:11:
                    6f:e1:ef:10:fc:e5:d6:8c:82:29:8a:e3:7a:32:03:
                    09:30:5e:66:97:b2:91:8b:a4:15:9a:d4:ef:17:b0:
                    0c:77:77:5a:ba:aa:59:15:04:7c:e1:1f:c3:2d:02:
                    f0:cb:5e:d3:8d:81:13:12:e1:5e:9e:17:a3:02:9b:
                    97:89:83:34:f6:3b:20:80:f1:6d:49:e3:18:e0:05:
                    c2:09:31:f7:51:d4:fb:40:a0:43:dc:ae:b9:b1:4f:
                    e7:d9:40:8f:30:81:10:1c:33:24:28:e5:1c:38:e9:
                    b6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:01:C1:90:5B:B0:5A:D1:E7:B5:C3:FE:51:1C:8B:8F:66:52:DC:9F
            X509v3 Authority Key Identifier:
                keyid:7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:5a:0a:c7:13:1b:89:b2:e1:37:79:cb:47:29:b3:92:57:7d:
         b6:33:5d:d5:c2:d2:24:55:31:a1:31:01:8f:5c:fd:76:41:95:
         fd:d6:2b:42:13:01:42:67:62:53:fd:8d:af:48:06:2a:05:82:
         64:94:c0:3f:03:79:c2:ca:89:2a:88:b3:64:61:9a:61:24:bf:
         83:a7:04:06:72:14:be:c1:ea:01:b6:33:4c:93:86:b0:c8:c8:
         c7:cc:27:dc:3b:f4:11:ac:55:23:71:4d:bd:fc:f9:fd:c6:a4:
         f4:57:df:b7:30:dd:cb:36:9a:f5:43:c9:c7:28:28:c9:84:08:
         01:cb:2e:03:c8:a2:43:10:e6:57:9a:65:37:0e:de:43:85:18:
         31:65:2f:c5:e8:c9:ab:6d:52:ab:b1:ee:1f:d6:ce:6a:64:c8:
         17:50:85:eb:38:29:20:ef:c4:9e:ec:18:df:45:76:3d:aa:31:
         85:0d:ea:7b:2a:02:df:01:04:e6:bc:da:e4:c2:45:dc:e0:f6:
         ad:f5:38:6f:89:7e:8e:62:b4:3d:3a:d2:77:36:f3:00:9e:26:
         62:68:66:0f:fd:9f:1b:e8:94:0e:25:56:bf:d5:67:7f:46:b4:
         e9:6f:6c:7b:d5:ef:32:8a:9e:7b:9e:18:3b:c0:d2:86:d1:81:
         54:e6:5a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:06:41 2026 by rpki-client