Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft
File:                     0S_1veXU0upxiMsALH_wFtyZTXI.mft (raw, json)
Hash identifier:          N8Kl1nTdJG0KXEmtuhmDEm2Tp76gGHXxyAHHCY627VQ=
Subject key identifier:   FD:EC:E7:85:7D:74:3D:CC:C9:0C:21:8B:9E:61:2A:9F:CD:7C:82:05
Authority key identifier: D1:2F:F5:BD:E5:D4:D2:EA:71:88:CB:00:2C:7F:F0:16:DC:99:4D:72
Certificate issuer:       /CN=A91EA623/serialNumber=D12FF5BDE5D4D2EA7188CB002C7FF016DC994D72
Certificate serial:       0615
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft
Manifest number:          060D
Signing time:             Sun 20 Sep 2026 22:44:28 +0000
Manifest this update:     Sun 20 Sep 2026 22:44:28 +0000
Manifest next update:     Sun 27 Sep 2026 22:44:28 +0000
Files and hashes:         1: 0S_1veXU0upxiMsALH_wFtyZTXI.crl (hash: F+Th+xztBeg4COpfIURAhvDsMjRYCPZCHjI8/YdVOQI=)
                          2: 9CD333C6B92B11F09402D810C4F9AE02.roa (hash: g/iViSJomlNp1cYO1eJotO/CO79RIUjeoIEUf9uvmn8=)
                          3: C6212596B5FF11F0A3F6A41AC4F9AE02.roa (hash: vjcVmpY5exF0KvvFr7MQCETy6G444Gcd8QqEnM4obso=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.crl
                          rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:44:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1557 (0x615)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA623, serialNumber=D12FF5BDE5D4D2EA7188CB002C7FF016DC994D72
        Validity
            Not Before: Sep 20 22:44:28 2026 GMT
            Not After : Sep 27 22:44:28 2026 GMT
        Subject: CN=6ab061cc-fc82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:61:f3:7b:de:12:e2:36:d8:4a:69:ac:9a:71:
                    ba:04:30:a0:bb:e7:98:46:0a:1d:49:49:41:ea:ec:
                    a6:83:9d:54:39:62:11:b2:92:01:15:4d:ca:1c:8d:
                    b1:88:60:e4:fd:33:ce:2c:62:ad:d4:ea:78:b1:71:
                    79:d5:de:01:b0:7c:cc:b1:e8:bc:ef:1d:5c:97:63:
                    0c:04:e2:5b:65:e2:e4:93:fa:58:d8:60:82:ac:4a:
                    32:7a:7c:39:86:5d:a8:c2:58:51:73:b2:04:00:4c:
                    81:9e:00:42:d5:6b:7a:c1:60:cf:a7:86:f3:ff:ee:
                    af:f3:a0:16:50:f6:f6:01:97:16:61:ce:3f:b4:a3:
                    7e:e8:4c:77:3f:e0:2b:96:ad:24:9e:79:23:6e:ee:
                    ef:79:a4:db:41:f5:50:52:9c:db:21:05:45:a8:c2:
                    bf:11:06:de:39:37:8b:4e:27:82:4a:c7:e5:b6:85:
                    70:35:ab:98:36:3a:bd:22:16:f5:ed:7a:48:41:da:
                    20:79:35:f3:a2:d5:cd:03:d5:74:06:0b:8a:97:0d:
                    30:54:0d:2c:fa:3b:43:33:3e:4e:bf:97:ea:e4:76:
                    cb:e8:13:9e:4a:b3:d0:c8:23:d9:32:60:b4:c2:4c:
                    83:2d:66:0a:ed:12:dd:a8:69:77:43:2a:76:b9:c4:
                    3f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EC:E7:85:7D:74:3D:CC:C9:0C:21:8B:9E:61:2A:9F:CD:7C:82:05
            X509v3 Authority Key Identifier:
                keyid:D1:2F:F5:BD:E5:D4:D2:EA:71:88:CB:00:2C:7F:F0:16:DC:99:4D:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:9c:26:77:2c:18:a1:80:5a:44:19:73:ef:79:10:02:2b:f4:
         fb:7b:54:a0:1e:2b:c6:49:36:a0:6f:1d:4c:f5:97:fe:6c:75:
         3c:0d:0e:55:9c:c2:a5:1b:ac:38:1a:0a:43:a8:9c:3a:91:af:
         a7:67:ce:8c:5e:53:bf:17:67:43:f5:91:c8:78:69:ff:85:66:
         5a:f4:07:87:71:ff:51:56:6b:a3:d1:6c:97:7c:f6:d5:85:37:
         27:c3:5b:25:81:02:64:c8:08:7a:1c:44:9e:77:d6:c4:74:98:
         aa:ec:6b:b4:c2:a4:7b:ed:6c:b2:12:c6:7b:a5:ec:a3:66:ce:
         7f:83:16:86:de:4f:5e:7a:eb:c2:05:78:9c:31:cf:f8:39:a0:
         f7:9d:3d:6b:af:58:0b:b2:3f:bf:96:23:00:c4:f7:98:ce:2a:
         cd:1f:16:14:38:3f:5a:2e:25:1f:2e:5c:27:5f:d3:56:3f:9f:
         ec:af:ba:2a:c8:c8:94:98:fd:ee:f7:d0:d6:99:f5:8d:85:b7:
         14:54:68:fe:17:94:fb:cc:3b:cd:03:e8:62:fa:fd:5d:a4:12:
         db:6d:25:99:aa:e6:9c:40:00:b6:aa:ca:56:d5:1e:c4:6c:d5:
         26:8f:7f:45:2e:f8:76:c5:a3:8c:64:8d:0a:52:97:12:97:7c:
         31:aa:e6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:24:29 2026 by rpki-client