Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
File:                     Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft (raw, json)
Hash identifier:          YNdKmGi4djTulMcj/1irUKdi0LtO4QT7QziM4RbXPL8=
Subject key identifier:   31:73:69:7D:F4:8C:40:99:07:1A:FB:1E:59:1C:76:12:C1:5C:EE:43
Authority key identifier: 0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E
Certificate issuer:       /CN=A91F0C45/serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E
Certificate serial:       D2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
Manifest number:          CC
Signing time:             Sat 19 Sep 2026 06:54:25 +0000
Manifest this update:     Sat 19 Sep 2026 06:54:25 +0000
Manifest next update:     Sat 26 Sep 2026 06:54:25 +0000
Files and hashes:         1: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl (hash: +Ld4etd9n5BPhQ6+E2DhQB2aYnXXHFfOHssvzPEm0vk=)
                          2: 8A80B8D69A1011F0AC6E9127C4F9AE02.roa (hash: Dpuua3C8HF/TzJDPbTHc748WAwDZUWGv1xbXjI6Ri+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl
                          rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 06:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0C45, serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E
        Validity
            Not Before: Sep 19 06:54:25 2026 GMT
            Not After : Sep 26 06:54:25 2026 GMT
        Subject: CN=6aae31a1-10be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5c:c4:1e:e5:a2:ac:79:00:ab:e0:ea:06:f0:
                    55:c1:af:45:51:79:ee:4f:e4:67:9e:5f:52:0f:98:
                    e2:1a:a3:e1:16:da:b0:15:fd:f7:ba:00:59:63:fc:
                    62:7e:12:de:42:b2:3c:27:7c:92:35:0a:1d:0e:d4:
                    08:37:b4:bf:56:0f:9b:3f:2b:e2:68:93:e9:d5:e5:
                    e5:e7:ee:cd:ba:d6:a7:91:c1:51:d4:46:d0:c9:36:
                    a0:86:02:bc:eb:3e:32:06:8d:bb:bc:8c:f6:19:0d:
                    9b:03:01:fb:d0:cc:15:4b:f1:64:ce:39:e2:aa:6e:
                    16:a3:ac:a3:86:37:70:8a:f8:0d:cf:c6:cf:2d:af:
                    ac:b6:7f:69:1d:ff:09:59:1d:be:1a:d1:bb:80:cc:
                    d7:94:9b:39:19:43:6d:12:d7:2e:dc:30:88:6d:ee:
                    34:0c:dd:fa:a2:52:05:b9:74:9c:80:e5:7d:35:ab:
                    4d:91:88:9f:50:c9:5d:c1:81:d8:7f:65:32:07:a9:
                    40:9e:16:79:81:c4:5d:21:dd:e8:cc:89:ac:a1:dd:
                    98:ea:2d:82:bb:d9:d0:40:c9:77:7a:00:03:74:f5:
                    ea:97:ad:6c:c2:60:c6:06:d3:6c:f2:72:a9:ca:92:
                    9e:36:72:41:9e:e8:60:80:23:17:ef:af:3a:5a:0d:
                    9e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:73:69:7D:F4:8C:40:99:07:1A:FB:1E:59:1C:76:12:C1:5C:EE:43
            X509v3 Authority Key Identifier:
                keyid:0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:aa:5d:25:d9:74:84:d5:0c:2d:8e:f6:46:b9:73:36:8f:93:
         91:64:21:d7:f2:94:09:22:12:25:25:bc:95:20:e6:63:bd:09:
         6d:bb:5b:0c:b7:68:72:4c:dd:69:be:b3:1f:54:98:72:4c:a3:
         2e:e6:fb:76:40:91:21:24:bb:08:15:07:0c:63:50:c2:be:b2:
         65:02:da:70:a1:35:b3:6a:40:e7:d0:6b:0d:0e:02:d0:84:b2:
         95:9a:0d:df:83:1f:a2:1f:10:00:86:e9:9b:4f:6d:78:15:82:
         07:97:d0:df:97:25:8d:4b:07:f0:f8:e7:ff:3d:2d:e7:4e:4f:
         ab:be:09:4a:31:9e:8c:e0:7d:d8:0b:78:13:90:20:ef:ef:f7:
         60:27:eb:57:31:3c:a0:50:ed:5b:b1:82:3b:b5:28:a0:48:d1:
         d6:3b:1b:86:ff:00:c7:42:e0:46:94:e0:e0:cc:e4:49:8c:b8:
         7a:63:6d:af:2d:8a:b9:2c:99:c6:b5:fc:48:ea:c7:9b:ee:12:
         e2:83:ba:0e:77:43:46:42:88:2d:0b:71:57:14:26:e4:da:a1:
         3d:24:7b:f4:28:55:56:f8:1c:70:67:c8:12:2e:4c:21:18:ba:
         03:0c:3a:37:b8:d6:8e:6f:1d:92:c9:84:61:df:52:dd:f1:f6:
         b2:1e:e1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:24:11 2026 by rpki-client