Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
File:                     G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft (raw, json)
Hash identifier:          thJ7iOhm7i28oNRUty1W8f/U8ARhq/1sQakG0X+plCU=
Subject key identifier:   E4:B5:30:3F:36:4F:5D:17:03:5F:3E:47:4F:70:1D:04:8A:CD:F2:83
Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52
Certificate issuer:       /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752
Certificate serial:       126A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
Manifest number:          1236
Signing time:             Thu 24 Sep 2026 17:05:31 +0000
Manifest this update:     Thu 24 Sep 2026 17:05:31 +0000
Manifest next update:     Thu 01 Oct 2026 17:05:31 +0000
Files and hashes:         1: G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl (hash: upxfQdNJjETtlWSR54sTiwvF/qLYSNC8fRkJfW63hhI=)
                          2: Dqq1tGyC7QKsGkE_JU9qm81pIok.asa (hash: 5ReH80uBNUXzosiolo4iz2crDaXpf4sn97Erg+mH9Hk=)
                          3: FB675E140F0311E997412A4EC4F9AE02.roa (hash: WZDgNlhW0pwPMejNqxRBtwXZLqcsEeCsrEz1azRWYbQ=)
                          4: FAC7FE320F0311E997412A4EC4F9AE02.roa (hash: ltuiI8TZuMv/G/t/Ztpq7bP81fIn8XtBMrkmf8/fbBQ=)
                          5: 294F19380E5111E988F3C34BC4F9AE02.roa (hash: rpxBRilXsPyWwD0R9BLQdILf/nkG4kP94dMzRqlmlYE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl
                          rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 17:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4714 (0x126a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F67BB, serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752
        Validity
            Not Before: Sep 24 17:05:31 2026 GMT
            Not After : Oct  1 17:05:31 2026 GMT
        Subject: CN=6ab5585b-a07f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ea:06:6c:49:79:71:93:b2:3a:5a:d6:65:ce:
                    5b:ea:0e:9c:1e:ab:77:9f:7b:3b:90:a9:c6:af:94:
                    09:0b:81:3c:f1:db:f7:ae:b2:84:06:07:2d:df:61:
                    55:1d:12:af:2f:da:71:75:53:a8:57:d9:de:55:99:
                    17:e8:a4:8f:a9:0b:97:da:fb:a2:5a:4f:c5:7a:67:
                    26:6a:e0:2f:9f:64:0a:bb:e9:2f:ff:bc:64:91:50:
                    5a:56:28:83:63:37:07:15:a8:71:af:8d:3d:66:e8:
                    65:07:88:8d:3d:81:0f:43:be:07:16:d7:d1:10:6c:
                    8a:17:06:12:db:d4:53:81:ad:6a:ac:8a:65:f6:1c:
                    18:09:a1:cf:d0:77:80:10:2e:f5:a9:9e:24:f3:d1:
                    4b:02:3b:20:8f:93:75:fe:d7:58:ae:4b:f8:c5:58:
                    a4:69:29:86:4f:ea:dd:9f:bb:78:32:67:6b:a6:c0:
                    ef:89:b2:f9:6c:91:20:bb:55:97:66:ca:71:23:a1:
                    5c:80:69:05:12:5a:7b:e0:c8:ba:fd:9a:6a:6b:90:
                    a4:02:8d:b3:2d:c1:d5:17:84:a5:39:04:d0:3a:a8:
                    59:e7:d3:0c:5a:75:34:05:7d:5b:c8:a4:59:0d:53:
                    65:7c:6d:09:7b:51:bb:04:28:4b:19:4b:74:e5:e9:
                    41:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B5:30:3F:36:4F:5D:17:03:5F:3E:47:4F:70:1D:04:8A:CD:F2:83
            X509v3 Authority Key Identifier:
                keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:cf:d5:ec:83:23:0a:4a:e3:87:2d:13:50:dd:50:d3:a4:bd:
         40:ee:c3:02:83:5d:5d:b6:05:f7:83:7d:64:62:a2:2c:52:77:
         5e:41:4a:56:ce:df:eb:80:bc:5b:d1:48:76:c4:93:d5:52:b8:
         db:19:f6:5b:ae:b0:ea:00:61:1c:94:82:e0:a6:95:f7:c2:da:
         4a:58:19:e1:06:7f:6c:17:64:98:8b:63:65:e2:00:20:f5:19:
         e8:79:5b:f9:10:7d:92:a9:12:dd:89:1f:4b:bb:61:c3:8f:14:
         87:e7:c3:70:fe:77:b9:2c:d4:5d:96:85:de:d2:25:56:9c:34:
         f1:5c:88:cd:d3:3d:ae:d8:65:44:41:c2:45:b2:99:ae:db:13:
         02:ea:41:c1:7f:ee:17:d7:a3:23:73:25:94:fb:87:73:b7:e8:
         fb:3c:ea:69:d9:66:96:ce:4d:be:b2:19:19:d3:93:77:bd:29:
         4a:5c:40:64:5f:32:4f:90:05:45:46:8d:25:21:0a:76:aa:e1:
         30:19:9a:a5:7c:b7:ef:39:86:23:6a:84:27:7d:83:1b:36:05:
         99:97:34:0b:c3:4a:72:63:2b:20:6b:5a:83:a0:e6:3c:2a:5a:
         1e:50:f8:cb:b3:0b:0c:91:c7:ef:02:b5:d2:b7:b6:09:df:00:
         6a:b8:5b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:28:06 2026 by rpki-client