Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft
File:                     Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft (raw, json)
Hash identifier:          vrWCeQq8uTGfoGBopqDdVRRAfdGG9kHlUamZTLsJJtQ=
Subject key identifier:   48:1F:40:74:E6:18:CE:AF:63:0E:C7:EE:81:6E:99:A2:E9:31:7D:3F
Authority key identifier: 02:1E:96:A7:1D:99:74:0F:F4:25:8B:EC:39:0C:4C:87:6A:37:58:E1
Certificate issuer:       /CN=A91FC3D0/serialNumber=021E96A71D99740FF4258BEC390C4C876A3758E1
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft
Manifest number:          49
Signing time:             Sat 19 Sep 2026 08:32:10 +0000
Manifest this update:     Sat 19 Sep 2026 08:32:09 +0000
Manifest next update:     Sat 26 Sep 2026 08:32:09 +0000
Files and hashes:         1: Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.crl (hash: vlEOrca3RvVybhArI4GBIMbfJqvljymZpGbuaPUsJjA=)
                          2: 65D380F27EAA11F1B173303066A30FBC.roa (hash: 5gfdpSY7JYQ5F3wG8OEDwn4p3/ZZWjHNEFO05arQYNo=)
                          3: 653B4FA87EAA11F1B173303066A30FBC.roa (hash: EFkhWXtgulJBn3A7ClQDPUCqLh2IZisKv33Z5xFDjxE=)
                          4: 763DF47E5F3611F192539E378047A888.roa (hash: Q5As8jeHYqHhZ7fSSmextS8z5wVQANqrRtBT9kjNokg=)
                          5: 64B446CA7EAA11F1B173303066A30FBC.roa (hash: tb/s6gLIXaYTsezXokt2OrwPKppQtIENbSawKe+uw8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.crl
                          rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC3D0, serialNumber=021E96A71D99740FF4258BEC390C4C876A3758E1
        Validity
            Not Before: Sep 19 08:32:09 2026 GMT
            Not After : Sep 26 08:32:09 2026 GMT
        Subject: CN=6aae488a-39a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b8:95:03:71:d7:61:8e:21:66:38:9b:c1:be:
                    1b:9b:65:c5:09:e8:47:68:7d:52:d7:0b:48:74:5a:
                    3e:93:8c:6e:f4:5b:10:ab:06:f0:d5:01:ab:b2:e9:
                    61:e8:89:41:c5:c1:e8:96:cd:e4:cd:e0:17:e4:74:
                    10:33:9e:08:34:3d:8c:55:43:13:c1:1d:96:c4:50:
                    7a:47:39:95:ac:27:09:19:30:f9:fb:e1:09:12:f3:
                    f3:69:cb:25:92:19:3d:65:2c:35:a7:62:2a:f2:96:
                    0e:0c:65:c2:f3:9a:13:ef:b5:5a:6a:e6:0a:30:79:
                    ae:b9:97:02:8a:1e:54:56:86:cf:a6:7e:03:78:86:
                    af:7f:bc:8e:17:76:43:3e:f4:c0:d7:bb:4f:00:cc:
                    52:cc:5a:cb:4e:e3:9b:c5:08:fc:e2:70:14:ac:b1:
                    81:8b:09:a4:2f:d0:de:f2:48:c5:83:b5:bb:e4:7b:
                    d8:ba:39:e7:0d:e5:ce:80:24:ab:e0:26:03:42:6b:
                    59:10:a5:00:18:76:55:a7:9f:60:31:5b:b8:bb:18:
                    14:c0:b0:d2:09:4d:4e:58:8c:48:a4:b7:ba:85:c1:
                    c6:b6:b2:a5:ce:b8:8f:86:22:4c:3e:01:4b:60:3d:
                    2b:b0:69:32:fa:4f:56:3d:aa:d8:8e:06:37:67:2e:
                    8e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1F:40:74:E6:18:CE:AF:63:0E:C7:EE:81:6E:99:A2:E9:31:7D:3F
            X509v3 Authority Key Identifier:
                keyid:02:1E:96:A7:1D:99:74:0F:F4:25:8B:EC:39:0C:4C:87:6A:37:58:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:87:74:47:19:a2:d0:55:08:f8:3c:28:0b:e1:9c:2b:64:e6:
         cd:9d:6b:b3:e3:4e:78:f3:01:cf:ad:cb:29:d9:27:92:54:a5:
         af:72:80:c4:20:01:2e:f0:30:a9:07:9d:8d:dd:cb:fe:6a:b1:
         fb:64:58:0f:59:c3:c1:48:8c:e3:21:3f:d2:4b:50:3e:ed:24:
         80:3b:7f:e3:9c:fe:cc:7d:db:48:55:0a:88:be:2d:65:dc:7a:
         df:b0:41:65:c8:97:db:7b:03:94:2b:15:28:55:91:83:1d:6f:
         0a:cf:81:e2:09:68:00:9a:d0:e3:2f:0c:83:29:b9:a0:ea:38:
         7b:0a:fe:16:06:07:26:09:8d:c2:b8:b7:a2:e1:3d:76:54:d7:
         6a:c2:75:17:c6:4e:46:cf:e1:09:03:a3:be:c1:a8:73:9f:92:
         b6:db:3c:eb:b7:7a:3f:4a:81:a8:19:d0:b5:81:f9:de:53:e3:
         2c:d1:6a:d0:29:f8:12:c1:0c:4d:56:a6:da:7e:85:c1:d3:22:
         eb:14:82:5f:82:91:30:aa:5a:97:ab:21:02:be:c8:55:17:b4:
         10:9b:fc:77:a4:5d:8a:0e:8b:ad:73:84:c2:4d:0d:14:f9:db:
         b9:a1:e3:c2:b6:32:2f:d2:d4:cc:92:6d:75:5a:a9:30:e1:9b:
         cc:e5:1c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:52:02 2026 by rpki-client