Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.mft
File:                     F_RkaDqcrP_uOS3atV7AQQwpaqE.mft (raw, json)
Hash identifier:          lvXJoE/ME8/8ZmkZlc0uLH4z0mXfwsV5RFigudJF1b0=
Subject key identifier:   CA:4E:A4:30:38:CB:45:70:E3:30:A0:80:E3:80:DA:B6:E7:A7:79:6A
Authority key identifier: 17:F4:64:68:3A:9C:AC:FF:EE:39:2D:DA:B5:5E:C0:41:0C:29:6A:A1
Certificate issuer:       /CN=A911549E/serialNumber=17F464683A9CACFFEE392DDAB55EC0410C296AA1
Certificate serial:       02D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_RkaDqcrP_uOS3atV7AQQwpaqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.mft
Manifest number:          02CA
Signing time:             Fri 25 Sep 2026 01:20:49 +0000
Manifest this update:     Fri 25 Sep 2026 01:20:48 +0000
Manifest next update:     Fri 02 Oct 2026 01:20:48 +0000
Files and hashes:         1: F_RkaDqcrP_uOS3atV7AQQwpaqE.crl (hash: /Lb+ZZifOLJoyy6Lc7jBd6rdS4Ku9Ul2CX5Y98ufqpo=)
                          2: 6EFEE12C7CD211EDA61A1836C4F9AE02.roa (hash: 4FWsEphX17w8SEwHKJ24VkjzkDwbF44Iqu3mZNUErJI=)
                          3: 6F873B3A7CD211EDA61A1836C4F9AE02.roa (hash: Wrji6VePD5myz3pLbtzxmmd5wD0b/w8SmQMSMCc96LY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.crl
                          rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_RkaDqcrP_uOS3atV7AQQwpaqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 01:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 728 (0x2d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911549E, serialNumber=17F464683A9CACFFEE392DDAB55EC0410C296AA1
        Validity
            Not Before: Sep 25 01:20:48 2026 GMT
            Not After : Oct  2 01:20:48 2026 GMT
        Subject: CN=6ab5cc71-099a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:77:7b:a1:48:be:fd:ac:2b:3d:ab:d9:86:7c:
                    98:b4:08:88:18:fc:58:43:0e:23:f7:d0:cf:c7:9e:
                    d5:4c:bf:e1:ac:2c:b3:a8:78:ef:54:16:8f:9f:84:
                    95:da:58:7e:ef:1f:29:3e:82:ae:96:7d:3b:38:cd:
                    06:d4:4a:2c:e1:9f:5e:66:40:67:4f:55:65:32:20:
                    6e:df:d5:47:3f:0d:22:60:15:f8:03:6f:6c:28:6f:
                    af:67:cf:9a:9a:10:df:70:e1:15:77:8c:45:6c:83:
                    25:ef:bf:56:95:71:6e:3b:ea:d0:0e:db:9e:6f:e8:
                    54:a9:09:eb:a9:da:f1:a7:94:c2:9f:02:ac:4e:49:
                    b0:61:b4:0e:8a:75:21:2c:11:1b:87:37:4c:15:26:
                    86:3e:49:01:a1:10:ec:06:0d:49:bb:ba:6b:7e:73:
                    5d:9b:f3:31:f8:84:32:31:e1:77:7a:30:a2:73:87:
                    26:01:b3:a4:74:ce:6f:ae:1a:c4:3f:10:d9:0d:6a:
                    d8:b9:e2:c2:2a:3c:3d:ec:f1:ab:18:90:3e:2a:82:
                    6e:1c:bd:16:af:89:53:48:16:a5:e5:e1:ba:4d:e6:
                    fd:e9:5d:cd:91:aa:8e:2d:37:49:b6:37:d5:ee:d7:
                    e7:25:79:61:eb:5c:82:e3:55:ff:0b:ef:af:c3:9c:
                    9c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:4E:A4:30:38:CB:45:70:E3:30:A0:80:E3:80:DA:B6:E7:A7:79:6A
            X509v3 Authority Key Identifier:
                keyid:17:F4:64:68:3A:9C:AC:FF:EE:39:2D:DA:B5:5E:C0:41:0C:29:6A:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_RkaDqcrP_uOS3atV7AQQwpaqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:36:1f:7b:c3:9c:c9:ca:fb:b2:15:6f:15:d3:1e:ba:8c:d9:
         f1:77:a6:ad:b4:f9:1d:8d:7d:72:1d:ae:d9:d2:9b:c1:59:a7:
         36:31:23:46:56:15:e7:08:00:de:2f:9a:bc:24:7b:af:75:4b:
         95:f8:0c:4c:db:01:19:2d:52:d8:3c:cc:dc:52:1e:37:f3:fb:
         20:88:62:5a:8a:6a:fb:30:d3:50:d9:3f:d5:1a:a2:da:4d:08:
         9a:cb:ad:a7:46:03:aa:cc:c4:bb:d5:29:43:8d:ed:f9:9f:dd:
         ec:08:28:c0:b5:fc:47:13:b7:e7:a2:60:9c:fb:e8:d2:93:59:
         af:e6:22:21:aa:c6:83:cf:93:c5:12:fa:5e:17:7e:1e:e6:2e:
         26:78:42:b1:30:eb:ff:26:76:c7:22:80:44:a7:94:22:34:d5:
         36:fa:f6:e7:ce:60:1f:0e:bc:b7:62:8a:ba:b8:88:1e:12:d3:
         00:70:97:d1:82:dc:80:a1:63:fe:dc:1c:7d:d1:db:e3:b3:08:
         42:f5:39:f3:df:28:62:b2:99:40:af:6f:a3:ec:25:19:3d:40:
         2d:36:b4:5e:7b:8e:b7:07:e2:2c:eb:95:52:d6:4c:aa:2a:6f:
         72:0a:03:1d:5d:3c:a5:30:ca:1e:59:a5:70:e8:dd:d6:82:6d:
         67:8d:e4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:06:43 2026 by rpki-client