Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft
File:                     aMIYjATCDkkjq7YttIckmDVLSv0.mft (raw, json)
Hash identifier:          CbPLqHpW6/6OuO4pJEL9tBFbsZvODOTiQIlZCiB44Wg=
Subject key identifier:   C6:9F:8F:C6:21:B3:2B:79:0B:BE:A1:76:E2:28:37:5A:49:8A:EB:54
Authority key identifier: 68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD
Certificate issuer:       /CN=A911750B/serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD
Certificate serial:       F6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft
Manifest number:          F3
Signing time:             Wed 23 Sep 2026 06:08:23 +0000
Manifest this update:     Wed 23 Sep 2026 06:08:22 +0000
Manifest next update:     Wed 30 Sep 2026 06:08:22 +0000
Files and hashes:         1: aMIYjATCDkkjq7YttIckmDVLSv0.crl (hash: vg/kgx9QHiv7V+LrvKrXlTnwmGEY2Zys0qo7+Rfy8cg=)
                          2: CC9D872A468D11F0A82C5E5EC4F9AE02.roa (hash: vIzjykPQ1LonF8j+M1UP/1/5O9eRnrbkzxN67k8ibko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl
                          rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:08:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911750B, serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD
        Validity
            Not Before: Sep 23 06:08:22 2026 GMT
            Not After : Sep 30 06:08:22 2026 GMT
        Subject: CN=6ab36cd7-62fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:27:71:c6:5b:c3:0b:e6:8a:3e:e1:41:01:41:
                    92:0a:4b:d0:2c:13:43:6b:d5:5c:aa:56:ab:d0:6d:
                    27:cc:83:a3:5e:c7:7f:2a:a1:4b:db:f7:42:ad:83:
                    7a:e5:2c:fb:e0:61:5a:a0:16:f7:0b:a7:bf:d0:1a:
                    b6:05:05:6f:c1:40:d3:cd:fd:82:97:c9:43:d8:78:
                    19:24:ac:ce:85:9f:a8:e7:e1:22:0b:9a:e7:3a:57:
                    af:f7:64:eb:f2:a4:d4:8b:87:b9:58:86:9d:99:9b:
                    20:74:c3:60:24:6f:d2:e4:17:7a:0f:cb:58:2f:5a:
                    23:6a:7e:ef:ea:a4:be:e8:90:91:0c:fa:f0:13:6e:
                    66:a6:b3:c5:19:7e:c4:38:41:85:4d:71:b0:74:36:
                    df:62:71:2b:0b:bd:80:65:b1:66:37:ff:ab:bf:10:
                    8e:d8:71:de:80:b7:86:60:d5:87:6a:c0:94:02:6d:
                    50:a7:73:2b:ed:4c:ec:d1:ba:42:a0:e9:18:22:5c:
                    ba:a2:76:a6:d2:1d:c4:56:19:09:d4:f4:7f:e1:c4:
                    4d:64:5e:5b:8b:c4:b7:af:10:25:11:8f:59:e8:83:
                    2b:e9:cb:c3:9d:42:12:ae:a2:5c:80:89:98:4e:c4:
                    6b:6a:f7:6a:8e:92:4c:cb:fd:19:11:02:a5:dd:f2:
                    5c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9F:8F:C6:21:B3:2B:79:0B:BE:A1:76:E2:28:37:5A:49:8A:EB:54
            X509v3 Authority Key Identifier:
                keyid:68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:0c:82:d0:ca:07:4e:ff:ef:2e:57:27:5a:f1:24:3c:df:24:
         01:4f:79:32:45:df:25:f3:74:d7:7d:cc:77:09:30:e8:f4:6e:
         a3:32:79:e5:12:2a:a4:ab:0d:61:e5:a4:8d:78:6b:19:83:a3:
         54:91:35:65:7c:11:65:d2:c5:2f:37:b9:4f:e7:7f:5e:a2:81:
         91:e9:85:40:99:9e:cc:43:df:da:7c:9b:c2:d2:46:ca:e9:ea:
         68:8f:e2:02:eb:cd:a5:a0:8c:78:c6:a5:4a:2f:9e:1c:c7:58:
         bc:83:a1:dc:19:da:08:ff:5d:88:93:e4:2f:e7:d5:13:68:4b:
         c1:aa:46:92:55:35:5f:f0:62:61:24:5d:e5:9b:76:9b:b4:ac:
         fe:43:29:37:bc:c0:29:56:8c:e8:04:57:57:c2:04:3f:66:e8:
         09:38:fc:f6:a4:32:47:45:a5:19:0d:2a:09:12:45:89:1a:08:
         2d:9e:8d:72:a3:04:5e:2d:83:fa:6e:ce:cd:49:58:03:01:44:
         84:51:30:6e:b8:3d:28:cc:34:84:e4:04:18:d0:3e:bd:98:d3:
         59:e5:27:51:f2:bb:cc:89:b8:e9:46:61:a1:e4:d2:86:3d:b4:
         0e:ad:67:da:28:55:1c:9d:94:89:40:db:f2:cc:68:b3:ff:5b:
         b9:89:05:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:48:39 2026 by rpki-client