Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
File:                     B7JffmXLYnEIsNlMGPf1edM0eBg.mft (raw, json)
Hash identifier:          VQfHnyV2BS/Hny3RdYciQx/jyqDaoocKzio0PG3c6Dg=
Subject key identifier:   47:04:C0:42:32:20:99:64:E3:6C:D9:53:C0:3D:9B:DF:A8:AC:CF:E2
Authority key identifier: 07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18
Certificate issuer:       /CN=A911CB05/serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818
Certificate serial:       016B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
Manifest number:          016B
Signing time:             Wed 23 Sep 2026 04:40:54 +0000
Manifest this update:     Wed 23 Sep 2026 04:40:53 +0000
Manifest next update:     Wed 30 Sep 2026 04:40:53 +0000
Files and hashes:         1: B7JffmXLYnEIsNlMGPf1edM0eBg.crl (hash: a7QWIZlDod5qZKsdMukhHtTKxPpxMhtocSPk4BfpG10=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl
                          rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CB05, serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818
        Validity
            Not Before: Sep 23 04:40:53 2026 GMT
            Not After : Sep 30 04:40:53 2026 GMT
        Subject: CN=6ab35856-d387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:59:b7:e4:4c:84:0e:05:9e:bd:51:01:cc:98:
                    ad:85:81:6b:38:1e:71:dc:2d:df:20:d3:3c:f8:72:
                    4b:d3:c4:c8:da:ba:24:4f:11:92:be:7a:36:47:71:
                    1e:72:b4:1f:b7:87:d3:c2:c2:04:79:47:be:93:29:
                    7f:04:4e:40:32:08:46:b4:d2:53:68:18:de:d6:9d:
                    f6:e3:27:8c:04:4f:a0:30:6d:60:2d:1c:b5:c8:15:
                    2e:3d:0f:a1:d3:90:f9:e2:30:ed:72:b4:38:39:7a:
                    2a:01:45:10:a9:dc:78:43:96:37:f6:a6:30:b4:d8:
                    d3:74:1c:d1:9a:fb:e4:a5:95:ac:d3:26:b6:ca:9f:
                    1f:e9:69:b6:f8:6e:74:da:c2:f8:9a:e8:31:4e:ef:
                    b2:1a:47:63:82:e6:79:64:66:4e:4c:53:aa:ea:74:
                    0b:88:44:4b:30:c8:08:63:f8:d2:23:ce:2f:fe:35:
                    da:00:f2:a9:63:a1:39:70:09:d3:ff:55:56:fe:3e:
                    67:94:89:b2:85:82:8d:f2:77:ff:e9:5e:4a:14:8a:
                    fb:d9:a0:1f:2b:8d:4f:82:f9:b5:6f:ee:55:1f:d5:
                    f9:04:4e:25:1b:b8:b0:64:c9:23:e0:c4:37:d6:01:
                    d1:09:8a:03:89:c2:05:cf:cd:7b:29:c0:a7:0b:00:
                    39:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:04:C0:42:32:20:99:64:E3:6C:D9:53:C0:3D:9B:DF:A8:AC:CF:E2
            X509v3 Authority Key Identifier:
                keyid:07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f7:59:54:b1:a8:92:30:c1:5d:87:dc:fc:e3:a4:ea:0d:ab:
         54:f8:8c:73:ef:d4:70:54:66:1d:e9:f1:64:8d:32:eb:25:9f:
         94:96:5c:2c:d7:1b:7c:0b:47:c0:81:49:47:3f:cf:2c:dc:07:
         60:69:d3:81:17:9e:40:75:d0:fa:cb:d0:32:0f:b7:e6:47:54:
         6d:c4:35:2f:bc:06:16:4f:01:35:1a:cb:92:e5:0d:e6:ec:0b:
         75:57:ea:35:db:95:a1:bc:b2:f5:10:1b:9d:e1:c6:9c:71:f0:
         f6:85:af:87:3e:a4:2a:f3:b3:25:33:8a:8d:be:f1:a1:bc:ca:
         95:77:fc:91:bd:90:87:5d:da:53:0a:f4:9c:de:bb:02:85:04:
         e3:d9:8e:5d:9a:b8:c2:96:cf:ed:32:03:6d:58:09:85:d4:41:
         87:d7:b1:ab:cf:6f:02:93:3c:b6:1e:cc:94:cd:80:3f:a9:9a:
         e2:6c:05:b0:b4:d3:6e:dd:ae:05:ad:8f:56:6e:67:ce:bd:e8:
         6d:86:9e:b4:7e:aa:fb:fe:80:f9:38:00:e6:7d:e4:4b:30:c8:
         f1:a8:6d:f4:45:93:09:1b:85:c0:9f:b7:4d:02:5b:ac:f3:77:
         21:e9:83:a2:35:23:e6:b1:ee:0b:91:02:a5:24:fd:2b:54:b3:
         39:4c:e7:50
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUNCMDUxMTAvBgNVBAUTKDA3QjI1RjdFNjVDQjYyNzEwOEIwRDk0QzE4RjdGNTc5
RDMzNDc4MTgwHhcNMjYwOTIzMDQ0MDUzWhcNMjYwOTMwMDQ0MDUzWjAYMRYwFAYD
VQQDEw02YWIzNTg1Ni1kMzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5lm35EyEDgWevVEBzJithYFrOB5x3C3fINM8+HJL08TI2rokTxGSvno2R3Ee
crQft4fTwsIEeUe+kyl/BE5AMghGtNJTaBje1p324yeMBE+gMG1gLRy1yBUuPQ+h
05D54jDtcrQ4OXoqAUUQqdx4Q5Y39qYwtNjTdBzRmvvkpZWs0ya2yp8f6Wm2+G50
2sL4mugxTu+yGkdjguZ5ZGZOTFOq6nQLiERLMMgIY/jSI84v/jXaAPKpY6E5cAnT
/1VW/j5nlImyhYKN8nf/6V5KFIr72aAfK41Pgvm1b+5VH9X5BE4lG7iwZMkj4MQ3
1gHRCYoDicIFz817KcCnCwA5VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEcEwEIy
IJlk42zZU8A9m9+orM/iMB8GA1UdIwQYMBaAFAeyX35ly2JxCLDZTBj39XnTNHgY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0IwNS9GQTUyREVDMjhB
OUExMUVGQjhBQTU2NDhDNEY5QUUwMi9CN0pmZm1YTFluRUlzTmxNR1BmMWVkTTBl
QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0I3SmZmbVhMWW5FSXNObE1HUGYxZWRNMGVCZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Q0IwNS9GQTUyREVDMjhBOUExMUVGQjhBQTU2NDhDNEY5QUUwMi9CN0pmZm1YTFlu
RUlzTmxNR1BmMWVkTTBlQmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ/dZVLGokjDBXYfc/OOk6g2rVPiMc+/UcFRmHenxZI0y6yWflJZcLNcbfAtH
wIFJRz/PLNwHYGnTgReeQHXQ+svQMg+35kdUbcQ1L7wGFk8BNRrLkuUN5uwLdVfq
NduVobyy9RAbneHGnHHw9oWvhz6kKvOzJTOKjb7xobzKlXf8kb2Qh13aUwr0nN67
AoUE49mOXZq4wpbP7TIDbVgJhdRBh9exq89vApM8th7MlM2AP6ma4mwFsLTTbt2u
Ba2PVm5nzr3obYaetH6q+/6A+TgA5n3kSzDI8aht9EWTCRuFwJ+3TQJbrPN3IemD
ojUj5rHuC5ECpST9K1SzOUznUA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:10:11 2026 by rpki-client