Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft
File:                     U2uRsXtuG7FjjINYoPpepdDr77c.mft (raw, json)
Hash identifier:          nDPrWdEuLjJjM4atUVfMW0cpqb0aJPD6mPIGjFOnMJ4=
Subject key identifier:   6C:9F:64:62:70:A1:13:EC:5F:19:10:66:0A:21:27:74:B6:FC:E0:D7
Authority key identifier: 53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7
Certificate issuer:       /CN=A9125C3D/serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7
Certificate serial:       0285
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft
Manifest number:          027D
Signing time:             Tue 22 Sep 2026 23:43:07 +0000
Manifest this update:     Tue 22 Sep 2026 23:43:06 +0000
Manifest next update:     Tue 29 Sep 2026 23:43:06 +0000
Files and hashes:         1: U2uRsXtuG7FjjINYoPpepdDr77c.crl (hash: RQyXg8qeIUyJxziy4+9G3kxDCZqvqnMM4qtKUNVZHCE=)
                          2: 234074FA00DD11EE95AF6F7CC4F9AE02.roa (hash: E/3+zHRb9cigB2So9gcmcEr9UWMt8OA7wew5j990xKY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.crl
                          rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645 (0x285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125C3D, serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7
        Validity
            Not Before: Sep 22 23:43:06 2026 GMT
            Not After : Sep 29 23:43:06 2026 GMT
        Subject: CN=6ab3128a-32af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:67:5f:d5:4d:c0:78:fb:c7:f2:3d:16:e8:
                    60:23:53:d7:c0:a1:22:fe:89:d5:5c:64:86:c5:0f:
                    3c:40:60:bb:49:f2:c8:95:60:85:d7:fe:5b:4e:88:
                    70:5e:18:21:1c:68:15:ec:b9:3a:98:04:21:8e:cb:
                    bd:65:c7:7d:53:cf:ec:6d:e8:98:29:3e:c5:1f:80:
                    ac:b7:f0:5d:14:52:dd:13:b4:70:38:82:ff:af:9e:
                    94:37:61:b7:df:3a:86:d7:ef:fe:81:2b:a1:89:0b:
                    60:d8:4c:74:a9:e3:20:d3:e0:34:0d:03:d9:e6:0c:
                    14:a9:63:fd:e5:5c:c1:ee:ab:8e:0c:14:6b:de:7c:
                    aa:43:c6:10:6d:23:92:00:15:0e:b2:c8:c3:e4:b3:
                    28:a8:06:ea:a0:fe:46:88:bc:55:08:e9:21:ce:37:
                    2b:be:2d:3c:c9:b2:29:5a:7a:1a:a0:fb:3d:9f:53:
                    c4:28:08:df:6e:11:80:32:cf:69:68:41:27:27:ad:
                    be:ff:dd:86:31:3e:27:14:c0:d3:f3:cf:8e:cf:a2:
                    62:04:a8:ea:95:6f:c6:e6:aa:f6:4d:d5:a6:4e:09:
                    4f:02:6d:92:96:d0:f0:c3:60:7b:5b:b9:ae:2b:b8:
                    0a:39:b1:8e:7a:71:25:2b:23:29:d9:51:ed:1d:f2:
                    e0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9F:64:62:70:A1:13:EC:5F:19:10:66:0A:21:27:74:B6:FC:E0:D7
            X509v3 Authority Key Identifier:
                keyid:53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:d2:2c:a4:89:ae:71:fe:87:78:ff:49:da:32:e1:0d:5c:a5:
         bf:fd:d9:20:79:6b:0c:24:a2:e8:e5:1e:f9:1a:51:93:4c:76:
         f5:d2:b6:09:73:6a:55:17:33:84:c5:95:0b:e5:bb:98:09:49:
         b8:e1:d5:1f:4b:f6:8c:33:8c:d1:97:0b:a8:22:cb:81:68:b9:
         67:b5:89:41:26:a4:52:68:2d:fd:5a:0a:d1:30:9c:54:87:ac:
         29:97:a2:b5:02:ac:59:fa:39:68:eb:72:81:c9:8c:9e:06:d1:
         36:ba:60:5d:28:9b:17:f0:31:fb:3b:fc:4e:17:55:df:77:21:
         5f:fe:2b:d8:65:73:61:c6:70:dd:65:b3:62:1b:d1:48:80:32:
         68:cb:a9:2b:0f:3f:ca:6e:12:a2:f7:e8:c4:99:24:93:f1:d9:
         af:4b:c4:68:a6:3e:79:8f:c3:b5:0f:c9:be:fc:19:5a:cf:54:
         5a:42:8f:96:14:56:52:f9:36:1b:b3:e4:f1:7d:4b:a0:7e:6f:
         ee:16:2a:65:b9:7c:a6:09:2f:e8:1d:96:c8:7e:cf:9d:be:85:
         8f:87:ca:52:0e:d1:db:81:cb:cf:75:b6:94:a8:aa:9e:42:c4:
         61:29:b2:e2:28:ea:0d:a3:28:48:18:a6:7e:07:44:14:8c:f5:
         f3:9b:69:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:14:29 2026 by rpki-client