Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
File:                     eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft (raw, json)
Hash identifier:          5lexmERaqOdvPRjVmgeKxh8miTqPFFU8W6pPUvxvL20=
Subject key identifier:   88:2C:2B:20:C2:A8:9F:12:CE:8D:44:DB:1D:2D:FC:C7:78:99:43:C7
Authority key identifier: 79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44
Certificate issuer:       /CN=A9128992/serialNumber=79014A5F07319F0460FCD04FC4AAABCCE09ED344
Certificate serial:       2457
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
Manifest number:          243C
Signing time:             Mon 28 Sep 2026 15:49:12 +0000
Manifest this update:     Mon 28 Sep 2026 15:49:11 +0000
Manifest next update:     Mon 05 Oct 2026 15:49:11 +0000
Files and hashes:         1: eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl (hash: +oL82W9z1a391Ms2+UqQN5CuzL5lYjfxj/1ZNWofP7Y=)
                          2: C6D6646ECB5E11F0BCC7A882C4F9AE02.roa (hash: OXUdIHwjzJMlb7PzfBCuO91SJp6lBM8gcOwFKOIk7G8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl
                          rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 15:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9303 (0x2457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128992, serialNumber=79014A5F07319F0460FCD04FC4AAABCCE09ED344
        Validity
            Not Before: Sep 28 15:49:11 2026 GMT
            Not After : Oct  5 15:49:11 2026 GMT
        Subject: CN=6aba8c78-d33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:df:62:15:5b:53:ac:17:51:60:d3:c4:2a:3d:
                    db:b0:8a:6d:5d:11:4a:be:75:b2:b0:8d:cc:d7:71:
                    9a:ac:ef:db:37:f9:59:d4:1b:af:d6:dd:80:ac:89:
                    7f:82:9b:66:a6:1a:be:5a:0f:14:52:84:47:fd:6f:
                    e5:bf:3b:0c:2c:d3:50:12:51:d4:73:7d:51:ed:c8:
                    4a:62:18:96:5a:22:6b:e9:f7:e7:1c:e2:b6:04:af:
                    0e:6a:16:28:78:22:cf:6d:d5:b0:29:c6:80:72:ec:
                    4e:62:f2:ef:3b:a0:c1:81:c7:e3:57:2b:02:bf:e8:
                    de:e9:97:6d:15:e2:c0:e8:57:d7:9b:73:ef:16:c5:
                    bb:9b:60:de:8f:a0:d2:fc:68:98:32:7d:51:5f:97:
                    88:b1:4a:2a:4a:7d:a9:2b:2d:51:33:c0:7e:36:aa:
                    4f:59:16:c1:fb:7a:00:20:09:7a:22:46:0b:9b:58:
                    05:19:f9:5b:b4:cf:bd:95:f7:82:dd:70:4e:c7:d1:
                    57:3a:06:9d:b7:82:29:44:5d:23:5b:f4:be:28:e3:
                    bd:85:d7:85:6e:c6:1a:09:44:70:b7:43:ec:d6:9c:
                    75:a4:b7:aa:98:8b:83:29:23:ad:aa:7f:33:d1:d5:
                    84:9f:45:21:82:d6:3b:9f:fa:8c:95:c4:fa:35:38:
                    e2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2C:2B:20:C2:A8:9F:12:CE:8D:44:DB:1D:2D:FC:C7:78:99:43:C7
            X509v3 Authority Key Identifier:
                keyid:79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:38:ad:b2:7e:11:c1:7d:11:50:fd:c4:c5:99:5d:26:ca:7f:
         ff:dc:a3:0a:1d:2a:d7:4d:92:a8:7b:ed:8a:a8:52:0e:9c:7d:
         63:08:40:0d:ca:f2:25:d3:4c:a7:d3:bf:76:01:c5:d5:bd:30:
         ae:65:1c:f5:cf:1a:57:fc:6d:6a:c5:49:48:da:41:48:5d:ea:
         9c:17:ae:1d:d7:3d:5b:7a:17:df:b1:05:e1:ec:45:ff:c1:2d:
         a1:02:33:cb:b5:3c:74:55:40:b9:19:b5:60:a7:3e:18:0a:c7:
         fb:f1:c9:41:c4:a2:70:a1:fa:d5:81:f0:a2:5d:4d:71:4d:e8:
         5c:c8:17:7d:c4:90:66:22:a7:7b:03:96:5d:04:a0:09:95:d4:
         d7:81:86:c8:51:e2:0b:9c:e5:fb:5e:b9:68:7b:99:d2:8b:c3:
         da:e2:bc:03:15:22:fc:f1:64:7b:49:40:aa:65:12:89:0e:70:
         ce:54:85:c8:4c:b3:a3:5b:2f:d7:1e:8b:03:00:22:da:fc:30:
         b4:0c:3a:64:d0:12:cb:22:36:7c:1b:32:52:14:2d:41:ea:dc:
         95:3e:9e:ed:56:02:1e:63:df:a4:1d:8d:2b:d1:27:2b:62:16:
         7a:ff:c8:4d:be:d4:4e:a4:ac:1e:e6:e9:21:61:07:7e:98:59:
         87:14:74:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:18:08 2026 by rpki-client