Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
File:                     aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft (raw, json)
Hash identifier:          k2NGQ16UePI4eGKztqPAyPZaaS7ZsSiHEyFx58XgnMk=
Subject key identifier:   4E:46:BD:1F:48:86:06:B6:E9:BB:A6:98:50:38:2F:AC:02:A1:67:81
Authority key identifier: 68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A
Certificate issuer:       /CN=A91289A2/serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A
Certificate serial:       04CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
Manifest number:          04C3
Signing time:             Thu 24 Sep 2026 23:42:57 +0000
Manifest this update:     Thu 24 Sep 2026 23:42:56 +0000
Manifest next update:     Thu 01 Oct 2026 23:42:56 +0000
Files and hashes:         1: aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl (hash: xcE5+atWZ8onNySSU3kQFKsYNomC9SxlJSSja0BhFjs=)
                          2: 97E8ACD68E6611EC9EBE626FC4F9AE02.roa (hash: fjG3+8ZC22UxCMS8177A/y6FTGhegxZaMx8Kk6yByAk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl
                          rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 23:42:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1229 (0x4cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91289A2, serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A
        Validity
            Not Before: Sep 24 23:42:56 2026 GMT
            Not After : Oct  1 23:42:56 2026 GMT
        Subject: CN=6ab5b581-17ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:98:94:60:73:67:77:ad:a2:25:7c:c0:53:1e:
                    c4:eb:f6:d0:84:da:05:09:73:83:5b:a6:79:68:bc:
                    c7:5e:a9:51:f9:8f:12:b9:2b:6c:16:d1:cb:b5:9d:
                    27:74:4a:35:a4:6f:13:d1:fe:f6:f2:83:dd:ba:66:
                    d3:f2:01:ac:4a:0a:d5:94:db:94:24:70:79:bd:63:
                    cd:00:7b:f2:2b:f1:c9:30:fa:86:60:bb:9a:62:43:
                    81:f5:ed:1a:38:cd:c2:19:0d:fe:06:81:ce:01:be:
                    07:79:3f:cf:f7:77:d2:8a:0c:17:36:36:23:b0:6d:
                    93:61:15:c8:32:08:b3:30:aa:9a:04:3a:42:23:51:
                    e9:58:b4:52:21:e9:c0:a2:21:14:05:39:5a:1c:ff:
                    eb:38:05:94:b3:b2:32:c2:c1:59:51:f2:2c:48:b7:
                    ea:1e:a0:2d:36:e8:be:d3:6f:56:a1:91:e6:9b:04:
                    b9:3c:b9:5d:b0:11:cb:9a:db:95:59:af:e1:5b:2c:
                    49:52:65:8e:a3:21:ba:64:45:bb:17:0d:15:61:24:
                    d4:8b:4e:ef:3b:da:b3:e7:ad:85:50:13:b7:4f:75:
                    11:91:9e:8f:5f:68:35:4a:24:70:ad:b7:b8:a5:c4:
                    fb:7d:c9:80:c4:09:e0:77:10:ec:dd:90:36:8a:81:
                    56:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:46:BD:1F:48:86:06:B6:E9:BB:A6:98:50:38:2F:AC:02:A1:67:81
            X509v3 Authority Key Identifier:
                keyid:68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:b4:4e:c6:dd:c5:70:9d:24:51:73:d2:8f:74:38:9a:fc:3a:
         fa:0a:a7:4f:81:e1:bb:42:2c:b0:27:6f:8e:5b:fa:6c:92:04:
         b6:55:1b:2d:b9:21:8c:3c:dc:e9:92:4f:1e:50:9e:c6:1f:13:
         5a:bb:72:cb:90:57:86:fb:e8:9a:3c:b5:29:fb:27:7f:1e:31:
         36:f7:0e:84:4f:87:85:da:9e:ca:50:00:5e:a1:41:38:70:69:
         49:d6:63:b2:db:a0:f5:6d:b9:1c:58:5e:c2:37:c9:a3:ba:42:
         79:27:25:1b:c6:03:a0:90:81:36:65:95:11:df:71:06:74:84:
         75:4d:64:d6:99:4f:40:fe:8c:45:7f:b3:af:3a:88:29:ec:10:
         c4:0b:59:29:a8:91:69:ef:4f:7d:a3:3e:e1:e2:ff:3c:f1:b9:
         30:9e:59:af:9f:e8:83:29:ab:fd:25:92:65:b9:7a:79:9b:6a:
         66:cc:e9:8a:b7:e4:be:99:26:b3:fa:95:47:38:5e:25:23:00:
         bb:37:27:e5:88:48:77:e2:93:bb:6c:bc:14:9e:8f:a4:50:cf:
         cb:11:ec:07:25:8c:14:b9:2f:4b:61:25:c8:bf:35:a0:e7:35:
         ff:9b:ce:cc:a1:37:c7:13:c6:21:88:de:83:32:e6:ce:5c:ed:
         6e:71:0d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:02:05 2026 by rpki-client