Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
File:                     dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft (raw, json)
Hash identifier:          kwP7miSDVHxGTPokAM1ZWocAXYwXdu0kCNdyiBH7YdI=
Subject key identifier:   33:33:F1:CF:82:98:AB:AE:D3:0E:75:80:57:74:CA:C4:0C:A0:E7:C0
Authority key identifier: 75:0D:6A:D8:49:97:72:79:56:95:25:E3:DA:FC:97:2F:CB:78:22:33
Certificate issuer:       /CN=A913270F/serialNumber=750D6AD849977279569525E3DAFC972FCB782233
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
Manifest number:          86
Signing time:             Mon 21 Sep 2026 07:39:37 +0000
Manifest this update:     Mon 21 Sep 2026 07:39:37 +0000
Manifest next update:     Mon 28 Sep 2026 07:39:37 +0000
Files and hashes:         1: dQ1q2EmXcnlWlSXj2vyXL8t4IjM.crl (hash: fNJtyL5ifTCcnj5+EoaVUYOp5+fyn3/fWsu7gyQ92SM=)
                          2: CDCAE45AEFA011F0A40A3DE8696F56BC.roa (hash: iKMOZndSspUWn/Q2dD9wJzioM8CavlEGjQksPJ9SKPs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.crl
                          rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:39:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913270F, serialNumber=750D6AD849977279569525E3DAFC972FCB782233
        Validity
            Not Before: Sep 21 07:39:37 2026 GMT
            Not After : Sep 28 07:39:37 2026 GMT
        Subject: CN=6ab0df39-78f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:51:be:b6:6d:9d:62:48:54:8f:c4:8a:6c:0a:
                    60:03:1d:fa:91:19:08:ab:66:1d:12:5d:16:ac:64:
                    06:ee:67:4b:1c:d9:ae:36:5e:18:9c:70:77:b4:3d:
                    da:41:cd:fb:38:cb:23:1a:a8:59:3a:de:1c:ba:9f:
                    f4:d8:c9:ce:9d:51:32:b0:27:00:9a:a3:d5:ae:8c:
                    2e:66:17:5b:1e:fc:79:fa:c2:16:07:02:dd:6d:93:
                    d9:25:8b:57:03:33:95:4f:f3:d1:04:78:79:36:84:
                    0e:ab:d3:20:5d:ac:7d:7c:5f:fc:fd:a9:20:a3:f4:
                    27:28:e1:cd:d2:2f:af:b5:11:39:91:e5:ee:ed:42:
                    26:f2:80:eb:94:b2:06:bd:aa:6e:df:bd:62:bc:c5:
                    54:55:3c:14:5a:94:67:66:ba:a0:c5:b1:cc:56:c8:
                    38:4d:c8:79:0e:b4:bd:7d:20:60:5f:ba:c9:44:b5:
                    4e:e9:4b:30:bd:49:2a:e4:e3:df:b1:84:47:0e:f2:
                    b6:96:80:b5:c7:bf:fb:42:86:54:16:0c:0b:68:b5:
                    c7:2e:80:55:e7:7f:75:07:6d:a6:ae:22:f6:d6:fd:
                    ab:fc:33:e9:11:c7:15:8a:a9:13:55:5b:ff:41:5d:
                    a5:90:91:2b:7e:f0:ad:48:a3:bb:20:fe:df:38:e2:
                    b1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:33:F1:CF:82:98:AB:AE:D3:0E:75:80:57:74:CA:C4:0C:A0:E7:C0
            X509v3 Authority Key Identifier:
                keyid:75:0D:6A:D8:49:97:72:79:56:95:25:E3:DA:FC:97:2F:CB:78:22:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:0c:89:7d:6d:d7:81:85:da:ff:69:f9:04:f1:21:36:52:aa:
         92:b4:ed:f5:c6:0f:fd:ac:c4:50:a2:56:5e:0a:fe:cb:5c:01:
         ef:f0:18:2f:97:79:58:2e:e0:7e:a5:83:87:e6:88:6e:1e:73:
         a8:a9:26:c1:16:1a:b9:a5:97:a5:e6:25:9a:99:0d:d3:ac:2c:
         57:90:51:95:3e:af:1d:a2:68:f1:aa:5e:43:5e:a2:79:9d:04:
         89:56:c8:24:0f:a7:32:44:0d:f5:6e:00:90:5c:c9:0f:47:57:
         11:11:b9:35:13:a0:b8:08:7f:cf:8f:cb:96:0f:3b:e6:79:70:
         b1:6b:d4:0c:ba:25:9b:e7:9b:74:7f:7f:6b:98:04:1b:f6:8a:
         4e:02:34:b6:b3:37:87:0d:05:cd:59:a4:fe:de:26:be:ad:91:
         63:3e:70:d4:72:5d:d1:c8:c2:37:65:b5:71:bc:28:4f:c9:19:
         94:0c:e3:89:32:b7:fb:4e:30:2d:dc:b2:04:f7:cb:54:5a:1d:
         28:cf:22:19:92:b3:c9:2a:34:9f:2f:b2:bf:4f:43:7c:ca:6a:
         31:04:df:4d:50:58:9a:f0:33:89:b6:29:aa:ba:2b:40:8c:7b:
         ce:c3:ff:b5:88:09:4e:ac:c4:ca:57:f7:0a:3e:33:ba:d1:04:
         51:8d:90:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:39:42 2026 by rpki-client