Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
File:                     mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json)
Hash identifier:          9wNbpZUsqK14K0bX5OQKwFWpFl4eKUORtcn3IZopKR4=
Subject key identifier:   80:7B:D5:B6:FF:00:58:B5:28:91:91:7F:AE:A9:34:B8:26:8A:E7:3C
Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
Certificate issuer:       /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Certificate serial:       02C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
Manifest number:          02B2
Signing time:             Fri 25 Sep 2026 01:34:45 +0000
Manifest this update:     Fri 25 Sep 2026 01:34:45 +0000
Manifest next update:     Fri 02 Oct 2026 01:34:45 +0000
Files and hashes:         1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: kHCo4KVZOHmx7JMqBzPT4sUmCjHccBFB4O0bWV4uqPg=)
                          2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: nko7oXcOwkjYvH5kMeaot9wb2VmnzHR8v/MSp3IbrH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl
                          rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 01:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 704 (0x2c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133CD2, serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
        Validity
            Not Before: Sep 25 01:34:45 2026 GMT
            Not After : Oct  2 01:34:45 2026 GMT
        Subject: CN=6ab5cfb5-3add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:4e:76:a5:47:dd:70:8d:45:4f:9b:d3:88:
                    75:f6:ca:3e:b3:1a:8f:2c:db:06:ba:36:3c:ea:ee:
                    e4:58:74:96:b5:78:bf:7c:e6:c1:78:2b:16:9e:9f:
                    f0:da:da:fb:e6:14:35:86:2e:82:f9:91:95:f2:48:
                    b3:78:38:43:cd:2b:dc:12:46:bf:92:af:d9:41:c7:
                    06:ab:37:f4:d5:94:84:78:30:b3:8a:de:bc:1c:6a:
                    d7:ef:17:8c:54:39:7a:cf:e7:19:a1:c6:b1:1f:eb:
                    7a:98:1a:7c:b2:a1:c1:49:18:3f:d9:ba:31:61:21:
                    24:32:be:af:19:03:2c:bb:08:65:b1:2d:df:59:23:
                    75:d5:fb:cd:e5:68:e4:d4:83:b2:e1:f6:32:75:bf:
                    90:0d:8d:fd:5e:b2:0b:43:aa:85:4c:10:54:ee:90:
                    88:d7:d1:43:60:02:9e:69:70:ce:36:b5:b3:bc:e4:
                    ff:40:49:2c:b8:d2:d8:46:f8:35:6e:26:00:09:33:
                    77:00:d5:1a:a4:bc:61:7f:36:2f:64:d6:0e:a8:2e:
                    58:81:0f:73:72:94:58:5d:5d:10:a6:ee:8e:5c:5b:
                    f0:58:0e:4d:be:0a:a5:e1:86:24:d0:03:28:1a:66:
                    f5:e3:a7:15:fb:2d:6f:75:f5:b3:98:c4:6b:48:21:
                    04:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7B:D5:B6:FF:00:58:B5:28:91:91:7F:AE:A9:34:B8:26:8A:E7:3C
            X509v3 Authority Key Identifier:
                keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:50:ad:52:0b:ec:63:46:6d:de:78:7b:a9:00:39:ed:94:89:
         2f:77:e9:08:18:e3:5e:dd:ac:ef:b2:ba:62:e9:11:5d:21:97:
         e9:46:d4:1e:56:93:e6:7a:d7:22:6a:9e:9a:a6:76:e6:cd:9f:
         4b:09:31:4b:09:55:17:9a:bc:a7:ca:b5:ca:d6:f7:c8:4e:cd:
         23:94:ea:99:b9:b4:c6:0a:0b:37:f7:a0:b7:1d:da:f5:96:30:
         c2:19:41:0c:57:7e:06:b6:0d:a5:b6:9f:06:6a:56:c7:0d:8a:
         77:c2:3e:d7:2b:41:70:c7:5a:75:e1:a1:71:c4:69:78:e2:e4:
         c6:65:88:19:02:d7:06:c3:ac:30:71:96:a9:3c:9c:a4:aa:58:
         1e:44:9d:cf:2c:f6:d0:c2:6b:00:e6:55:3f:f2:3d:db:06:0f:
         47:2d:16:6d:9d:da:25:73:1f:62:bc:c2:6c:e1:b5:16:b6:21:
         f3:2c:d2:39:d4:f5:7e:cd:c5:22:55:6e:c9:77:28:4c:0c:46:
         bf:da:39:e5:7d:3c:ab:6e:a8:b3:88:ca:0e:db:1f:b8:d5:48:
         67:ca:35:38:3b:7f:95:76:76:94:fd:56:0c:0c:ca:ca:70:ed:
         92:d4:29:9d:8e:9f:0e:00:cb:0e:b7:7e:07:17:4d:57:75:87:
         87:d3:8b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:47:22 2026 by rpki-client