Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft
File:                     T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft (raw, json)
Hash identifier:          YYtA0arezcOq5HAeNT+to/F1JoAt9wC8+SiSzIFv+vg=
Subject key identifier:   AF:25:86:0A:E2:24:DC:1C:91:D2:8E:57:0A:23:A6:D9:A7:7A:67:E4
Authority key identifier: 4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C
Certificate issuer:       /CN=A9135F07/serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C
Certificate serial:       0153
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft
Manifest number:          014D
Signing time:             Wed 23 Sep 2026 05:08:41 +0000
Manifest this update:     Wed 23 Sep 2026 05:08:41 +0000
Manifest next update:     Wed 30 Sep 2026 05:08:41 +0000
Files and hashes:         1: T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl (hash: zof3bKojlhTlUW42Y3wm+QIhsAtcp5tVcoMCPE/M3rg=)
                          2: 13CA64E4C35B11EFA021A243C4F9AE02.roa (hash: sOyNPxScuSAhxypChzwUczRXPq4WV5UpffavEeD3qNM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl
                          rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:08:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135F07, serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C
        Validity
            Not Before: Sep 23 05:08:41 2026 GMT
            Not After : Sep 30 05:08:41 2026 GMT
        Subject: CN=6ab35ed9-a981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:8e:f2:18:97:82:24:1a:94:34:0b:ee:4d:
                    ff:00:fa:c1:be:35:ec:d0:b8:3c:e6:d8:ce:52:12:
                    56:f5:66:c8:fa:bf:89:31:38:e1:cc:c4:43:d8:34:
                    1d:85:dd:ff:34:98:c4:fe:2a:4e:71:da:1d:83:67:
                    85:42:50:ff:74:5e:3e:51:15:71:b9:ae:82:6a:31:
                    2a:63:e8:bd:27:84:ba:08:fb:00:35:0b:0f:78:b3:
                    61:88:ea:69:db:03:c9:10:d6:a5:b8:71:2a:0d:97:
                    03:00:65:24:62:15:6e:26:f5:9e:71:0f:3b:68:41:
                    00:30:09:4e:25:69:3a:d7:c4:ad:e0:fb:c4:71:2d:
                    d2:af:9f:de:54:50:8f:a2:2e:36:73:44:cf:aa:2c:
                    ab:83:73:48:81:fe:46:57:92:fb:f0:13:1c:ab:64:
                    78:11:3e:83:be:eb:f0:8a:1e:91:2d:27:7d:3f:e8:
                    75:ec:77:15:3d:09:09:2f:12:b0:fe:28:11:e1:1e:
                    b8:7d:db:2e:0e:54:c6:90:9c:5b:fc:37:47:e7:41:
                    2d:ef:6e:85:cd:62:0c:8f:d1:5b:8a:95:1a:9f:7b:
                    91:66:e5:09:54:bc:43:23:2c:e9:a9:0f:fa:2f:16:
                    99:aa:82:af:03:5c:74:ca:09:e1:74:7f:ef:4a:85:
                    50:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:25:86:0A:E2:24:DC:1C:91:D2:8E:57:0A:23:A6:D9:A7:7A:67:E4
            X509v3 Authority Key Identifier:
                keyid:4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e6:06:32:3d:57:a9:6d:36:5d:34:94:b4:6d:ff:ff:b6:4d:
         12:87:2f:8b:2b:89:49:3e:df:40:36:5e:dc:05:c3:4c:1f:d6:
         b2:18:e0:08:f4:c4:38:1e:b5:3b:71:60:c5:a6:02:06:bb:a6:
         75:f6:67:92:f6:f3:9b:67:56:9a:4c:90:32:7e:95:ca:89:3a:
         51:0a:8c:a4:b6:43:5e:c9:70:f9:e7:e8:3d:77:13:2b:55:71:
         c8:7d:f5:4b:04:7c:29:d9:2e:5b:f3:05:9b:92:39:38:67:29:
         97:8a:c3:09:a9:fd:f8:32:40:12:bb:7c:16:31:f5:c4:b1:06:
         c1:4c:a9:c0:3f:0e:ac:2d:cd:d6:d6:61:ec:e9:52:77:29:63:
         ca:56:ee:30:12:b9:c7:60:cb:45:01:b9:35:7b:91:d9:4c:d0:
         f3:53:69:65:01:34:a7:68:f7:d5:7d:46:03:d6:ca:ae:75:57:
         7e:3f:36:4a:08:93:04:e2:de:42:8a:40:27:80:0a:da:14:23:
         ae:5c:c5:c3:3d:bf:a9:fb:b4:d4:a4:91:45:03:5f:17:51:67:
         0e:3f:47:e0:88:f8:bc:51:a9:44:b0:c9:3e:2f:de:6b:cb:13:
         f0:9f:09:30:ee:d2:ac:cd:7e:42:ef:d8:6e:46:ed:41:4e:7b:
         a1:49:f5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:53:12 2026 by rpki-client