Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
File:                     DjGKapQeYMmQhh2GmyA5SMi0iEE.mft (raw, json)
Hash identifier:          EP3GW7Ml8PKvE35lDJ0MR96Va2netQ+9CeJ3tko1ibM=
Subject key identifier:   8A:23:C0:C8:00:37:B6:56:75:20:80:2B:D5:47:6B:65:C3:1A:A3:59
Authority key identifier: 0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41
Certificate issuer:       /CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841
Certificate serial:       0D11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
Manifest number:          0CFC
Signing time:             Fri 02 Oct 2026 18:37:25 +0000
Manifest this update:     Fri 02 Oct 2026 18:37:25 +0000
Manifest next update:     Fri 09 Oct 2026 18:37:25 +0000
Files and hashes:         1: DjGKapQeYMmQhh2GmyA5SMi0iEE.crl (hash: gP2pJh2cltfR4tvt9H++mv/pgktUSjMaZo2tmWe/dCw=)
                          2: 1776D6CE16B111EAAD7D084AC4F9AE02.roa (hash: M9hrVMTzZX+RhBo3mKRURH0NS+fV+W9LRBlbRm5uCWM=)
                          3: 6CE24548425E11EAB623F258C4F9AE02.roa (hash: LCPMT0hgRgxkY6g8i6rd3I6r5PrzQRSGvYCOXRlNG28=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl
                          rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 18:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3345 (0xd11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137730, serialNumber=0E318A6A941E60C990861D869B203948C8B48841
        Validity
            Not Before: Oct  2 18:37:25 2026 GMT
            Not After : Oct  9 18:37:25 2026 GMT
        Subject: CN=6abff9e5-a18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ff:3f:ab:f2:ca:44:45:af:46:a0:a8:ff:35:
                    18:fe:83:9c:74:63:75:21:db:37:b7:e8:ba:65:38:
                    f7:ea:8e:0a:cd:94:7f:d8:d1:0a:b5:f0:22:18:02:
                    c7:12:3f:9f:7f:4f:ed:b7:1f:f1:1c:37:91:25:7e:
                    66:80:6f:04:8e:2f:fe:be:2f:24:96:ab:ad:40:38:
                    c6:fc:66:59:38:fd:3a:c1:be:97:65:9f:d7:84:30:
                    9e:12:85:75:00:09:32:f0:7c:d1:70:da:d4:79:0b:
                    eb:5f:de:10:db:76:8b:0e:44:1a:69:22:23:ed:39:
                    48:c5:51:02:27:82:ec:33:17:a7:34:b8:e4:17:ef:
                    40:7e:4e:45:31:d6:4b:a1:cb:25:0e:3a:d4:6f:fa:
                    23:1b:7e:ae:be:27:4c:41:a2:4c:76:4d:45:30:46:
                    89:36:3a:47:43:c2:d8:bd:33:f0:7b:91:24:b2:4f:
                    88:70:57:df:87:c3:95:47:a7:63:4d:a0:33:5e:de:
                    ab:90:86:bf:77:46:fd:f3:30:78:d8:e7:06:c7:38:
                    a1:c7:5e:c5:0d:76:8e:f6:38:89:4f:7e:db:0f:c1:
                    35:62:54:0f:55:a2:b6:c2:cd:0e:2a:77:cc:d0:36:
                    af:ec:63:72:06:5b:f2:b4:81:56:cb:7c:b2:85:bf:
                    0c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:23:C0:C8:00:37:B6:56:75:20:80:2B:D5:47:6B:65:C3:1A:A3:59
            X509v3 Authority Key Identifier:
                keyid:0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ad:29:ec:90:94:69:68:27:ab:68:01:23:83:b6:71:67:0b:
         e9:65:34:44:33:05:3d:86:20:fc:28:5d:91:a1:56:bb:8c:86:
         71:2e:f5:49:40:89:42:dc:f3:e9:8d:3e:cf:bc:69:fd:de:6a:
         ca:ec:b8:55:49:8a:2a:a6:f1:f9:2f:48:f7:fc:49:60:85:b7:
         5e:40:6b:90:f9:70:08:3b:95:ec:3c:98:23:d1:a7:bb:cb:db:
         13:40:5d:7d:e6:cd:5f:55:93:d8:8f:53:4f:a4:78:68:2a:de:
         81:31:0f:1b:33:23:94:0a:af:21:3a:56:5d:d3:dd:79:8c:8c:
         65:98:8d:78:6d:9a:35:fc:0c:78:4b:83:f9:2e:6f:03:c9:61:
         92:86:65:59:e8:c8:18:6d:7b:13:45:41:44:ae:47:3b:ac:f4:
         c0:b3:12:32:27:16:f2:67:6e:2f:d8:d1:66:93:9c:a3:89:02:
         d5:08:34:8c:5e:9f:e8:d3:f4:23:ef:33:0f:85:10:f4:a5:57:
         63:5c:45:a3:b5:00:73:f6:de:e4:a8:1b:3c:52:f5:ec:5a:ab:
         48:99:6c:e5:33:50:a1:dc:93:8a:ed:0f:3f:e1:ef:4e:67:66:
         29:3d:1e:de:d6:ff:f7:01:87:4c:f4:a9:69:a5:36:10:16:78:
         68:a3:da:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:24:03 2026 by rpki-client