Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft
File:                     d31UDhYfpnH7JFijP_5L8z1qcBU.mft (raw, json)
Hash identifier:          WkRLLZbd1ZM/zRvY7lxr+6YUdXUL7plZ/gk4R/Jdtsc=
Subject key identifier:   9C:1E:DC:99:9F:42:94:E5:3B:D2:2E:8A:41:3B:2E:08:DE:8A:4F:99
Authority key identifier: 77:7D:54:0E:16:1F:A6:71:FB:24:58:A3:3F:FE:4B:F3:3D:6A:70:15
Certificate issuer:       /CN=A913BA27/serialNumber=777D540E161FA671FB2458A33FFE4BF33D6A7015
Certificate serial:       FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft
Manifest number:          F7
Signing time:             Wed 23 Sep 2026 06:07:14 +0000
Manifest this update:     Wed 23 Sep 2026 06:07:14 +0000
Manifest next update:     Wed 30 Sep 2026 06:07:14 +0000
Files and hashes:         1: d31UDhYfpnH7JFijP_5L8z1qcBU.crl (hash: d/EeHJmil6Axe7/ZoPhSP9UlnPfBi9ynntjg0RdjecA=)
                          2: 71B7688645AB11F0949A471EC4F9AE02.roa (hash: ke0eM4iCkX12hZuJQbpYZP0Prlr3aNWgiqlFHxWSZPI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.crl
                          rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BA27, serialNumber=777D540E161FA671FB2458A33FFE4BF33D6A7015
        Validity
            Not Before: Sep 23 06:07:14 2026 GMT
            Not After : Sep 30 06:07:14 2026 GMT
        Subject: CN=6ab36c92-da57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:11:e9:6f:cf:90:43:ea:12:91:b4:8b:01:40:
                    fd:59:85:94:b0:d7:76:27:c3:a2:5e:59:3d:55:db:
                    45:f0:fe:95:1f:8b:1f:ae:ac:fb:a8:0d:87:b3:bf:
                    ac:9e:74:11:4c:4a:52:c8:f2:52:fd:ab:e6:3c:13:
                    fd:41:e8:7c:f0:bf:e9:7a:64:cf:c0:e2:08:61:0a:
                    fc:0e:eb:19:18:bc:8a:61:24:9f:63:f2:ac:aa:11:
                    48:83:df:43:8a:1e:a4:ed:a8:0c:0c:61:d2:2d:71:
                    9f:93:2f:40:45:99:03:90:f0:60:40:30:77:a8:1f:
                    22:12:33:65:b2:ad:84:51:28:d0:92:5a:b7:66:ca:
                    56:95:e1:19:ae:b7:94:42:bc:59:7f:14:b3:69:cb:
                    77:2d:2d:8d:ed:38:a6:e3:1b:d2:ba:74:a6:c3:46:
                    57:b2:7a:fe:d3:f3:74:87:e7:25:a2:d3:ac:79:31:
                    2e:26:10:a9:95:b1:2e:df:70:f3:07:dc:e0:72:2f:
                    fa:ba:30:3b:17:7a:d7:78:f2:4d:d5:1e:3c:c5:55:
                    12:72:c8:e5:76:2e:47:84:b1:46:d6:81:b6:ea:a4:
                    37:4e:19:0e:84:10:3b:74:80:44:80:f6:53:89:5d:
                    a2:60:be:29:62:20:67:30:eb:26:26:2a:73:a5:30:
                    95:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1E:DC:99:9F:42:94:E5:3B:D2:2E:8A:41:3B:2E:08:DE:8A:4F:99
            X509v3 Authority Key Identifier:
                keyid:77:7D:54:0E:16:1F:A6:71:FB:24:58:A3:3F:FE:4B:F3:3D:6A:70:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:42:25:7c:eb:0a:26:7b:2c:49:87:34:ac:b0:ae:42:f0:c8:
         a1:98:f6:c7:e5:8f:c4:76:7b:e0:09:dd:46:f1:79:9f:ec:8c:
         cc:22:b7:52:33:9c:65:2c:0e:77:d9:9a:80:99:66:02:3e:3e:
         68:7f:77:63:66:30:d0:b2:8f:1e:bc:d6:ce:58:aa:10:70:f9:
         45:58:cf:0b:35:eb:7b:9a:b6:39:b0:2e:80:0a:27:4f:37:7f:
         4f:db:80:85:52:c0:3f:e5:5d:4b:80:44:45:8f:e4:1c:dd:51:
         ab:bb:a4:d1:53:87:6d:87:de:d6:68:db:6f:2a:a9:0f:f9:ed:
         c9:e3:2f:ae:dd:dd:e2:25:82:31:75:f3:6a:e6:97:a2:ea:c7:
         b1:57:20:0f:d2:0f:ec:03:b2:65:95:2a:97:bc:23:99:96:cd:
         19:6b:b9:15:db:13:d3:cb:f5:6f:9d:56:fb:7a:2b:47:09:da:
         ac:3f:cd:b1:19:5e:f7:96:3b:65:47:68:03:04:25:fa:a9:8c:
         25:91:4d:13:09:e1:1e:0b:23:cd:5b:7e:38:ca:1e:bb:af:ba:
         eb:08:2d:94:f5:aa:82:c9:85:14:89:8f:70:ed:50:82:60:85:
         e9:94:d8:b7:1f:75:0e:73:d8:cb:a0:76:b5:19:06:ac:b2:fc:
         d7:87:d4:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0JBMjcxMTAvBgNVBAUTKDc3N0Q1NDBFMTYxRkE2NzFGQjI0NThBMzNGRkU0QkYz
M0Q2QTcwMTUwHhcNMjYwOTIzMDYwNzE0WhcNMjYwOTMwMDYwNzE0WjAYMRYwFAYD
VQQDEw02YWIzNmM5Mi1kYTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsBHpb8+QQ+oSkbSLAUD9WYWUsNd2J8OiXlk9VdtF8P6VH4sfrqz7qA2Hs7+s
nnQRTEpSyPJS/avmPBP9Qeh88L/pemTPwOIIYQr8DusZGLyKYSSfY/KsqhFIg99D
ih6k7agMDGHSLXGfky9ARZkDkPBgQDB3qB8iEjNlsq2EUSjQklq3ZspWleEZrreU
QrxZfxSzact3LS2N7Tim4xvSunSmw0ZXsnr+0/N0h+clotOseTEuJhCplbEu33Dz
B9zgci/6ujA7F3rXePJN1R48xVUScsjldi5HhLFG1oG26qQ3ThkOhBA7dIBEgPZT
iV2iYL4pYiBnMOsmJipzpTCVlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJwe3Jmf
QpTlO9IuikE7Lgjeik+ZMB8GA1UdIwQYMBaAFHd9VA4WH6Zx+yRYoz/+S/M9anAV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkEyNy9FQTRFNjY5QzQ1
OEMxMUYwQjJCRUI2NERDNEY5QUUwMi9kMzFVRGhZZnBuSDdKRmlqUF81TDh6MXFj
QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QzMVVEaFlmcG5IN0pGaWpQXzVMOHoxcWNCVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QkEyNy9FQTRFNjY5QzQ1OEMxMUYwQjJCRUI2NERDNEY5QUUwMi9kMzFVRGhZZnBu
SDdKRmlqUF81TDh6MXFjQlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArEIlfOsKJnssSYc0rLCuQvDIoZj2x+WPxHZ74AndRvF5n+yMzCK3UjOcZSwO
d9magJlmAj4+aH93Y2Yw0LKPHrzWzliqEHD5RVjPCzXre5q2ObAugAonTzd/T9uA
hVLAP+VdS4BERY/kHN1Rq7uk0VOHbYfe1mjbbyqpD/ntyeMvrt3d4iWCMXXzauaX
ourHsVcgD9IP7AOyZZUql7wjmZbNGWu5FdsT08v1b51W+3orRwnarD/NsRle95Y7
ZUdoAwQl+qmMJZFNEwnhHgsjzVt+OMoeu6+66wgtlPWqgsmFFImPcO1QgmCF6ZTY
tx91DnPYy6B2tRkGrLL814fUUQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 14:33:46 2026 by rpki-client