Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
File:                     dEjFUfV_GGOM8awfxMv-1D3vT64.mft (raw, json)
Hash identifier:          vL1XkYji5KBHDRLB963R0uZsj+osoIeCyMWGbsnpD7k=
Subject key identifier:   EF:FB:E5:2F:70:0C:A6:93:0E:B3:38:7B:93:67:80:FB:64:5B:FD:CB
Authority key identifier: 74:48:C5:51:F5:7F:18:63:8C:F1:AC:1F:C4:CB:FE:D4:3D:EF:4F:AE
Certificate issuer:       /CN=A914354F/serialNumber=7448C551F57F18638CF1AC1FC4CBFED43DEF4FAE
Certificate serial:       AB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEjFUfV_GGOM8awfxMv-1D3vT64.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
Manifest number:          A4
Signing time:             Wed 23 Sep 2026 07:07:26 +0000
Manifest this update:     Wed 23 Sep 2026 07:07:25 +0000
Manifest next update:     Wed 30 Sep 2026 07:07:25 +0000
Files and hashes:         1: dEjFUfV_GGOM8awfxMv-1D3vT64.crl (hash: yJkSdP4xNmAtjGvXNWsSWfat7KOORxV63NchKZADPDE=)
                          2: 8EF088C4D77311F0882D4FBB79D3641D.roa (hash: o1fiXCjFDXjKshZmXjJ558GbsN9d78xYw5aDtUQ+m18=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.crl
                          rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEjFUfV_GGOM8awfxMv-1D3vT64.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914354F, serialNumber=7448C551F57F18638CF1AC1FC4CBFED43DEF4FAE
        Validity
            Not Before: Sep 23 07:07:25 2026 GMT
            Not After : Sep 30 07:07:25 2026 GMT
        Subject: CN=6ab37aae-3127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fe:a2:f9:54:de:89:52:9d:1f:09:04:cb:31:
                    23:b7:4a:2c:ab:32:65:5d:42:fa:33:c0:22:4e:57:
                    0d:f0:38:04:ee:a5:0f:3e:bc:b1:da:40:b4:c8:a8:
                    d2:8e:d4:d5:ff:e7:5b:45:82:51:b9:10:b2:b6:e3:
                    ee:4a:e5:84:bf:fa:f1:f2:28:f8:43:21:26:0f:94:
                    6b:2d:31:b1:a2:08:ad:73:2b:c8:8f:34:40:fe:21:
                    da:9b:0c:a9:e3:77:73:fd:ba:1a:7c:6f:49:8c:74:
                    97:f8:3a:d7:33:23:02:48:46:d3:cb:f2:c7:bb:88:
                    9a:7c:47:2c:c1:b5:38:f3:3a:99:78:49:13:6d:19:
                    01:8e:04:9d:14:25:c8:5c:57:f8:1d:23:dc:6f:1c:
                    b7:33:21:cd:a6:44:af:57:20:34:5f:ba:ef:6a:01:
                    64:69:60:04:11:a5:f0:9a:ec:02:af:4b:6b:33:55:
                    57:a6:52:ba:52:4f:19:7c:98:2c:80:52:8d:cc:3d:
                    de:30:5d:ac:d7:95:79:a0:87:8c:a0:7c:ec:33:b9:
                    38:09:a4:f2:e7:56:9e:e5:71:63:ea:3a:b5:8e:31:
                    a4:65:e6:1b:82:4d:8d:a9:ad:89:a7:10:30:2e:d5:
                    0d:f6:b0:63:ab:1e:88:02:4b:13:09:3e:04:22:86:
                    54:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FB:E5:2F:70:0C:A6:93:0E:B3:38:7B:93:67:80:FB:64:5B:FD:CB
            X509v3 Authority Key Identifier:
                keyid:74:48:C5:51:F5:7F:18:63:8C:F1:AC:1F:C4:CB:FE:D4:3D:EF:4F:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEjFUfV_GGOM8awfxMv-1D3vT64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:5a:41:dd:a1:2b:5d:d7:db:a8:90:e6:03:0a:0c:1f:a7:22:
         6d:f3:fb:87:9b:ae:e6:96:44:d9:57:72:81:fc:3a:cb:23:ce:
         e5:27:b3:83:df:6f:11:a3:1f:8c:19:8a:49:c6:11:08:a0:bb:
         a3:b7:b3:04:7e:6a:b5:4a:21:e9:40:50:61:f2:c5:7c:db:69:
         59:21:8d:39:98:1d:02:0f:ae:1c:4c:43:56:8a:1d:85:5b:5a:
         e1:25:cb:8a:49:65:46:2b:f8:f6:22:a6:72:dd:52:b1:78:52:
         40:ee:66:d4:d8:a0:5a:61:71:3a:88:6f:9e:9d:68:f7:47:a6:
         c2:d6:67:62:cb:7c:01:ad:35:1e:1d:07:0b:37:64:5e:3a:c4:
         ca:87:b5:15:fb:d9:6d:7b:d4:af:66:be:ab:6a:ef:08:52:d2:
         52:ad:75:77:ba:35:9f:82:d7:57:ea:73:7f:04:ae:de:bf:0c:
         df:f7:c4:7a:ef:fa:a3:1e:58:99:4f:a6:ae:aa:df:9f:cb:b1:
         94:49:a9:36:4e:d0:27:bb:c3:f9:57:b4:aa:e3:8e:cc:fd:a1:
         60:f6:12:fe:f6:9b:b1:38:8e:3b:e6:d9:14:7c:65:27:39:b7:
         eb:d1:e3:6f:23:62:34:e2:ae:22:b3:c2:4b:88:6d:e3:57:99:
         e5:fe:cc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:24:23 2026 by rpki-client