Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
File:                     PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft (raw, json)
Hash identifier:          vdL83Zbp9q3T1zF3e7mC/GTDEeygkDiRMSogO/h8QnE=
Subject key identifier:   6C:EA:6F:1F:99:1A:31:4C:A1:A4:9E:E6:C8:E0:7A:AE:9D:57:B4:C7
Authority key identifier: 3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98
Certificate issuer:       /CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198
Certificate serial:       092B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
Manifest number:          08D6
Signing time:             Thu 24 Sep 2026 20:39:46 +0000
Manifest this update:     Thu 24 Sep 2026 20:39:46 +0000
Manifest next update:     Thu 01 Oct 2026 20:39:46 +0000
Files and hashes:         1: PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl (hash: jSRaXezHDOk8sXNBVZNF8dmGXBBBsMhTgvfDqeLsy4M=)
                          2: DD8B40E41A7E11F098A37378C4F9AE02.roa (hash: +7lOcEWjzdH/XplyA+gRPVuruxEgb/MpWHfUAeK3/gQ=)
                          3: CD1E94321A7D11F09A63C576C4F9AE02.roa (hash: izTNp/JGEMDm9FjJb1Cp+fcuTZ2LOC/hwPNrIFeFyK4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl
                          rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 20:39:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2347 (0x92b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91450A4, serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198
        Validity
            Not Before: Sep 24 20:39:46 2026 GMT
            Not After : Oct  1 20:39:46 2026 GMT
        Subject: CN=6ab58a92-29f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a7:b6:68:55:5b:34:c1:05:8e:58:60:24:d5:
                    45:99:3e:4b:3b:86:4e:75:fb:84:3c:dd:fd:8b:5f:
                    e3:1b:58:ee:71:81:2c:c1:1e:a1:59:68:ed:15:b2:
                    68:86:a0:9f:34:92:95:22:4f:05:a1:af:d3:34:3a:
                    86:8b:e4:98:87:80:5d:3b:53:fe:c9:23:72:73:4c:
                    56:31:20:ec:38:a4:12:fe:88:ac:02:37:dd:0c:84:
                    8b:f3:14:db:85:06:6d:a3:65:39:f2:0f:ce:2e:19:
                    fb:09:24:73:09:36:16:41:d5:87:2a:77:04:be:6b:
                    52:22:18:ab:d4:8d:bb:dd:ef:a4:75:23:eb:41:85:
                    9c:70:a8:4a:d5:2e:bf:7a:31:1e:eb:26:34:65:00:
                    6e:a9:5d:1b:d7:47:e4:5d:ef:cc:0b:7b:74:8e:e9:
                    11:89:5e:61:cd:71:5e:42:c8:13:6e:8f:b8:16:80:
                    96:47:68:40:87:79:3c:29:92:db:53:55:08:8c:8f:
                    1e:fc:37:a1:f9:76:75:26:a6:69:fb:6e:4e:d8:7d:
                    4f:e6:96:83:81:92:86:03:af:a3:48:03:af:62:5f:
                    69:a7:a3:da:a4:8c:43:c7:45:b1:83:07:99:b3:d8:
                    c7:20:57:cf:d3:94:1e:98:ed:0e:63:99:0e:0e:ae:
                    90:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:EA:6F:1F:99:1A:31:4C:A1:A4:9E:E6:C8:E0:7A:AE:9D:57:B4:C7
            X509v3 Authority Key Identifier:
                keyid:3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:4d:4b:29:54:f6:0e:ac:b0:e7:28:e7:62:98:00:da:83:c8:
         03:0d:af:f9:19:14:9a:0d:ac:3d:d5:1c:34:87:af:3d:51:b4:
         7f:93:e1:2f:15:78:c8:c0:30:67:bd:9b:26:43:73:0c:fc:c9:
         79:79:f5:6f:0b:87:a2:08:38:6a:b0:ba:99:8a:86:05:cc:d9:
         a5:d2:80:a3:09:47:2d:48:8f:d4:0b:93:29:48:4c:4d:b3:83:
         71:34:9d:9b:3a:1e:da:59:70:1d:23:89:09:5d:1b:45:c5:7e:
         e8:40:d7:86:16:b3:de:88:f6:14:7a:28:3e:d1:23:8c:e7:86:
         41:7b:f6:e0:d5:2e:f3:07:fa:8b:72:6a:a0:4f:e1:4c:d2:f3:
         08:4a:d8:b1:9c:18:37:6c:01:ce:21:ed:f9:c0:bd:7e:4a:2d:
         be:ae:ae:6e:65:7f:72:14:29:31:4d:ef:fb:e3:05:f8:7e:5e:
         16:16:3f:da:05:47:1a:ba:dd:2e:20:28:8d:58:6a:c8:b7:ad:
         59:d8:e9:20:d0:b0:56:1a:ca:84:33:4b:b3:01:07:5d:f3:27:
         67:6c:e8:d8:fc:62:ae:60:23:6e:cb:af:fc:c0:cf:25:e7:1d:
         e6:94:93:f0:ce:82:23:cf:b3:6b:c8:60:e1:50:89:49:d5:66:
         dc:66:9a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:23:49 2026 by rpki-client