Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
File:                     iX4CzNjrQDmng9AjecVf7p8M7lk.mft (raw, json)
Hash identifier:          dEHmCQuR8KuYIMpjiBAJZqt7CEnFRMi4rA3+Y5k5D7c=
Subject key identifier:   8C:4B:3E:91:65:3E:F5:74:74:AD:8A:91:16:86:13:BE:95:22:29:0D
Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
Certificate issuer:       /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Certificate serial:       0923
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
Manifest number:          08EF
Signing time:             Thu 24 Sep 2026 15:52:59 +0000
Manifest this update:     Thu 24 Sep 2026 15:52:58 +0000
Manifest next update:     Thu 01 Oct 2026 15:52:58 +0000
Files and hashes:         1: iX4CzNjrQDmng9AjecVf7p8M7lk.crl (hash: E3kuzkbm2rGV4SG+9P4T+CjdSXB/kjbccQwdqvN/kRM=)
                          2: 6205FF52113D11F1BF40122E203D8C67.roa (hash: kciMR3tmrpplYDgQ9Hz1Pp43bk8E8QemNstS3Qp+YXQ=)
                          3: E19826A0EAA511EBA4C1F32CC4F9AE02.roa (hash: Hn2QIPMqRjmWgqhNxIKc+CdGL22owDCN1yqXrEf97OM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 15:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2339 (0x923)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207, serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
        Validity
            Not Before: Sep 24 15:52:58 2026 GMT
            Not After : Oct  1 15:52:58 2026 GMT
        Subject: CN=6ab5475b-9359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:12:ae:00:73:e4:5d:8e:9a:a2:22:c7:c3:d1:
                    4a:dc:20:4b:42:1b:d3:e1:40:66:28:d1:83:cc:23:
                    32:e9:3d:60:d7:c4:37:68:b4:06:a7:d6:a0:0a:ac:
                    3b:fe:ab:b4:06:dd:ab:33:bc:5b:ce:8a:72:86:e6:
                    a0:bb:e2:80:57:52:0c:b8:6a:3a:6a:d2:eb:5a:ce:
                    9c:66:b2:25:99:d7:d2:64:11:19:22:fd:3b:ef:59:
                    fc:f4:65:33:1c:78:0e:20:c1:1c:84:a0:a1:4e:8a:
                    ef:2e:60:da:8c:ed:93:98:0b:24:29:40:c6:39:36:
                    c2:40:72:36:57:30:3c:47:22:28:df:7a:3c:e5:a3:
                    4a:e9:12:64:b1:9d:52:be:01:20:65:6a:9d:0b:c8:
                    80:03:34:64:3c:48:8a:b6:1c:74:ba:1d:55:f9:25:
                    0d:3b:6f:d0:7a:12:c8:6b:08:9d:9b:1f:01:2a:27:
                    97:d2:16:0c:96:7f:b0:39:b3:4e:55:bf:79:a4:15:
                    6f:22:a4:46:a3:1a:63:87:d3:15:e9:b9:6f:15:2e:
                    9b:d9:66:6a:30:19:c2:a2:2b:68:81:6a:00:32:ac:
                    d7:04:a5:19:2c:0d:49:5d:43:0e:53:8d:bb:df:71:
                    8b:52:6e:3e:9a:ff:c9:8d:99:d9:e7:ac:4b:f8:8e:
                    72:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4B:3E:91:65:3E:F5:74:74:AD:8A:91:16:86:13:BE:95:22:29:0D
            X509v3 Authority Key Identifier:
                keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a1:0e:2a:c7:7e:b0:6f:6c:df:d1:d8:3c:0c:67:76:86:d2:
         2b:bf:cf:7e:5a:f1:03:5d:72:23:ee:2a:4e:00:05:8b:10:89:
         43:1b:89:cf:c3:e9:3e:b6:89:c3:48:94:5e:ad:73:f2:6b:4b:
         77:47:69:08:0c:0c:25:9a:0a:62:05:f8:2c:76:3d:3d:05:8c:
         ff:37:29:60:e3:d5:d8:4c:cd:e7:10:ee:d4:ff:0f:27:46:2e:
         bf:8e:62:a3:25:3b:7f:af:70:58:a5:a0:cd:84:6d:46:42:af:
         b8:84:cd:8d:2c:2d:84:18:2e:06:d6:36:7d:3b:a5:4b:c4:cb:
         de:00:62:2f:20:45:ee:f9:40:12:c3:f3:e9:19:43:70:b6:d1:
         73:f7:51:38:ff:56:5e:84:2a:1b:38:9e:bf:d2:1f:9d:85:e5:
         28:53:a2:d9:99:e3:76:2a:6b:33:90:e7:b3:32:87:cf:d6:8d:
         ae:c2:cf:93:02:7e:43:3d:fb:74:59:06:1d:96:84:1f:b8:b8:
         53:fa:ba:2a:0b:64:fd:e6:75:ed:6c:e2:7a:bc:04:aa:c6:33:
         a2:1a:bb:c6:d3:8f:4a:9c:1e:a1:8a:38:c8:a5:1f:b2:dc:cc:
         b8:ce:64:e3:25:e2:47:f7:af:40:64:4b:92:95:19:d1:67:45:
         6a:2c:81:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:33:35 2026 by rpki-client