Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft
File:                     3owRZVEEK-jnJkvttYLwo3e7JL0.mft (raw, json)
Hash identifier:          iQr6pvQJGyLl2M71gld/oVkYUNYDWg838S2dEpdXG1Q=
Subject key identifier:   F4:A9:8C:74:D9:F7:1C:76:84:BE:E5:9C:85:58:95:97:2D:31:3E:53
Authority key identifier: DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD
Certificate issuer:       /CN=A91471A0/serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft
Manifest number:          9B
Signing time:             Tue 29 Sep 2026 08:01:04 +0000
Manifest this update:     Tue 29 Sep 2026 08:01:04 +0000
Manifest next update:     Tue 06 Oct 2026 08:01:04 +0000
Files and hashes:         1: 3owRZVEEK-jnJkvttYLwo3e7JL0.crl (hash: qZ9tCZSQ/9YHspQQ0ZKXjAheG9GT6flt9GObywKPQ1U=)
                          2: A4A022041D1B11F188B066AA103D8C67.roa (hash: 0UiK+7UG4gazEA6M9ztbhs59f2RFRj/xH1mxg/FNT2U=)
                          3: 947595301D1B11F1B62EA9A5103D8C67.roa (hash: fyVIn40fjMUq1jfx5eUqoEzNu3Qfs0MIIOR0mSpXHec=)
                          4: 9572FAF41D1B11F1B62EA9A5103D8C67.roa (hash: YxVjuj/u6cFjLolYA4vHKI/ekIe2/ZI5hcZUBzFakNE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl
                          rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 08:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91471A0, serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD
        Validity
            Not Before: Sep 29 08:01:04 2026 GMT
            Not After : Oct  6 08:01:04 2026 GMT
        Subject: CN=6abb7040-edc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a3:57:9e:46:fa:e2:0c:ce:b3:8e:a4:ca:4d:
                    98:b4:1b:02:ec:8a:6c:26:95:ef:42:2c:7c:de:6c:
                    43:d2:e1:1d:15:b6:b0:ec:11:9f:90:b3:8f:4a:85:
                    62:9b:d1:fb:cd:46:5d:02:7f:22:02:e7:71:76:3e:
                    de:cc:39:1c:42:6d:56:16:78:ca:9d:fe:bc:7e:ec:
                    8a:dd:28:d5:20:0e:71:33:19:a8:78:00:75:ed:04:
                    a1:86:fa:4c:c9:9a:b7:9f:9a:d7:de:2e:ce:ba:d8:
                    40:47:bb:99:fa:54:6d:81:66:c5:a3:cd:98:15:0f:
                    8f:78:47:bf:75:17:91:5a:d2:85:cf:6f:c6:0b:f5:
                    71:d5:61:1f:5f:62:a5:d8:d2:41:c0:f1:be:0f:71:
                    b0:95:2d:bd:99:76:db:2b:b9:d0:c4:e1:29:3c:b0:
                    b0:f1:6c:a3:8a:26:1c:26:71:f9:69:22:f9:a0:83:
                    de:19:30:a9:eb:2f:51:2f:45:06:6a:22:6b:d8:55:
                    83:a1:57:3f:a2:79:e5:4a:ec:d5:f4:1d:36:c3:24:
                    83:c2:b2:53:76:02:fd:22:c5:6f:51:34:8e:04:a2:
                    34:5d:20:0a:e1:2c:66:85:0b:1d:07:24:78:88:10:
                    98:20:ec:e9:dd:7a:59:28:53:6c:f8:38:a0:74:c8:
                    9b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A9:8C:74:D9:F7:1C:76:84:BE:E5:9C:85:58:95:97:2D:31:3E:53
            X509v3 Authority Key Identifier:
                keyid:DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ab:f2:55:cd:87:ad:0c:d4:a2:1c:08:11:8e:30:7b:e2:d0:
         c0:66:26:2b:3c:6b:f0:69:33:09:34:bf:ca:15:b1:e3:7e:0a:
         26:ed:b5:6b:bf:90:d9:ab:15:f4:09:8f:f9:99:10:85:4f:f7:
         24:70:cc:a6:df:2c:56:ac:a5:b6:b1:b2:65:c9:f4:60:b0:42:
         67:ac:87:c0:ba:d4:da:60:fc:14:14:a4:88:35:54:45:e8:49:
         9f:06:bf:fe:70:67:93:1b:a6:f3:17:92:d3:b3:c6:3c:47:0d:
         72:a7:8e:dd:95:e3:4e:93:6d:eb:0b:24:5e:17:67:3c:fb:6f:
         57:e1:61:71:e9:d6:5b:80:18:27:4e:38:c2:b4:ee:68:2b:84:
         be:ad:51:83:60:72:28:b5:bb:b6:0a:b2:5c:ad:55:27:d8:d3:
         a3:37:d2:1e:e0:ff:fc:4a:42:7c:05:c8:35:92:9c:f5:cb:24:
         b5:40:36:a1:87:6c:99:32:da:48:0a:f4:fc:c5:d6:44:19:73:
         59:42:cd:76:23:85:3d:65:e9:4f:e1:5b:c7:4a:49:65:eb:44:
         b3:43:90:bb:32:a6:c1:fa:78:33:d3:ff:f1:cc:3e:0c:4d:c8:
         cb:8d:7d:06:46:4e:c7:ae:d8:ab:79:71:0d:c4:b4:50:df:c0:
         00:40:fa:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 23:45:28 2026 by rpki-client