Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
File:                     dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft (raw, json)
Hash identifier:          QK2eyyr2X9u6t8uujOSN5D9KsAv7ExOzY9xEcr0N0oA=
Subject key identifier:   9F:F4:E0:7A:86:FF:4F:4D:EA:1A:DA:6B:E5:72:1C:C8:C8:A3:49:93
Authority key identifier: 76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2
Certificate issuer:       /CN=A914C651/serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
Certificate serial:       01FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
Manifest number:          01ED
Signing time:             Wed 23 Sep 2026 03:19:02 +0000
Manifest this update:     Wed 23 Sep 2026 03:19:02 +0000
Manifest next update:     Wed 30 Sep 2026 03:19:02 +0000
Files and hashes:         1: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl (hash: Aez1/8Ul9OlRXIyT8iYFj7edfbUaqEtclyIGLKWzeN8=)
                          2: E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa (hash: nqdMcW1cqYt2/q2Bt8CB/e8QcYBAYu8tfj1XxULchaE=)
                          3: 1577D3D4CEED11EEAD68A169C4F9AE02.roa (hash: AQI2bwJCuqKXIuSLIUCmPdyM40gof3FT5HfSxWUNveA=)
                          4: 3DC76C6280F411F18C41EDA965A30FBC.roa (hash: 0oeZmq/i87Ga6txSFdxJgRIePyIHiVNn2wV3/lW+EFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl
                          rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C651, serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
        Validity
            Not Before: Sep 23 03:19:02 2026 GMT
            Not After : Sep 30 03:19:02 2026 GMT
        Subject: CN=6ab34526-18d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6b:38:37:c8:b4:61:78:f2:dc:94:1c:48:83:
                    37:ea:53:59:2a:5d:f7:2c:fd:af:ad:bf:d8:bb:e6:
                    af:4d:7e:1c:23:95:40:05:4d:54:a0:fe:af:c8:c9:
                    47:4c:8f:a4:ed:4d:33:ef:e8:6d:11:aa:ff:ad:c2:
                    83:ad:c0:93:86:51:44:e9:99:19:3e:4d:ce:fa:59:
                    b9:f3:47:57:fe:29:2f:d1:15:a7:04:62:70:8c:73:
                    fa:73:bb:c9:70:cb:17:47:af:7c:0f:93:ee:fc:5e:
                    e4:a7:05:b3:1e:7f:69:1c:89:7b:79:fa:f7:d3:10:
                    c3:6f:10:c8:8e:c0:80:c3:bc:4e:e3:fb:59:36:7a:
                    26:49:6d:fd:06:ba:8c:5b:ed:77:40:18:5e:02:5b:
                    e1:ec:b4:fc:47:e6:07:95:ed:10:3c:6b:e8:bb:1a:
                    e6:8e:6c:1d:15:df:d2:95:20:9f:45:29:6f:9c:f4:
                    06:7e:33:bd:fe:6b:35:e7:3c:3c:a3:df:24:8e:fe:
                    e4:46:06:68:c2:9c:d2:78:be:dc:65:4e:59:90:c7:
                    eb:ae:bc:ab:bb:df:41:50:b2:55:21:ea:08:9a:43:
                    d1:fe:7d:d5:71:07:1f:33:d7:8d:7e:e1:23:7d:a8:
                    37:67:5e:18:26:7a:a4:82:7d:fc:b1:00:c6:e3:1a:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F4:E0:7A:86:FF:4F:4D:EA:1A:DA:6B:E5:72:1C:C8:C8:A3:49:93
            X509v3 Authority Key Identifier:
                keyid:76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ce:b4:be:19:ca:50:b7:da:e1:89:6d:72:26:f9:dd:4e:6f:
         e8:f0:8a:54:e9:54:6d:ed:8f:a1:4b:32:a5:05:5e:f9:ca:ed:
         30:27:ab:3f:ee:ca:06:06:d0:cf:83:7e:09:7d:e3:42:a7:3a:
         57:b4:9d:b5:f6:c1:3b:17:50:02:c6:5a:9a:80:4b:a9:ec:bf:
         da:d2:38:02:29:5c:56:92:45:4d:94:29:a2:c6:12:ed:a8:b3:
         b9:73:0f:52:dd:3d:ea:e7:c8:d2:d4:93:f1:78:62:b7:64:f4:
         dc:82:d6:94:36:02:b4:31:32:0b:29:40:37:d2:7f:e5:bd:57:
         5d:f5:4a:92:ac:04:a9:5e:9b:d8:23:71:23:08:b7:47:1b:f4:
         3b:9a:f1:22:ae:02:58:ab:fa:c7:41:f9:3c:17:4c:76:c6:ac:
         63:9f:1f:42:58:ee:7f:61:d0:a9:2f:62:c5:df:15:1e:0c:35:
         0f:79:44:a8:3b:90:c8:e7:c1:14:31:a0:17:9f:7d:18:33:34:
         4a:38:c4:2a:28:65:e9:99:aa:2a:5f:38:03:9e:8a:05:b2:65:
         67:35:29:18:72:a3:c4:cb:4b:4e:10:50:51:c4:25:5d:00:9f:
         2f:01:a5:ca:ab:5b:d6:7d:86:28:89:79:13:eb:a0:26:de:bd:
         ce:a1:1b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:10:49 2026 by rpki-client