Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
File:                     Ad9hVyR3ojDnn48oz91tKDd_Iis.mft (raw, json)
Hash identifier:          P3//Qf+AqiPcf86KDy+5Kk3W0eXqJYipn0HjLr4SaN0=
Subject key identifier:   17:3D:84:D6:1F:3A:30:0A:CE:9D:0F:29:78:3E:F2:45:A2:A1:76:A2
Authority key identifier: 01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B
Certificate issuer:       /CN=A914E5AE/serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
Certificate serial:       0625
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
Manifest number:          0615
Signing time:             Tue 22 Sep 2026 22:34:37 +0000
Manifest this update:     Tue 22 Sep 2026 22:34:36 +0000
Manifest next update:     Tue 29 Sep 2026 22:34:36 +0000
Files and hashes:         1: Ad9hVyR3ojDnn48oz91tKDd_Iis.crl (hash: N/mxCC467btFy5YZ9Oytjtn7ODVRfYDh/a7lHoVtlw4=)
                          2: 933818FEAA5211F1818066A45B11F970.roa (hash: j2wMajzc8ldGDlXfJaOqXpoNKnbKY5MPta10zYBoEMs=)
                          3: CC3EDFDEAA5211F1BB7371B85B11F970.roa (hash: Ms0xxfw0xPuWdFx2As656pXikuhQssH+FnkLgBCuV6M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl
                          rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1573 (0x625)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E5AE, serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
        Validity
            Not Before: Sep 22 22:34:36 2026 GMT
            Not After : Sep 29 22:34:36 2026 GMT
        Subject: CN=6ab3027d-dd53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ed:1c:83:f8:c9:58:8b:ef:a5:76:31:e8:dd:
                    bd:23:0d:06:10:ce:41:64:22:16:7d:96:04:07:5f:
                    99:9e:11:c6:8c:21:60:8e:00:d9:92:ca:68:ec:1d:
                    5f:67:80:4d:7f:fa:80:c8:f1:e8:b6:fd:8f:f2:56:
                    78:de:da:96:89:5c:48:5e:6c:8a:6e:19:f8:13:d2:
                    5b:59:05:b3:d5:fb:84:10:06:c0:ae:b9:10:e6:cf:
                    a7:45:23:80:5c:4c:cc:21:d4:19:50:ae:7b:e1:44:
                    f3:2f:5f:32:04:bb:9a:31:b4:49:7f:6d:e9:df:3c:
                    69:cd:94:d0:7d:1c:0d:2c:4e:9c:97:95:1e:63:b1:
                    e4:1f:4b:b4:94:92:50:8a:ee:cd:41:7a:1a:36:60:
                    59:20:3a:5a:f0:f6:21:12:d6:44:b0:10:43:72:80:
                    b8:89:97:8e:62:50:3b:19:b4:6d:d8:2f:38:38:6e:
                    2a:f7:c6:c1:43:80:2a:18:6a:07:a5:56:73:9e:91:
                    97:5b:2b:a3:7a:de:66:cc:c3:e5:7e:d8:4a:38:47:
                    8a:77:24:99:7c:c1:fa:35:96:fc:78:12:54:f5:4d:
                    13:4b:6b:a3:19:42:06:32:98:67:97:fe:ca:9c:97:
                    df:48:23:f0:7a:2b:54:b1:6f:d7:c3:d5:99:b9:c4:
                    a1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3D:84:D6:1F:3A:30:0A:CE:9D:0F:29:78:3E:F2:45:A2:A1:76:A2
            X509v3 Authority Key Identifier:
                keyid:01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:81:bf:9a:51:27:05:bc:38:e2:43:d9:40:ed:89:67:dd:31:
         ce:f6:45:21:83:33:54:be:7f:8b:a0:16:5a:00:5c:0c:5b:9e:
         29:1e:4f:00:dd:f4:05:f6:8d:1c:c1:4e:46:41:b4:08:c6:0e:
         39:e8:d2:04:2a:2d:03:e9:94:bb:c1:af:c3:a8:42:8c:7e:5a:
         ee:3d:e1:64:e0:0b:ff:91:0b:19:07:e2:e8:35:a1:a7:72:3f:
         71:7b:48:e8:86:e2:b2:67:21:ca:51:5c:62:a4:5f:d7:5a:97:
         92:c1:2d:a0:5d:94:e7:35:a1:c0:b0:59:13:c7:87:3b:69:0f:
         8b:9f:5b:d3:43:9e:5e:91:cf:98:cb:81:8e:e3:ff:77:4c:2e:
         fd:f5:91:68:36:02:83:b4:47:66:c1:fa:a5:2a:77:6f:3b:25:
         10:5a:d8:ae:62:49:41:42:f9:2d:49:33:e7:e9:8e:ad:75:81:
         34:e2:de:7a:d0:c5:e1:7b:72:53:0c:16:d3:31:1c:41:0b:49:
         76:63:74:b8:0c:23:5d:4f:6e:97:4b:20:bd:43:2b:26:86:7c:
         15:f1:9d:d8:b9:34:70:10:25:40:00:5b:44:33:8e:3c:63:ea:
         c6:c1:d9:4c:25:dc:0a:3f:33:bc:d2:60:32:73:c8:17:8c:8a:
         8c:ff:ac:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:24:21 2026 by rpki-client