Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
File:                     i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft (raw, json)
Hash identifier:          yJr0mpb60i2oFWczMLyR/qefkjigRzByMjN3o0p02X0=
Subject key identifier:   7E:1E:09:7E:11:B3:08:53:42:9A:46:B6:5F:F1:0F:C3:FF:C1:23:F1
Authority key identifier: 8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7
Certificate issuer:       /CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7
Certificate serial:       02E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
Manifest number:          02DF
Signing time:             Wed 23 Sep 2026 00:53:52 +0000
Manifest this update:     Wed 23 Sep 2026 00:53:52 +0000
Manifest next update:     Wed 30 Sep 2026 00:53:52 +0000
Files and hashes:         1: i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl (hash: kJZw0X39dklRW1zwryl6G16byxiPjNL9UuhhblhKnLI=)
                          2: 9EFAFA76234311F18F511571AA833773.roa (hash: 4NzUw4b9D8ALfqcLviwrDkJ97hUefCQAutbVZdbx1i0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl
                          rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 743 (0x2e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914ECD7, serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7
        Validity
            Not Before: Sep 23 00:53:52 2026 GMT
            Not After : Sep 30 00:53:52 2026 GMT
        Subject: CN=6ab32320-7118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8f:0d:bf:74:58:af:aa:41:46:d2:62:16:1c:
                    c5:2b:60:e1:af:f2:bf:28:55:50:3a:67:84:1e:92:
                    9f:5a:e1:2d:4b:39:6f:42:cd:a0:14:78:ba:d3:7f:
                    77:13:8a:17:18:74:2c:c3:d3:12:5a:16:52:32:b5:
                    d2:38:ce:98:45:74:a3:ec:31:fc:36:d3:e3:ef:af:
                    13:7e:59:52:41:ce:48:01:96:19:9c:12:df:e6:bd:
                    da:a8:77:d8:c5:12:a0:fd:3e:14:a0:c5:5f:80:34:
                    0b:64:be:34:f9:da:6c:ac:f0:7e:ba:a5:88:08:a8:
                    ce:59:8c:30:07:11:89:0c:1a:7e:a8:0f:c4:f8:76:
                    81:77:96:63:3e:fb:da:ee:0f:6d:16:b8:ef:ce:df:
                    93:57:3a:1b:57:e2:fb:79:7a:3e:fc:ac:1a:c3:e6:
                    1c:9c:cd:aa:79:7f:4d:63:44:b0:77:12:cb:93:0a:
                    8d:84:2d:f7:1d:a7:30:5f:c6:aa:1f:a3:94:e2:5f:
                    81:dc:89:e1:da:a9:3e:a2:f6:a7:aa:39:ef:9c:1a:
                    dd:f6:4d:39:55:62:59:b5:c7:cf:0b:7f:9c:a6:cb:
                    6a:fe:f6:49:cb:e0:7d:d8:b1:e0:98:86:9a:90:a0:
                    68:c2:ad:33:f7:fd:b2:99:9c:d2:46:b3:da:fb:a7:
                    4b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1E:09:7E:11:B3:08:53:42:9A:46:B6:5F:F1:0F:C3:FF:C1:23:F1
            X509v3 Authority Key Identifier:
                keyid:8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:a7:6d:22:1b:9c:2a:db:47:24:26:65:be:f4:7d:16:3a:ab:
         a3:42:e2:a2:40:84:fc:08:25:50:54:d5:5d:3a:98:0d:80:13:
         08:4c:39:db:00:06:bf:0b:b0:14:aa:6d:b6:00:63:44:d7:b3:
         00:f2:14:63:97:4b:e9:28:8c:0a:b0:23:a4:af:b6:2e:ce:dc:
         94:7b:34:f9:72:cf:5e:63:53:4c:06:cd:58:87:c5:8d:87:98:
         e8:e9:1d:99:8a:66:60:9c:ed:f6:df:a2:23:36:db:6c:d1:d7:
         63:c2:ec:82:aa:a4:40:9f:32:eb:d9:61:6f:6b:a1:6c:bb:af:
         c8:e3:b0:bc:8f:49:23:c3:cb:db:d2:dc:09:6b:e8:05:05:b7:
         16:78:c1:63:f0:50:c1:79:6a:38:13:6b:40:e7:13:4b:6b:76:
         63:02:ee:61:33:9b:39:cf:fd:b8:d5:06:5e:52:aa:3d:ec:15:
         40:dd:f6:30:de:ea:b6:4d:fb:5e:dd:ee:2c:3f:35:11:ad:66:
         a8:a7:4c:0a:17:bd:53:fe:16:ec:3c:1b:c2:4f:e0:31:db:ef:
         1f:47:39:c8:27:04:ca:ba:7d:8b:fd:84:8f:7d:97:f3:cd:03:
         67:d2:9f:8c:58:17:ba:cd:05:3a:e0:90:5d:dc:aa:28:e2:9d:
         a0:66:9c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:31:20 2026 by rpki-client