Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft
File:                     x40eWVkb4MdSTTa9-FyKxuoZD44.mft (raw, json)
Hash identifier:          dVTGP3cx9NiK/obFk+wt9AHkKoXivJ0Nay/Fo+zRze4=
Subject key identifier:   D2:94:14:3A:BE:4E:38:91:BE:17:93:9B:27:52:FD:5F:66:79:07:A6
Authority key identifier: C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E
Certificate issuer:       /CN=A91554E6/serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E
Certificate serial:       023C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft
Manifest number:          05F5
Signing time:             Fri 25 Sep 2026 00:23:08 +0000
Manifest this update:     Fri 25 Sep 2026 00:23:07 +0000
Manifest next update:     Fri 02 Oct 2026 00:23:07 +0000
Files and hashes:         1: x40eWVkb4MdSTTa9-FyKxuoZD44.crl (hash: Xl4HOaGsrWPfNZFr3pJmKNnLyr+KRzLDxKMZXfq4/rY=)
                          2: 0FC70E667CE011F1849F5C3096A30FBC.roa (hash: rGMKLFytr4SDeBq+IhmgmESo7y8w3gNeeV7+LKI/jC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl
                          rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 572 (0x23c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91554E6, serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E
        Validity
            Not Before: Sep 25 00:23:07 2026 GMT
            Not After : Oct  2 00:23:07 2026 GMT
        Subject: CN=6ab5beeb-b105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:82:a2:9f:35:9b:25:a2:8d:c1:51:01:d0:32:
                    42:35:79:d4:64:77:a0:40:5b:39:56:a1:94:17:7e:
                    30:a2:95:ad:26:4c:59:3d:83:da:97:95:47:57:37:
                    a6:a9:0c:8a:46:ae:5b:54:c7:7b:f0:3f:a9:ea:3b:
                    9b:34:6c:ea:48:28:ad:4e:65:c3:68:f0:7f:b7:4c:
                    89:65:66:59:60:c2:47:5a:b4:4c:02:be:27:2d:94:
                    39:de:57:3d:44:10:3e:b1:1d:7b:9d:3e:97:66:2f:
                    38:76:5d:44:6e:ca:6a:d4:88:d9:6f:d5:b8:65:2f:
                    67:c7:ed:23:d5:ba:09:5d:44:66:c6:ce:cb:c5:dc:
                    a0:4c:5e:9f:5e:7f:cd:d0:80:57:52:0e:e6:49:7c:
                    0d:ea:95:e3:98:ab:22:c7:e7:ce:92:6c:47:68:4b:
                    29:50:df:b1:15:11:ec:fb:28:11:95:d6:10:86:c0:
                    81:5f:17:00:b1:31:ad:86:19:cc:c2:38:80:41:e6:
                    85:8c:48:a6:70:6e:56:a5:98:4f:2e:9a:af:81:0a:
                    f9:b0:1a:b4:ed:21:54:ae:6a:9c:2b:50:61:69:5a:
                    3f:88:40:d7:b6:b4:be:c2:b2:e0:1d:e1:57:85:05:
                    08:98:f1:56:d9:2e:41:a8:12:6f:ff:ed:bd:d8:6f:
                    4d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:94:14:3A:BE:4E:38:91:BE:17:93:9B:27:52:FD:5F:66:79:07:A6
            X509v3 Authority Key Identifier:
                keyid:C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:8f:d9:85:63:b7:94:7c:22:33:28:7c:bc:27:f4:62:3f:ab:
         9b:56:b9:a3:c2:a5:a4:2c:8f:6c:eb:88:3d:43:66:fb:9e:22:
         ce:da:3d:4f:3c:45:a2:bc:ea:7d:cb:ca:4d:8c:af:4b:6e:c8:
         66:7a:aa:f9:8c:db:da:f2:c3:0c:86:3a:3d:9a:21:8b:a7:9b:
         d7:c0:39:31:48:50:47:ba:37:77:1a:e6:7c:c1:0a:39:2c:bb:
         2f:56:4a:15:79:9a:4d:78:7f:15:52:b8:1a:93:95:9d:93:03:
         e6:99:b7:ac:d2:e8:07:9d:67:35:4f:51:77:7d:59:8a:e1:8d:
         c0:c2:aa:76:4f:e1:87:03:88:0f:da:de:7d:0b:c9:6d:c4:ae:
         c3:34:a4:a1:c2:78:55:46:d0:84:f5:18:34:c4:0e:33:d9:c5:
         ba:e1:2b:25:49:0a:40:99:70:58:99:cd:b0:75:85:2c:4c:35:
         ff:38:e2:95:08:b1:f9:32:91:df:68:e2:9a:a5:05:01:27:20:
         02:35:aa:34:8d:99:7d:d1:a0:8f:f7:f0:f9:5d:f2:66:76:bb:
         93:b8:a3:50:35:89:e3:2c:c5:3e:88:98:b1:9f:40:4a:56:19:
         cb:79:1d:f5:97:ca:ae:12:14:00:be:90:b3:cd:b0:12:21:f7:
         06:d8:86:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU0RTYxMTAvBgNVBAUTKEM3OEQxRTU5NTkxQkUwQzc1MjREMzZCREY4NUM4QUM2
RUExOTBGOEUwHhcNMjYwOTI1MDAyMzA3WhcNMjYxMDAyMDAyMzA3WjAYMRYwFAYD
VQQDEw02YWI1YmVlYi1iMTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkYKinzWbJaKNwVEB0DJCNXnUZHegQFs5VqGUF34wopWtJkxZPYPal5VHVzem
qQyKRq5bVMd78D+p6jubNGzqSCitTmXDaPB/t0yJZWZZYMJHWrRMAr4nLZQ53lc9
RBA+sR17nT6XZi84dl1Ebspq1IjZb9W4ZS9nx+0j1boJXURmxs7LxdygTF6fXn/N
0IBXUg7mSXwN6pXjmKsix+fOkmxHaEspUN+xFRHs+ygRldYQhsCBXxcAsTGthhnM
wjiAQeaFjEimcG5WpZhPLpqvgQr5sBq07SFUrmqcK1BhaVo/iEDXtrS+wrLgHeFX
hQUImPFW2S5BqBJv/+292G9NZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNKUFDq+
TjiRvheTmydS/V9meQemMB8GA1UdIwQYMBaAFMeNHllZG+DHUk02vfhcisbqGQ+O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTRFNi85RjA2Nzc0OEVE
NEIxMUVDQUI4RkFBNzdDNEY5QUUwMi94NDBlV1ZrYjRNZFNUVGE5LUZ5S3h1b1pE
NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3g0MGVXVmtiNE1kU1RUYTktRnlLeHVvWkQ0NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTRFNi85RjA2Nzc0OEVENEIxMUVDQUI4RkFBNzdDNEY5QUUwMi94NDBlV1ZrYjRN
ZFNUVGE5LUZ5S3h1b1pENDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASI/ZhWO3lHwiMyh8vCf0Yj+rm1a5o8KlpCyPbOuIPUNm+54izto9TzxForzq
fcvKTYyvS27IZnqq+Yzb2vLDDIY6PZohi6eb18A5MUhQR7o3dxrmfMEKOSy7L1ZK
FXmaTXh/FVK4GpOVnZMD5pm3rNLoB51nNU9Rd31ZiuGNwMKqdk/hhwOID9refQvJ
bcSuwzSkocJ4VUbQhPUYNMQOM9nFuuErJUkKQJlwWJnNsHWFLEw1/zjilQix+TKR
32jimqUFAScgAjWqNI2ZfdGgj/fw+V3yZna7k7ijUDWJ4yzFPoiYsZ9ASlYZy3kd
9ZfKrhIUAL6Qs82wEiH3BtiGVw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:20:47 2026 by rpki-client