Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
File:                     ApuM4ulfRYWEYukHCxtRU6yRP-g.mft (raw, json)
Hash identifier:          uGLIUZBuoIw9uNQIZZzPFfCQQ8J9T9m4lvXzpGr5O18=
Subject key identifier:   82:D4:6C:9F:9C:1B:04:98:61:49:5C:76:69:DD:BF:04:2A:75:FC:D4
Authority key identifier: 02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8
Certificate issuer:       /CN=A9157D67/serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8
Certificate serial:       0824
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
Manifest number:          0812
Signing time:             Tue 22 Sep 2026 21:02:19 +0000
Manifest this update:     Tue 22 Sep 2026 21:02:18 +0000
Manifest next update:     Tue 29 Sep 2026 21:02:18 +0000
Files and hashes:         1: ApuM4ulfRYWEYukHCxtRU6yRP-g.crl (hash: dZnLI2Ry5gWYB2Y2wbg/Vjofcz3KGBSzdeLbYZJJ8AI=)
                          2: AA3A944A27EA11ECB1EBEA82C4F9AE02.roa (hash: uPUDJcMn+77qq4YNPD5QVUSK18NhEBtKWjJ9Y3BdzRQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl
                          rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2084 (0x824)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157D67, serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8
        Validity
            Not Before: Sep 22 21:02:18 2026 GMT
            Not After : Sep 29 21:02:18 2026 GMT
        Subject: CN=6ab2ecdb-699f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:60:f7:3c:13:24:54:46:7e:a6:ef:0c:cb:29:
                    07:72:2b:54:b5:04:3d:95:77:d3:fe:36:9d:a0:95:
                    0d:97:3e:6f:e4:b0:10:75:fc:da:a0:ec:19:c2:b3:
                    8c:26:3b:58:c0:f7:35:74:f9:45:5c:57:b7:25:1a:
                    5e:82:ab:cb:59:aa:be:9f:f3:d5:36:f8:da:4e:93:
                    f4:19:bb:2e:c2:cd:e6:90:e2:ec:46:89:cd:f2:b6:
                    a0:6b:0e:9d:e5:e8:7a:34:08:db:33:f0:73:7f:88:
                    f8:2b:10:a2:5e:1d:f1:b2:98:2f:15:c6:8f:c6:25:
                    f7:fd:eb:d3:c1:0c:a2:04:9a:52:c0:fa:5e:48:10:
                    23:91:45:a0:32:8d:5a:85:f8:e9:6c:bb:28:83:9f:
                    aa:04:0b:92:df:d9:e5:fb:d3:01:a4:93:24:73:8d:
                    77:80:33:9d:49:1a:4f:e8:62:7f:33:1f:1b:21:b9:
                    03:a9:f4:c0:8a:44:0e:d2:24:9f:5d:8d:f6:88:34:
                    32:7b:5b:5c:09:e4:fc:f4:d6:f6:a8:7e:e7:48:a2:
                    1d:83:53:0b:82:cd:70:e5:24:34:a9:ac:e5:56:9f:
                    22:ca:6a:ed:c0:8e:69:fa:1a:1d:f0:06:68:de:ef:
                    67:c7:58:ed:2a:4e:16:0a:9e:3e:a1:cf:68:ef:c3:
                    a8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D4:6C:9F:9C:1B:04:98:61:49:5C:76:69:DD:BF:04:2A:75:FC:D4
            X509v3 Authority Key Identifier:
                keyid:02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c1:d9:0e:d4:1f:7f:48:e1:44:1f:c7:94:e6:bd:20:51:c1:
         37:66:b1:1b:be:c7:dd:45:22:f9:0d:4a:c2:ac:2a:35:4e:dd:
         fd:60:bf:d9:cf:f7:a9:85:29:ae:d4:44:fd:88:bf:93:27:57:
         31:6a:53:78:57:14:a6:d2:c6:cf:cc:9a:4e:09:be:a1:b1:7e:
         7f:45:05:f6:de:0c:af:e7:13:8a:16:ec:c9:98:09:0c:1f:7d:
         3d:14:1d:f1:b8:50:23:f6:47:c6:09:15:f3:be:fe:c5:91:51:
         1b:eb:d0:63:22:72:fe:74:94:ad:08:83:0b:f1:a5:70:58:6d:
         43:e4:2c:58:8f:58:71:cf:3e:1f:33:9c:17:9d:c0:1c:5a:66:
         21:b5:3b:e7:25:b8:33:4c:cd:d9:08:1c:26:ac:4f:1a:88:3d:
         0d:20:62:8c:f3:ea:af:05:5c:d7:30:30:3e:1e:a7:6b:a4:a3:
         68:53:64:e9:7d:8d:9d:49:c0:d8:1d:89:d9:bf:b8:b5:40:e2:
         b4:54:0d:cb:0a:e2:76:39:ab:d4:df:fa:ee:c6:62:f8:7e:22:
         3c:df:9b:a7:e2:cd:c3:44:83:d2:11:82:db:c9:a5:03:2e:23:
         83:00:a0:f7:2d:23:e9:13:d8:64:3a:68:86:f2:4b:60:58:ee:
         e9:a1:b2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:34:42 2026 by rpki-client