Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
File:                     4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft (raw, json)
Hash identifier:          weItUgM5ipv6lAnM4VFZdHm2QsKe1HMOf6GIt026T9g=
Subject key identifier:   F4:58:6D:F6:E1:98:E6:3B:15:AE:FB:E6:D7:62:0C:C4:2D:E0:F4:89
Authority key identifier: E0:2B:EE:E8:8D:83:5B:D0:E4:25:4C:A0:8D:7C:03:BC:57:19:74:84
Certificate issuer:       /CN=A915E005/serialNumber=E02BEEE88D835BD0E4254CA08D7C03BC57197484
Certificate serial:       2301
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
Manifest number:          22EE
Signing time:             Thu 24 Sep 2026 15:48:31 +0000
Manifest this update:     Thu 24 Sep 2026 15:48:31 +0000
Manifest next update:     Thu 01 Oct 2026 15:48:31 +0000
Files and hashes:         1: 4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl (hash: HyYYRpKLw/HJR5Vz2APga9LEkQpFQ2nNrQbTmvW9DOo=)
                          2: CD4CD0B654F311E7AC64ED3AC4F9AE02.roa (hash: VKFgeV6Rmc+Rc92uXlIsfsO0P5v537kl0ZBvVM5G0V8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl
                          rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 15:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8961 (0x2301)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E005, serialNumber=E02BEEE88D835BD0E4254CA08D7C03BC57197484
        Validity
            Not Before: Sep 24 15:48:31 2026 GMT
            Not After : Oct  1 15:48:31 2026 GMT
        Subject: CN=6ab5464f-5023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2a:ef:a5:1f:e9:b1:aa:47:2d:7f:97:83:7a:
                    84:5c:01:c4:2e:78:a5:de:93:26:cc:54:df:ce:8d:
                    ec:8c:0d:71:00:ed:b8:6c:4b:f3:6d:4d:25:d7:51:
                    aa:ba:16:1c:4e:97:60:52:c0:f3:a9:2d:62:e1:46:
                    50:ad:5d:35:de:e8:a4:ea:20:3d:2d:2e:e1:d2:74:
                    b1:62:9e:3d:07:f5:d0:69:20:a0:1c:56:99:06:c1:
                    b6:c2:80:00:16:23:82:01:8d:57:60:cd:47:4f:3e:
                    bf:06:d9:ad:ec:53:8e:7d:89:76:83:2f:23:a9:65:
                    8b:fe:79:8d:9f:d3:c0:a4:c5:b7:a3:10:8b:2d:70:
                    c0:0f:c0:51:84:b4:93:25:11:24:a0:5f:d8:18:16:
                    f5:12:8f:71:9a:3b:88:e2:13:b6:27:a8:20:e5:aa:
                    bc:32:2e:4e:39:5b:ac:24:cf:3f:6a:49:ae:d7:12:
                    39:4f:3a:16:96:7c:a5:d3:23:e2:8d:1a:e6:6d:29:
                    67:fa:d3:c9:3a:a0:b9:f5:b2:dc:6d:af:73:47:4d:
                    96:54:0b:7a:ac:33:9d:06:ab:6d:18:17:bf:7c:19:
                    04:40:a2:e2:cf:6b:94:1a:32:f3:0b:5b:ef:44:32:
                    7f:7b:25:a8:f7:e3:d2:30:e7:e3:8a:12:4d:7d:4f:
                    a3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:58:6D:F6:E1:98:E6:3B:15:AE:FB:E6:D7:62:0C:C4:2D:E0:F4:89
            X509v3 Authority Key Identifier:
                keyid:E0:2B:EE:E8:8D:83:5B:D0:E4:25:4C:A0:8D:7C:03:BC:57:19:74:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:05:bc:98:67:72:59:06:f7:38:21:79:8a:98:ba:9b:2d:20:
         28:a2:3e:54:c1:a9:56:51:23:0c:22:8c:cf:65:56:b6:1b:5e:
         13:60:f7:54:13:ed:89:2c:a1:ac:2a:81:aa:ef:77:97:cf:8f:
         19:f1:f6:19:47:6f:af:29:c7:af:c6:80:20:46:43:9f:b8:ff:
         b6:17:59:4e:44:eb:e1:b6:d1:e5:66:aa:28:54:69:d8:db:32:
         01:fd:e8:1a:d6:83:bc:79:ea:e5:8c:83:c1:35:04:44:2a:04:
         5a:ce:94:22:ab:6d:18:1f:41:01:73:b0:2d:57:01:38:30:35:
         25:77:fc:1d:4d:c9:bb:dc:32:dd:9e:a1:04:57:31:c0:3a:c9:
         e0:89:41:41:50:27:9a:6b:94:99:46:6c:c6:10:a1:81:1a:3d:
         44:10:e4:99:22:d6:2a:49:7a:21:19:00:b8:af:72:57:21:7e:
         eb:b1:51:4f:2b:99:73:3a:88:b6:96:ba:c1:8b:78:ae:c5:5d:
         e6:c6:84:0a:5b:95:7d:3f:a1:0f:90:91:cd:41:f3:4e:5f:e1:
         fa:67:c5:9c:2d:7d:db:9d:8e:8b:3c:93:10:c4:c6:c8:31:72:
         1e:c7:f6:f5:84:d7:6a:92:9d:cb:c9:a2:d2:f6:98:24:9b:0b:
         56:bb:26:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:32:05 2026 by rpki-client