Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
File:                     nczQgPBy3iTvhCxqopJJnvE2m_Q.mft (raw, json)
Hash identifier:          ONOwXNX3sYsdO01AHsh+OpBBMdOuiVA61iEUR2XZD6w=
Subject key identifier:   0C:05:44:CD:EF:34:3E:C1:93:DE:E7:0B:21:9C:6E:A6:12:C9:50:DD
Authority key identifier: 9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4
Certificate issuer:       /CN=A916A504/serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4
Certificate serial:       0151
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
Manifest number:          0148
Signing time:             Sun 27 Sep 2026 05:56:29 +0000
Manifest this update:     Sun 27 Sep 2026 05:56:29 +0000
Manifest next update:     Sun 04 Oct 2026 05:56:29 +0000
Files and hashes:         1: nczQgPBy3iTvhCxqopJJnvE2m_Q.crl (hash: jmeKKbQwZ3hAZidyf5oxbHbSoYWZv8W7mKgLqh9PeZM=)
                          2: D7BBDE18D3AB11EFB022202CC4F9AE02.roa (hash: QATPpzGS/ZP7kNOUm90TMsTc1uCxiE2w36dBLpw4fDU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl
                          rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 05:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A504, serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4
        Validity
            Not Before: Sep 27 05:56:29 2026 GMT
            Not After : Oct  4 05:56:29 2026 GMT
        Subject: CN=6ab8b00d-de83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:84:78:28:96:00:3b:c9:80:ee:97:d7:2f:
                    d2:65:22:8e:f0:4c:75:ad:bc:38:1a:a5:9a:7b:ec:
                    f5:26:71:f0:e2:d8:5d:af:ca:21:00:37:61:7c:9c:
                    6f:93:26:80:d7:8e:a7:e0:d6:53:1e:a5:c4:5c:9f:
                    88:39:e6:03:18:6a:9a:6d:13:4b:f6:b3:5f:59:ee:
                    64:b9:57:95:a4:bd:38:10:67:31:fd:f8:04:75:f7:
                    ef:fd:a1:0c:f5:d5:39:ff:06:ae:88:91:32:09:f0:
                    17:fa:ae:fb:a7:e7:a1:7b:cb:c2:83:76:25:be:2a:
                    15:bf:83:85:ad:35:b0:98:72:f5:30:e3:b1:00:28:
                    af:04:4f:b3:58:74:38:c8:52:0d:72:4c:a9:86:0a:
                    b2:b5:9a:91:ee:72:0f:42:31:8d:64:44:68:0d:f6:
                    3b:f3:af:d9:7a:0a:24:fe:f8:bd:58:0a:83:82:85:
                    64:83:23:ea:e3:4e:81:72:66:50:e5:f6:b5:b1:ca:
                    ac:f6:c4:9f:c4:59:5d:ee:e9:a0:52:64:81:66:fc:
                    dd:b8:18:2a:a2:95:5c:39:9c:38:f2:1b:32:29:da:
                    a5:a3:fe:1c:18:d0:f8:c9:b4:90:f7:b3:44:ba:95:
                    cb:8a:e3:0f:30:c5:d5:98:55:31:54:2d:fe:d8:3a:
                    97:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:05:44:CD:EF:34:3E:C1:93:DE:E7:0B:21:9C:6E:A6:12:C9:50:DD
            X509v3 Authority Key Identifier:
                keyid:9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:1a:dd:13:cf:65:0c:3d:0e:32:1a:0a:76:77:d1:13:0b:bd:
         18:ef:1c:ed:7f:cc:20:07:50:29:ef:4d:11:e4:c3:28:ef:57:
         88:bb:88:6c:8f:ed:5f:76:24:f8:d3:d4:d8:13:4f:4c:da:f5:
         99:e1:74:a4:60:d0:79:d4:f7:a3:60:15:f7:d6:aa:38:29:92:
         77:47:f9:13:b7:30:b2:36:d1:75:dc:e8:1a:52:91:1f:95:45:
         2c:66:45:ae:a6:a2:d2:e7:3c:60:bf:37:30:4c:74:91:51:5e:
         ca:43:a3:a7:7b:a3:93:3e:05:61:b9:04:cc:a9:89:96:12:74:
         62:5c:c3:6e:51:76:8d:06:57:6e:04:88:2b:0d:c6:77:ab:0f:
         7e:00:6c:52:e9:8f:0b:57:e7:fc:25:63:82:01:88:53:74:32:
         a0:f3:10:16:b0:89:38:ee:6c:fa:d2:6e:a3:ec:b7:4d:45:35:
         7b:55:25:73:cf:e9:10:37:60:0f:48:6d:58:b1:84:e8:0d:ca:
         35:21:67:ee:26:98:4b:53:4b:b9:c3:ca:4e:a4:91:93:83:24:
         b1:b9:c1:b1:eb:e3:e6:95:67:04:d1:3b:22:83:b0:39:be:26:
         a1:18:9b:19:05:a3:9e:0e:ae:ad:a0:bd:0e:e2:4f:08:be:f5:
         fe:7e:e5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:25:58 2026 by rpki-client