Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
File:                     lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft (raw, json)
Hash identifier:          ZeK5vJhK0KHV46ftb8FFcFvHteaTc5D19BwAnwuAzw0=
Subject key identifier:   86:63:BD:4E:C5:99:6E:3A:63:5B:C0:F3:81:9B:E3:8D:35:A6:84:07
Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92
Certificate issuer:       /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192
Certificate serial:       0D49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
Manifest number:          0D2F
Signing time:             Thu 24 Sep 2026 18:13:29 +0000
Manifest this update:     Thu 24 Sep 2026 18:13:28 +0000
Manifest next update:     Thu 01 Oct 2026 18:13:28 +0000
Files and hashes:         1: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl (hash: 56NraLIyFqMM/QHNzsutB55HACNdofabSejSnMXrCP4=)
                          2: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (hash: PU5K85ByPeJlmo+7kA0ZUbRl2pb30nPNJ3u58gZkpSk=)
                          3: CE15A7B409D911EA80E56E21C4F9AE02.roa (hash: /MtJQ2aFPi8HYTchwzSmXpRAnCoGqWuQ+vHypfNM8zk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl
                          rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:13:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3401 (0xd49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DC92, serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192
        Validity
            Not Before: Sep 24 18:13:28 2026 GMT
            Not After : Oct  1 18:13:28 2026 GMT
        Subject: CN=6ab56848-d084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9d:62:0d:3c:60:5e:1a:fe:d0:bb:6c:3d:43:
                    0b:fc:bb:04:49:23:57:45:a2:3a:8b:ff:89:11:80:
                    95:2d:6d:29:07:af:b7:80:7f:47:36:23:6c:2d:25:
                    eb:c5:bb:64:d6:56:a7:7d:63:bd:f1:ad:b6:f5:d2:
                    88:95:75:dd:20:03:a7:34:2e:a9:db:5c:65:ea:31:
                    76:51:98:c4:7d:9d:d6:af:41:50:c3:bd:f6:fd:1c:
                    08:a4:28:10:f3:0d:ab:45:e8:a7:31:fe:b9:e3:bd:
                    88:a6:df:a2:f3:3d:81:2b:b8:f2:d6:e6:24:05:80:
                    1d:bf:e9:1e:41:80:20:19:59:57:68:8a:06:ba:d4:
                    de:bd:0e:b2:eb:ba:94:16:98:98:a5:e1:f4:8d:92:
                    25:c0:cc:a3:27:c0:93:03:03:bf:50:f0:15:d2:e5:
                    04:e8:68:ce:b3:d9:e6:0f:99:72:6d:3d:1e:b9:7b:
                    53:00:18:5d:90:08:4f:97:9f:43:32:77:03:5d:8b:
                    17:a3:ed:8a:d6:3b:ac:71:86:90:5a:ca:cc:54:66:
                    e4:94:cf:6c:13:39:51:a4:96:e6:fb:98:3c:30:e5:
                    03:3f:bb:99:09:3e:2a:18:1b:87:e2:11:91:f3:83:
                    9f:6b:f2:0f:fc:2d:db:04:5e:f1:d8:09:b1:85:b8:
                    ec:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:63:BD:4E:C5:99:6E:3A:63:5B:C0:F3:81:9B:E3:8D:35:A6:84:07
            X509v3 Authority Key Identifier:
                keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:dd:9a:63:0a:18:8d:26:af:5e:43:f2:12:56:4b:8a:2b:0d:
         15:42:9f:f8:3a:33:0e:d1:69:d2:00:90:ad:5a:2d:53:12:06:
         ec:83:a7:06:24:2c:36:84:07:eb:e0:aa:9b:db:75:a2:70:7e:
         37:53:43:da:05:9f:3b:a7:b3:11:d0:dd:6a:9e:cf:e6:65:b4:
         93:ff:6d:09:e7:6f:3c:e7:1c:4e:a7:11:d7:0f:7f:f2:89:a0:
         1e:84:cc:aa:fd:cc:60:95:2f:29:ee:71:f0:0b:42:7a:b7:4d:
         af:a0:c5:19:e8:a3:ba:7a:da:a8:3e:12:3f:06:ea:18:d1:69:
         c4:a7:b6:e6:a1:48:ab:60:4c:8d:39:df:e6:de:7c:3e:d6:3c:
         f3:ac:50:de:ae:b2:ae:33:1d:db:15:73:3b:6a:3f:0a:82:da:
         cc:6e:04:a8:a8:53:61:c4:48:63:57:b0:9d:59:8c:22:3c:e0:
         59:22:ce:92:d8:40:c6:67:55:a5:90:ec:01:ac:78:34:56:fb:
         f5:30:f3:d6:56:98:db:0e:e1:a7:58:c1:a3:58:15:e9:fb:59:
         e8:07:2d:b3:e7:e1:e2:44:7b:26:86:4a:1f:fd:70:da:8c:5e:
         cc:c4:43:f6:80:0c:c6:49:c7:e3:06:c3:cd:e4:cb:23:47:a9:
         7b:83:8f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:02:21 2026 by rpki-client