Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft
File:                     fJsp8fVuh-6usb90B2lNtO3a1Ts.mft (raw, json)
Hash identifier:          DuiFaiWT4UTa5hVGYfGPTFci45Z/gEL0CfgopZqnCJQ=
Subject key identifier:   98:53:8F:B2:25:00:FE:A2:DA:E2:E8:84:9C:E5:7C:3A:FC:80:9C:96
Authority key identifier: 7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B
Certificate issuer:       /CN=A9171845/serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B
Certificate serial:       05D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft
Manifest number:          05CF
Signing time:             Tue 22 Sep 2026 22:43:37 +0000
Manifest this update:     Tue 22 Sep 2026 22:43:37 +0000
Manifest next update:     Tue 29 Sep 2026 22:43:37 +0000
Files and hashes:         1: fJsp8fVuh-6usb90B2lNtO3a1Ts.crl (hash: jhnFzbG4qofRp1e8FmAW5fsTkwbDVEeUG8WJ0wmotwo=)
                          2: FE5E15E2216911EC82319078C4F9AE02.roa (hash: 3PYImVuhd2a+7WVhTnmUqdkpZJCLvtAkYhkCLH97AYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl
                          rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1497 (0x5d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171845, serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B
        Validity
            Not Before: Sep 22 22:43:37 2026 GMT
            Not After : Sep 29 22:43:37 2026 GMT
        Subject: CN=6ab30499-89fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7f:d1:c3:96:63:a6:4d:17:3e:dc:8f:4a:77:
                    99:ac:64:0f:21:ef:c7:53:dd:62:ef:31:f0:f3:3b:
                    17:7c:24:02:a1:50:78:c2:85:92:6b:87:54:3b:1b:
                    cf:66:92:ab:7b:11:98:00:f1:5d:57:63:de:1c:e2:
                    4e:8a:cc:37:05:5f:c1:ef:ce:53:90:32:89:82:c7:
                    e0:85:f3:b3:e7:40:dc:f8:1d:03:32:99:1c:71:68:
                    72:27:3c:5a:4f:5a:4d:1e:b5:b6:d8:da:ab:0b:8f:
                    41:5c:75:39:0c:5a:56:45:1c:ea:c5:7a:e8:a0:40:
                    13:f0:6f:cb:ae:55:55:fe:fc:97:03:b9:01:94:5f:
                    57:dc:80:76:19:6d:cf:d1:c6:1a:85:41:d3:ce:35:
                    0b:91:aa:24:7d:02:22:e2:54:2b:c7:9a:d8:65:ce:
                    b3:f0:5f:b2:5f:fa:43:fc:bb:e7:d4:50:ec:40:43:
                    e0:3d:f1:a0:05:a1:49:39:5b:36:47:28:89:14:4b:
                    44:2c:a4:d9:78:e7:b5:56:37:15:04:b4:e1:9c:2e:
                    4e:3e:f8:62:66:ff:1c:88:b9:0c:3a:53:62:b6:5e:
                    af:d5:36:f1:8f:21:96:d3:94:f1:f1:58:16:c6:71:
                    fa:73:2d:20:fe:92:67:e3:f7:73:3d:2a:1c:93:38:
                    2e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:53:8F:B2:25:00:FE:A2:DA:E2:E8:84:9C:E5:7C:3A:FC:80:9C:96
            X509v3 Authority Key Identifier:
                keyid:7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:aa:c3:f0:83:26:d7:03:59:0a:a4:85:39:f4:38:f6:30:dc:
         fd:c8:6c:45:3a:4c:87:5c:12:8e:23:0e:4b:70:d8:81:03:2a:
         07:12:91:18:7b:5e:d1:48:8f:0d:6b:3d:69:11:b0:a6:c7:a3:
         b8:69:6e:bd:e3:44:a1:cf:6f:9e:49:70:58:f7:fe:06:b2:19:
         9a:ca:a4:34:2a:e9:1a:7d:55:bb:95:cb:dc:d8:fe:a9:b6:ef:
         cd:46:06:dd:19:17:be:cc:29:80:f6:1a:34:47:8b:f7:bb:1f:
         9a:1c:0b:6c:1d:d6:ef:8d:c5:52:ac:cf:fe:e3:03:42:e6:bd:
         05:cc:15:9b:a9:77:12:64:1e:a3:50:98:55:17:41:b8:f7:07:
         fc:96:f0:7e:ce:04:4a:29:17:0a:84:f6:69:9d:fe:4e:ee:f2:
         9c:15:22:f3:e9:c0:d5:11:0e:ee:d0:79:a2:c3:3f:46:bc:27:
         28:81:36:09:7e:83:35:63:62:c0:7d:ef:73:3d:0f:5f:87:36:
         13:e9:8c:c1:79:b1:18:20:cc:8f:91:27:f1:9d:db:2a:ec:91:
         bb:da:da:06:ad:df:fd:c5:94:6a:3e:97:8d:67:a1:72:ac:fc:
         fe:c9:1b:fe:f5:17:5b:c0:7f:07:80:bf:66:c4:23:51:54:fd:
         2e:d4:68:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:13:41 2026 by rpki-client