Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172577/3B102F28A13C11F19F0A47824611F970/MpwAwXd-xVITo998OiXs0R8K0MU.mft
File:                     MpwAwXd-xVITo998OiXs0R8K0MU.mft (raw, json)
Hash identifier:          r2aNewS3ooO47FKpn9/itBz7Y7cItjPH1JcwR3COQRs=
Subject key identifier:   EE:F8:47:94:B1:5D:BB:27:06:7B:72:48:EB:16:83:5A:21:E7:FB:F4
Authority key identifier: 32:9C:00:C1:77:7E:C5:52:13:A3:DF:7C:3A:25:EC:D1:1F:0A:D0:C5
Certificate issuer:       /CN=A9172577/serialNumber=329C00C1777EC55213A3DF7C3A25ECD11F0AD0C5
Certificate serial:       13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpwAwXd-xVITo998OiXs0R8K0MU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172577/3B102F28A13C11F19F0A47824611F970/MpwAwXd-xVITo998OiXs0R8K0MU.mft
Manifest number:          12
Signing time:             Fri 25 Sep 2026 09:16:06 +0000
Manifest this update:     Fri 25 Sep 2026 09:16:06 +0000
Manifest next update:     Fri 02 Oct 2026 09:16:06 +0000
Files and hashes:         1: MpwAwXd-xVITo998OiXs0R8K0MU.crl (hash: RoZ0bfYVP7xIauAeztF/GG4fzorjtORQSa1odQG9W58=)
                          2: B5B5FDC0A13C11F1AF235BB64611F970.roa (hash: +Mzs6hlhgMNNsmeiZTxc9KH2oKf2PeDFQzRGMaXmJYQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172577/3B102F28A13C11F19F0A47824611F970/MpwAwXd-xVITo998OiXs0R8K0MU.crl
                          rsync://rpki.apnic.net/member_repository/A9172577/3B102F28A13C11F19F0A47824611F970/MpwAwXd-xVITo998OiXs0R8K0MU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpwAwXd-xVITo998OiXs0R8K0MU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 09:16:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172577, serialNumber=329C00C1777EC55213A3DF7C3A25ECD11F0AD0C5
        Validity
            Not Before: Sep 25 09:16:06 2026 GMT
            Not After : Oct  2 09:16:06 2026 GMT
        Subject: CN=6ab63bd6-fdfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c7:50:1f:01:6f:f5:fe:41:37:e5:aa:bc:8e:
                    53:7f:ef:a4:c2:96:a9:32:70:85:e0:09:c8:88:95:
                    7f:6e:c6:e0:40:ea:f5:19:e2:bc:78:df:22:ab:2e:
                    c9:62:3d:ed:fc:4b:2a:a6:15:23:01:49:54:c4:30:
                    2e:ea:50:6e:42:c8:c4:03:ec:09:ea:35:82:71:86:
                    4c:ed:27:9a:48:d5:35:22:39:35:00:1e:39:cf:49:
                    81:7a:76:cc:21:dd:3b:10:bf:99:73:9d:6a:28:4f:
                    f0:47:9d:ca:79:f3:dc:f6:88:a6:a5:2d:d3:5b:57:
                    73:95:c4:b0:5b:69:5e:e3:ad:b1:2a:7e:9c:03:0f:
                    9d:26:4a:97:b3:16:da:76:a3:d6:e7:96:43:c8:53:
                    c8:66:c6:93:46:14:75:50:fa:ad:2c:f5:84:90:af:
                    97:9b:f9:4c:ac:6f:83:df:6b:57:3a:96:5f:9d:4b:
                    9e:ae:32:37:ae:50:23:32:8d:c0:1a:e7:46:ad:a3:
                    c6:90:17:56:35:45:3f:55:8b:7d:76:13:96:6f:4d:
                    aa:8b:98:3b:4b:c8:45:e2:a3:83:c8:29:9a:80:08:
                    22:97:8c:24:d0:99:cf:48:f4:d3:73:c3:ef:f5:bb:
                    a1:d7:1d:f4:2f:f8:bb:40:85:8f:2f:d5:80:5e:6f:
                    51:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F8:47:94:B1:5D:BB:27:06:7B:72:48:EB:16:83:5A:21:E7:FB:F4
            X509v3 Authority Key Identifier:
                keyid:32:9C:00:C1:77:7E:C5:52:13:A3:DF:7C:3A:25:EC:D1:1F:0A:D0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172577/3B102F28A13C11F19F0A47824611F970/MpwAwXd-xVITo998OiXs0R8K0MU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpwAwXd-xVITo998OiXs0R8K0MU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172577/3B102F28A13C11F19F0A47824611F970/MpwAwXd-xVITo998OiXs0R8K0MU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:6a:2d:7d:a0:0e:31:99:8a:4c:c2:42:fa:2a:d5:6f:82:05:
         7f:29:2b:ad:58:be:45:32:20:75:fc:38:42:4e:d0:f6:ac:bf:
         d9:31:48:89:d9:ac:ac:fd:18:b4:85:4a:7d:b4:2c:80:1d:08:
         0e:5a:1b:77:89:da:77:8e:c7:df:1f:7c:5d:76:08:bc:44:13:
         7f:60:b3:20:46:31:c5:f2:38:3b:04:98:47:7d:3d:f4:d8:1e:
         8a:8c:61:cf:6f:ce:2f:42:bd:b6:d9:1c:cb:19:38:c3:21:3f:
         52:d0:90:a7:42:5e:b1:2f:83:dc:6d:ec:3a:30:5d:9f:f5:46:
         93:38:9b:ea:37:df:33:25:45:a1:7e:7a:cd:a2:22:5d:b0:77:
         b7:6b:7a:50:d3:af:72:bb:e0:0c:d5:7c:12:93:7e:41:08:90:
         4c:c9:9d:2d:f7:99:09:ae:43:4e:c2:f0:17:9e:52:dd:c2:57:
         e7:d2:9d:a9:bb:29:e1:56:e8:0b:74:57:d2:00:a2:ad:d6:b0:
         72:eb:60:5e:36:7d:88:95:cb:fb:cd:5a:58:24:9d:af:48:0d:
         9a:42:2a:55:3c:47:c9:7f:e9:8a:b0:fd:ca:09:41:da:94:dc:
         f7:c1:16:81:17:1e:63:9d:e3:64:c3:64:66:19:9d:1f:be:3b:
         73:6c:c4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:24:48 2026 by rpki-client