Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
File:                     40gJvFtFT8eZSH_u2tcCEkAkYjo.mft (raw, json)
Hash identifier:          0nJnIjVDVWAWlIRGHzUfXIYLEw5XWTHBApLvqxUNmis=
Subject key identifier:   CB:13:D2:22:C2:DB:D2:50:10:F7:35:0E:87:75:DB:3D:7E:00:73:13
Authority key identifier: E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A
Certificate issuer:       /CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A
Certificate serial:       0CC7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
Manifest number:          0CAD
Signing time:             Tue 22 Sep 2026 18:28:19 +0000
Manifest this update:     Tue 22 Sep 2026 18:28:18 +0000
Manifest next update:     Tue 29 Sep 2026 18:28:18 +0000
Files and hashes:         1: 40gJvFtFT8eZSH_u2tcCEkAkYjo.crl (hash: 3+6T1n4Yp6P+HCT46agUESPeRrXZYW6W/mloyGeeSTU=)
                          2: 78CFD3CC225E11EA8BD18A62C4F9AE02.roa (hash: LA1zhuDO8oOV5U+SWHLv48B4wlsZkTvLHZIw98i6K60=)
                          3: 783907BC225E11EA8BD18A62C4F9AE02.roa (hash: cD+tWMa2tCm5TnaY019r+91dmxm4eQDA6fv1coCGHU4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl
                          rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:28:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3271 (0xcc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91734C9, serialNumber=E34809BC5B454FC799487FEEDAD702124024623A
        Validity
            Not Before: Sep 22 18:28:18 2026 GMT
            Not After : Sep 29 18:28:18 2026 GMT
        Subject: CN=6ab2c8c3-379b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:73:93:bb:dc:52:bb:d2:93:b2:d3:cb:05:b0:
                    c2:80:0c:09:e8:47:ab:72:98:55:01:a4:9f:7f:a3:
                    46:89:ef:4d:83:ed:c1:fa:28:2f:64:5a:01:9c:10:
                    6e:85:71:6d:b1:4d:20:17:30:c3:14:cc:cf:87:8f:
                    59:8c:f8:75:8f:68:11:d2:61:45:82:d0:0c:a3:f0:
                    cd:a2:10:49:bd:d6:6d:a6:26:f9:93:b4:5f:a5:3b:
                    e3:20:69:e8:09:05:35:3e:a4:ad:85:2f:62:07:51:
                    29:a0:62:b5:6a:03:78:63:7d:47:52:2c:58:ca:77:
                    a9:1a:05:c3:2a:7c:b6:07:04:78:4b:41:b0:ae:01:
                    07:59:47:f7:93:9b:0f:90:2b:bc:82:92:35:93:c3:
                    84:37:18:43:87:ce:19:55:71:c5:87:16:8d:5a:12:
                    a6:63:14:6d:1f:c5:4a:c7:66:f2:81:67:84:30:c5:
                    61:42:01:96:2d:de:f2:cc:7e:5f:e2:14:5f:50:fa:
                    b1:07:55:5d:1e:48:fb:d3:77:84:d8:40:7c:92:21:
                    da:07:65:ef:f8:9d:86:32:bd:bc:23:22:0b:a9:d0:
                    ec:68:f1:b7:4f:a4:f8:e2:a5:a4:7b:15:ad:a7:d1:
                    9e:31:5c:e3:6c:f5:aa:42:95:04:0d:a6:b0:32:d1:
                    5a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:13:D2:22:C2:DB:D2:50:10:F7:35:0E:87:75:DB:3D:7E:00:73:13
            X509v3 Authority Key Identifier:
                keyid:E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:cf:ef:59:96:98:c0:c6:a8:b6:81:82:5f:28:59:90:74:7a:
         f2:88:89:16:7e:07:f7:62:4a:6f:a2:36:ef:8e:95:95:cf:4f:
         bb:19:27:27:d7:26:5a:3d:5a:ea:e9:d5:24:1d:8f:35:39:8e:
         0d:64:6f:44:4b:e7:c2:5f:f8:f2:ec:04:c0:9a:c1:79:ee:6b:
         ca:ef:11:f2:01:0c:4f:71:7c:d5:07:e7:5b:4e:0d:e3:5a:67:
         d9:a8:9d:a0:8d:23:69:59:81:0a:c2:02:8b:14:47:6e:27:53:
         12:e1:b4:22:e5:de:f3:3b:98:b7:12:39:56:c8:4e:ab:9c:57:
         5a:08:27:64:05:f0:55:6a:65:e6:78:6d:fd:23:72:76:32:e1:
         5c:f9:60:d9:2f:2b:ff:8f:dd:dc:8d:14:ed:10:9a:2b:16:cf:
         6e:0b:8d:41:50:bb:ef:a3:26:74:6c:51:ca:f0:a0:00:37:df:
         68:26:a0:f4:d4:d7:ca:45:89:ad:12:e0:9a:47:25:e1:e6:c6:
         14:a0:e3:b4:b9:a2:57:fb:6c:46:14:82:6e:34:30:b2:7a:ac:
         a5:0e:e9:df:30:fa:95:a3:a2:39:46:ab:d4:0c:d6:40:35:7e:
         ad:12:89:59:de:2f:5c:b3:7b:9e:d3:6e:51:55:f4:d5:59:3d:
         da:65:57:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:19:58 2026 by rpki-client