Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
File:                     Aul8r2u1VIcberzm6NeDIOuURpE.mft (raw, json)
Hash identifier:          QXalBxQ0mVek4j/v59Sb1CmlbN66+w9nlAflqex9Czw=
Subject key identifier:   53:DB:69:BD:F3:FD:73:9C:26:AD:5D:9C:4D:DB:48:50:85:D0:9A:D0
Authority key identifier: 02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91
Certificate issuer:       /CN=A917A47E/serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691
Certificate serial:       24E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
Manifest number:          24CE
Signing time:             Thu 24 Sep 2026 15:44:51 +0000
Manifest this update:     Thu 24 Sep 2026 15:44:50 +0000
Manifest next update:     Thu 01 Oct 2026 15:44:50 +0000
Files and hashes:         1: Aul8r2u1VIcberzm6NeDIOuURpE.crl (hash: Aqi+VN4AIUpaeLgoFYogyVhmkMnI4ug2XyCmzTS/yKM=)
                          2: 0B72CFAC049211EBB8144531C4F9AE02.roa (hash: QCiOK4+KmOrUy5xMwngOwn99titohfwS/g83Zrx37lg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl
                          rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 15:44:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9447 (0x24e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A47E, serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691
        Validity
            Not Before: Sep 24 15:44:50 2026 GMT
            Not After : Oct  1 15:44:50 2026 GMT
        Subject: CN=6ab54572-3cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:54:21:da:a1:46:1d:89:03:4c:9a:59:04:77:
                    20:d0:ca:97:47:6a:f5:f7:4f:d7:2a:a3:f2:ec:e6:
                    8a:cd:61:7d:5c:52:49:1b:4a:98:dc:a9:fe:d9:07:
                    d3:78:6d:5b:82:3e:4e:51:9d:e3:89:7a:d8:ce:23:
                    83:9d:e7:c0:ec:68:1b:7d:a2:85:e7:85:6c:4a:1f:
                    f8:b9:a2:4a:29:d9:91:e6:cc:03:cf:d3:fb:de:c1:
                    f4:14:b1:be:23:8c:cb:69:17:4e:05:54:a1:b6:b0:
                    6d:c1:22:88:50:c1:e4:43:53:9a:2e:aa:04:f1:3d:
                    77:94:3d:c7:1e:fd:23:4d:39:29:e9:2c:97:91:09:
                    38:1c:c3:25:78:dd:4e:96:db:43:13:8a:a6:bc:87:
                    a2:80:30:5a:00:87:45:a9:d4:3b:72:c7:83:5d:55:
                    dd:c6:2d:40:a1:57:1f:1a:14:a9:62:71:0b:58:89:
                    0e:c6:96:68:30:6c:2e:c0:e0:44:2d:1d:c4:35:4b:
                    39:a3:cf:29:18:93:ee:98:40:dc:d0:d0:3f:7e:2a:
                    62:4c:1d:8e:ea:a1:cb:b5:a2:23:b6:52:91:7f:f6:
                    a7:23:29:13:79:f0:07:f5:e3:02:85:a9:94:91:a1:
                    f3:24:ea:20:12:0f:eb:21:ac:18:18:c2:89:95:c0:
                    fa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DB:69:BD:F3:FD:73:9C:26:AD:5D:9C:4D:DB:48:50:85:D0:9A:D0
            X509v3 Authority Key Identifier:
                keyid:02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:46:d3:1b:4a:d5:6c:17:6e:33:2a:10:8d:ff:f3:9e:d0:8f:
         13:80:9e:b8:0d:72:b4:2f:89:49:d8:ef:da:95:9f:40:a0:fd:
         4d:89:07:e3:ba:f9:38:a8:a7:c7:12:fd:b3:70:1f:0b:2a:d1:
         55:c2:45:7e:7e:e2:1b:ca:a3:2e:9c:42:ad:34:13:1d:3f:a1:
         05:43:bc:35:e2:69:84:74:23:97:44:bd:c2:57:10:28:99:65:
         61:16:f5:2d:ba:b9:56:48:53:0c:4f:3a:24:1f:ab:43:22:bf:
         18:60:77:17:1f:75:0c:57:1f:49:88:50:b8:d3:00:e4:47:46:
         82:e4:6d:c5:58:09:34:5b:ed:79:62:e8:fc:79:d7:39:f2:b3:
         72:b0:63:ae:07:8b:3e:0e:cb:6e:5c:fc:c6:37:a3:25:68:d8:
         ca:d3:c9:b1:aa:2d:ea:58:78:ba:80:a9:88:3e:65:cd:61:4c:
         03:19:2a:37:ed:08:29:16:18:8f:8a:b8:dd:25:da:07:99:e7:
         65:24:18:98:f0:62:31:75:f8:a9:f8:b3:42:0c:74:54:4a:73:
         e3:5e:c7:f4:04:f7:5d:4f:09:b3:a2:c9:d7:c4:2b:3b:bd:a5:
         ca:65:21:92:37:7c:76:7a:5c:41:f9:1e:8f:61:26:a5:04:ab:
         0f:55:7e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:03:57 2026 by rpki-client