Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft
File:                     73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft (raw, json)
Hash identifier:          W//BeIUsW0ZHgokOzyvbHdhdZBhgnxXgpHmnzdSAArw=
Subject key identifier:   F3:14:F4:B7:2C:C0:20:D4:3F:BC:93:39:D1:CF:B8:FA:DA:E4:D1:A3
Authority key identifier: EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64
Certificate issuer:       /CN=A917E458/serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft
Manifest number:          0101
Signing time:             Fri 25 Sep 2026 06:14:13 +0000
Manifest this update:     Fri 25 Sep 2026 06:14:13 +0000
Manifest next update:     Fri 02 Oct 2026 06:14:13 +0000
Files and hashes:         1: 73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl (hash: 8GHRu7XddE/TtyCge+2cpRTFDqt39h82sVT1nJEPj9g=)
                          2: 0E6E2FF4590A11F0B7FD292DC4F9AE02.roa (hash: Si9syy0a10iRlCe9npjHmkK+zgQ6f2XPNBmPhKIkgHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl
                          rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 06:14:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E458, serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864
        Validity
            Not Before: Sep 25 06:14:13 2026 GMT
            Not After : Oct  2 06:14:13 2026 GMT
        Subject: CN=6ab61135-1ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1f:14:88:7c:37:91:f3:8a:14:57:63:75:5c:
                    7c:b5:2c:66:e3:5e:50:35:36:f8:62:8f:11:da:cc:
                    ff:f1:2b:e2:9a:dd:46:a0:75:f7:8e:5d:a8:ba:0e:
                    fc:50:23:31:da:a2:8f:1e:b7:d1:59:c1:c2:e3:9b:
                    64:59:5a:18:0c:02:83:9e:ba:1c:d1:51:00:ae:1e:
                    55:e5:6d:8f:d7:de:ae:3c:8e:35:ea:3f:a1:84:80:
                    c1:82:7d:c2:d8:7e:95:bd:77:94:8f:5b:7e:e3:2f:
                    db:d0:4a:00:87:e3:2e:34:bf:b1:49:56:dd:63:54:
                    50:94:86:fe:e6:34:ce:a4:3e:18:a2:7e:b2:01:ac:
                    63:5d:74:7c:48:99:c7:e1:a8:18:bb:c5:b4:ce:82:
                    17:97:5f:22:26:5f:ce:88:e6:03:0d:44:8f:a8:68:
                    b8:f3:85:e7:18:a6:45:e9:89:45:9e:dd:17:3c:84:
                    88:3d:0e:82:ca:f9:64:0a:43:3c:eb:15:46:fb:19:
                    0c:22:43:a7:b6:49:6d:11:5b:c5:86:a3:c1:b1:21:
                    17:13:88:22:6b:84:4e:4d:42:10:8a:cb:d5:85:28:
                    25:96:ac:45:b8:f6:08:19:8a:cc:07:7d:d6:bc:20:
                    75:b5:77:b8:3b:36:41:e8:2d:73:61:b7:78:37:4f:
                    4f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:14:F4:B7:2C:C0:20:D4:3F:BC:93:39:D1:CF:B8:FA:DA:E4:D1:A3
            X509v3 Authority Key Identifier:
                keyid:EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ba:e2:1d:1e:5f:23:1c:45:0b:12:bf:59:ef:b6:a4:a9:91:
         53:66:a6:b6:2c:50:6a:25:0b:27:0b:ec:70:a3:94:c6:ff:7f:
         1b:f9:1f:d3:3a:f7:f4:0b:a1:c8:a5:81:ed:cc:c8:23:f3:f5:
         4c:30:65:14:0b:77:06:ba:99:c9:dd:bb:ba:14:72:67:d3:a9:
         46:ad:a6:cc:cd:e8:03:9c:72:ee:6b:df:f2:a9:a1:1a:a3:3d:
         2e:8e:20:e6:cd:d8:8b:bb:7a:0b:86:b5:fc:b9:fa:95:17:16:
         34:19:22:b0:80:21:6d:c8:cc:6b:88:fa:53:d0:b0:48:d7:fe:
         12:22:4f:ee:04:49:b6:02:dd:a4:77:8d:9c:7a:df:77:d4:18:
         58:ca:ad:02:a6:56:09:91:0a:3e:de:5a:a1:39:45:b5:37:2f:
         f4:a5:86:b8:5b:7f:59:e1:d2:33:b2:90:8c:d8:9a:ca:03:b9:
         34:2f:f6:4c:32:dc:6b:63:23:08:52:2e:7b:2c:58:05:1e:e7:
         9a:06:23:30:96:d6:9a:d0:cd:d3:7e:eb:bd:7b:47:c1:3a:11:
         c0:12:9b:44:99:88:0f:16:23:c0:5d:ef:46:63:24:f8:1f:a4:
         36:ab:22:3a:68:c3:9c:bd:6c:ad:fe:5c:c3:ad:7d:67:e8:ef:
         f4:f5:48:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:02:29 2026 by rpki-client