Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
File:                     mZujdBECimL7UV3PAozaLcmrydE.mft (raw, json)
Hash identifier:          Q/VJ3XI48RXicxmhx7M7vBdXauIBqR1Cxz/4Nf2B144=
Subject key identifier:   50:60:4F:25:5D:3C:1E:AB:79:70:C0:3F:8A:BD:73:E3:7B:AD:0A:FD
Authority key identifier: 99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1
Certificate issuer:       /CN=A9184359/serialNumber=999BA37411028A62FB515DCF028CDA2DC9ABC9D1
Certificate serial:       0287
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
Manifest number:          0281
Signing time:             Fri 25 Sep 2026 01:55:01 +0000
Manifest this update:     Fri 25 Sep 2026 01:55:00 +0000
Manifest next update:     Fri 02 Oct 2026 01:55:00 +0000
Files and hashes:         1: mZujdBECimL7UV3PAozaLcmrydE.crl (hash: GfihalUr3RUjTd2hBIdQQ0E7bukxEoNk9CbbXqNtmtg=)
                          2: F27BE0E2E4CC11EDBAFF045BC4F9AE02.roa (hash: 4BZDPtA8kCzvoWSd4ZDqkXZ6Dy5M7OJqgdsIt9Ar+ag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.crl
                          rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 01:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647 (0x287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184359, serialNumber=999BA37411028A62FB515DCF028CDA2DC9ABC9D1
        Validity
            Not Before: Sep 25 01:55:00 2026 GMT
            Not After : Oct  2 01:55:00 2026 GMT
        Subject: CN=6ab5d475-2e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5c:a5:e1:f1:e2:ac:79:ed:ef:f6:a1:fa:f2:
                    18:e5:32:88:3e:3b:74:37:ee:6b:84:65:0e:89:22:
                    b9:32:ee:71:7e:83:ed:c2:e7:c4:4d:66:f2:d2:d9:
                    88:11:9d:92:40:3f:ec:17:3a:56:d4:55:ea:54:24:
                    d7:cf:ea:8e:dc:67:21:8b:68:95:37:7e:0f:85:81:
                    01:d5:0d:df:6a:d8:dc:8d:c9:c4:9f:af:12:ee:6d:
                    21:5d:6c:6e:44:a6:9c:6c:57:c6:ab:ce:2f:88:9d:
                    75:15:df:cb:1a:96:b4:39:00:21:b4:e3:5a:29:b0:
                    8f:18:66:ac:c6:b8:74:6c:07:98:ea:97:0f:f3:cd:
                    c8:ff:0f:10:99:1f:3b:b8:61:93:25:99:ad:f4:bb:
                    f8:5a:17:ee:07:26:f0:d7:30:8f:ff:0a:31:f0:ab:
                    49:1c:2a:17:c0:e9:6b:fa:f7:8a:18:7b:a2:10:a7:
                    c3:4c:02:e4:40:0d:9d:ff:be:c1:53:68:9e:9f:e4:
                    25:34:24:e1:e2:f2:75:32:ea:1c:71:95:23:68:7c:
                    eb:ec:88:88:89:02:23:d1:4d:8a:b7:5d:43:da:f6:
                    8f:7d:1d:bb:93:19:9a:0d:c8:6e:3b:d9:8e:3e:0f:
                    90:4c:ab:9a:5e:46:74:81:b8:43:41:72:ca:bf:7b:
                    3f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:60:4F:25:5D:3C:1E:AB:79:70:C0:3F:8A:BD:73:E3:7B:AD:0A:FD
            X509v3 Authority Key Identifier:
                keyid:99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d6:d5:9b:5b:7f:1e:67:73:47:bc:a0:80:da:1a:51:a9:0f:
         47:52:5b:6a:58:3e:71:61:8e:8f:83:1b:dc:4d:4b:8a:a2:3f:
         cf:b2:ab:90:9c:48:1b:85:56:6e:62:47:3a:f6:a5:d7:3d:be:
         c4:7d:34:a0:07:ac:e4:ae:f0:c2:a8:92:68:45:8f:cc:d9:a3:
         e8:de:f4:16:a9:ed:ed:fe:e1:26:4b:2e:58:3e:ae:eb:d0:51:
         f5:64:cf:df:21:99:91:8d:7e:4b:7f:55:02:4c:fb:6f:44:d6:
         58:b6:3d:46:0e:9e:1e:e4:23:ac:d5:7c:d7:79:9a:c5:c7:80:
         e3:30:bb:54:71:de:c4:1e:14:12:d2:1d:fa:aa:3a:c1:1c:b8:
         fd:4f:c0:6e:37:70:1a:48:e5:a6:9b:60:76:00:02:f8:4a:e8:
         27:b3:c2:3f:ba:84:69:a3:1d:be:ca:0f:55:58:80:0c:44:2c:
         c2:69:c1:6c:3c:8b:76:2e:23:86:eb:a1:1a:02:01:41:22:5a:
         7b:1a:f7:37:54:85:c0:90:80:66:bf:69:9e:b9:7f:8d:64:d5:
         35:b8:ca:84:18:b0:49:07:7c:dc:c2:d1:c4:80:c5:7b:b8:96:
         94:a2:e5:94:6c:9c:51:7a:b1:ea:71:2d:e8:a7:e2:72:5c:78:
         21:ff:70:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:58:58 2026 by rpki-client