Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
File:                     M3ujEf33twUntX7AOA8fu_o1iu8.mft (raw, json)
Hash identifier:          Azqcn4YbCjjULR136fiFpHJbQ8ZA9gZQ+2XpbEYS3EE=
Subject key identifier:   74:63:0B:EC:8B:87:E1:45:1F:99:FE:F4:BE:88:D1:8E:2F:D7:44:4E
Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF
Certificate issuer:       /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
Certificate serial:       0205
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
Manifest number:          01FE
Signing time:             Wed 23 Sep 2026 03:07:25 +0000
Manifest this update:     Wed 23 Sep 2026 03:07:24 +0000
Manifest next update:     Wed 30 Sep 2026 03:07:24 +0000
Files and hashes:         1: M3ujEf33twUntX7AOA8fu_o1iu8.crl (hash: lRT83ViPOkruCjJ++Al9XAn3XZTStfwLsl/ix83dJeA=)
                          2: F0674762B6B611EE8EF4443AC4F9AE02.roa (hash: JywGGgtSRiccbe4SHID4l5TKHjN2URlgdMd3UPD4Hlo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl
                          rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918497E, serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
        Validity
            Not Before: Sep 23 03:07:24 2026 GMT
            Not After : Sep 30 03:07:24 2026 GMT
        Subject: CN=6ab3426d-efc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fe:82:7f:54:35:c6:f0:13:09:33:b2:e0:83:
                    a4:02:06:07:1e:a0:47:6d:32:d4:7a:1a:e1:bd:80:
                    ae:34:73:b6:ad:bf:2b:53:67:9d:ef:54:44:ed:86:
                    61:7c:83:a0:2c:7f:12:be:ee:62:ff:0b:e9:0e:ba:
                    41:61:7c:10:36:b1:bb:28:66:28:8a:50:81:07:c7:
                    8b:93:51:d8:1e:89:e6:71:aa:2b:24:de:3a:d8:e9:
                    93:f3:6b:8c:27:7e:b1:e4:4b:61:ba:32:43:a7:75:
                    11:52:32:f8:07:7b:b9:aa:0e:88:f7:32:9d:3b:d4:
                    d5:b2:a9:0c:a0:dd:41:10:e1:b2:40:7c:b1:4b:24:
                    e6:d3:af:c0:e7:f2:f6:1b:71:9d:41:b2:f1:1a:4f:
                    18:17:1a:14:70:69:ba:c7:3e:ee:fd:43:77:4d:49:
                    73:21:e4:f3:2d:48:40:75:18:03:89:99:24:1f:0c:
                    2c:37:5c:b6:d4:65:d7:b5:d4:1c:a2:db:18:b0:0d:
                    0e:cc:60:92:e2:82:58:99:2e:e6:cb:34:91:42:77:
                    b8:c2:86:08:ef:48:b1:bb:49:04:65:95:cf:a0:fa:
                    57:58:dc:2b:73:dd:78:f2:ef:b3:8a:4f:59:85:6a:
                    cf:84:a2:29:6d:c5:2f:ee:37:54:7b:1c:4b:ef:7c:
                    61:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:63:0B:EC:8B:87:E1:45:1F:99:FE:F4:BE:88:D1:8E:2F:D7:44:4E
            X509v3 Authority Key Identifier:
                keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:be:01:78:41:79:05:fc:2a:05:3c:26:93:87:b6:19:02:1b:
         05:c7:5b:5a:cb:a7:57:02:69:95:8f:26:25:23:8d:d6:74:a2:
         88:07:93:91:f4:7b:f2:47:b6:aa:47:47:e1:a5:3e:c4:87:68:
         13:7a:0c:52:b5:a1:ca:a3:f8:2b:ba:d7:97:56:e1:8b:28:48:
         87:e9:eb:55:c6:c5:4f:f6:0e:68:3e:ac:a4:cf:9c:8b:d2:8a:
         52:86:b5:6d:4b:6f:88:cd:5c:0a:5b:3a:c3:a5:f4:b8:d2:80:
         4f:43:32:c6:16:06:18:b1:c4:fa:56:ad:55:b3:e7:29:b7:56:
         3c:b1:ee:cc:27:33:95:91:5e:54:07:67:29:bf:c6:ab:08:1e:
         3b:5f:da:e0:72:9a:7f:dd:c7:c5:5a:7f:1a:b9:6f:39:96:32:
         3c:c9:10:14:de:90:53:c0:0a:3b:ec:0c:b3:f1:96:ec:5b:18:
         96:c1:a1:a7:37:b4:b2:10:14:8e:54:30:84:a0:44:6a:3a:d4:
         c5:0b:5c:46:0f:2c:ed:b9:6a:5b:ff:27:d9:dc:12:ad:8f:8b:
         27:fe:e3:c4:93:a2:0a:00:a9:ad:c2:4f:75:54:45:9b:be:87:
         65:0d:37:e2:a6:9e:aa:ce:32:b2:4c:cd:cf:74:d1:f0:02:60:
         76:25:f2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:43:08 2026 by rpki-client