Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
File:                     dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft (raw, json)
Hash identifier:          w2LHTyq5hEVJ6lPezmlmUrXIMa8MOp61PPE7Ge15eik=
Subject key identifier:   20:C0:A8:B0:CF:57:ED:DB:6A:E7:29:59:05:92:24:3C:51:8E:FB:6A
Authority key identifier: 74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13
Certificate issuer:       /CN=A9185259/serialNumber=745036097429CC1AC76C4C99898D06F83E075C13
Certificate serial:       C1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
Manifest number:          BD
Signing time:             Fri 25 Sep 2026 07:01:05 +0000
Manifest this update:     Fri 25 Sep 2026 07:01:04 +0000
Manifest next update:     Fri 02 Oct 2026 07:01:04 +0000
Files and hashes:         1: dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl (hash: e+JIsutzo15vMmeqKYckKmvqo5PFITGKqLQVd/teQ4g=)
                          2: 991FC9309CFA11F08F0A1549C4F9AE02.roa (hash: u3oEvbx75itItu1LUPoKhhJ7vNGvSPwwEcVgmBYaNDM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl
                          rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185259, serialNumber=745036097429CC1AC76C4C99898D06F83E075C13
        Validity
            Not Before: Sep 25 07:01:04 2026 GMT
            Not After : Oct  2 07:01:04 2026 GMT
        Subject: CN=6ab61c31-5d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:c1:b0:56:ca:02:4f:1c:c4:1b:96:df:0b:
                    e7:7d:25:7e:57:e3:60:bb:0e:cc:18:7e:85:10:ee:
                    5a:bc:8e:4f:2d:f9:5e:5a:44:4e:2f:2c:8b:1c:e6:
                    cd:67:ed:1a:7e:ba:08:17:6b:89:96:cb:55:29:de:
                    f9:6c:e8:c6:05:dc:56:a3:a4:7e:c0:09:92:dd:ff:
                    3a:31:22:bd:4e:02:07:6b:ff:32:bb:11:7a:e4:60:
                    27:67:ad:5a:d5:e6:31:a1:9b:d7:b4:91:e8:d3:33:
                    01:fb:41:47:e4:a4:24:33:08:bc:e2:a2:e4:2d:7c:
                    27:73:dc:54:54:39:af:6c:00:bc:d4:cf:25:bd:79:
                    6f:aa:61:67:21:9b:a1:ca:0c:7f:99:22:69:4d:e7:
                    37:a5:8f:d7:f1:ca:9a:aa:9d:57:35:72:02:32:d8:
                    50:59:ea:ac:f4:26:8e:db:00:c4:fb:3b:f8:26:1f:
                    0b:3e:eb:33:8f:5b:e6:be:29:99:55:e5:68:42:be:
                    57:f3:13:95:5c:c0:9f:32:19:01:ec:7b:77:fa:50:
                    7c:76:1e:25:fb:dc:48:49:6f:0a:3f:e9:b9:3b:7f:
                    48:e5:9c:3b:7d:d4:48:1f:c4:f4:e4:3c:fe:c6:03:
                    c2:00:e8:ad:44:7f:b0:96:99:b8:1f:06:c8:3a:d8:
                    79:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C0:A8:B0:CF:57:ED:DB:6A:E7:29:59:05:92:24:3C:51:8E:FB:6A
            X509v3 Authority Key Identifier:
                keyid:74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:9c:7a:4a:8f:9a:75:ae:a8:74:61:9d:1a:de:a2:05:b8:db:
         fe:22:72:7b:fa:c9:d6:7c:47:e5:09:36:da:ff:e2:22:67:5a:
         54:de:3f:21:97:c5:a3:eb:3b:4e:3e:bb:9e:45:98:87:83:fb:
         5d:2b:05:dc:4a:25:27:67:24:1c:0c:08:ad:4e:87:df:7d:dc:
         a7:c8:6f:b3:93:ae:d5:b2:2b:9c:3d:ad:d8:df:ee:59:14:0b:
         c3:86:3f:3b:15:49:87:79:e1:89:68:36:ab:b3:89:92:f0:cd:
         b5:10:bd:2b:32:9d:4f:bc:c4:5a:ae:d5:12:fc:9e:3d:ef:9c:
         03:d3:e5:f0:fe:08:5e:5c:24:83:5a:82:a6:55:53:8a:97:57:
         4b:37:fe:59:bc:64:36:13:cd:01:16:66:da:79:fa:12:1a:32:
         d0:5b:3f:da:54:f9:de:6b:95:52:55:0e:5b:1d:65:b1:24:b2:
         35:66:19:b4:46:31:13:7a:6b:88:6b:09:de:bc:5c:ea:ba:2a:
         b7:7a:cf:0c:52:7b:00:6b:a6:df:77:f2:9d:90:2b:fd:a0:7b:
         66:85:aa:a4:aa:f9:77:63:44:e0:96:ff:30:5d:a1:7a:af:2e:
         2f:b2:27:b8:42:b6:81:03:9b:f6:84:36:44:e1:f6:ae:d2:fe:
         79:4e:08:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:00:29 2026 by rpki-client