Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
File:                     M2YXmy18l7gmb5tDGASoxtLQkOs.mft (raw, json)
Hash identifier:          TjlJTfdkJt5bIFyjxpJIVwWvZDNUxIcncofsYsk60yY=
Subject key identifier:   A7:80:A6:4C:C1:44:78:70:F7:F1:29:82:73:90:54:C2:56:BA:E9:EC
Authority key identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB
Certificate issuer:       /CN=A91852AB/serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB
Certificate serial:       02AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
Manifest number:          02A0
Signing time:             Fri 25 Sep 2026 01:39:28 +0000
Manifest this update:     Fri 25 Sep 2026 01:39:27 +0000
Manifest next update:     Fri 02 Oct 2026 01:39:27 +0000
Files and hashes:         1: M2YXmy18l7gmb5tDGASoxtLQkOs.crl (hash: 9Trbk5uB31TbMx12doZRgwiS1T2q34eWJ7Fou2L/vm4=)
                          2: B6522520CA6311F09583DE23C4F9AE02.roa (hash: BLKJYKfre7LAbOlIyN9gi1hwCec2KGQoAxw2GSxc1Lk=)
                          3: E90A311AB8BE11ED83994B4AC4F9AE02.roa (hash: zE41WQieGtPZ6uprujzngfIRBwGKIWd50MUZOTimbRA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl
                          rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 01:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 684 (0x2ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91852AB, serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB
        Validity
            Not Before: Sep 25 01:39:27 2026 GMT
            Not After : Oct  2 01:39:27 2026 GMT
        Subject: CN=6ab5d0d0-975f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d4:4d:af:12:6b:d3:84:f4:a2:55:35:41:9a:
                    bc:ab:56:82:6d:e6:32:96:df:c1:64:21:7f:26:2e:
                    ab:f1:0d:41:47:78:e5:1a:0e:fd:50:de:4f:f3:30:
                    0b:c2:38:2a:96:9e:bf:71:37:dd:43:89:08:81:fd:
                    ed:2f:66:14:da:a0:e7:0f:d0:11:dd:1a:97:bb:8c:
                    cc:7d:72:44:3f:25:87:5f:2e:94:4e:72:e7:bb:c2:
                    21:7a:f2:dd:27:23:b4:7f:1a:87:6c:5b:81:3e:ed:
                    e3:ff:1f:7c:a7:ec:11:d5:57:0d:c1:1d:66:bb:e7:
                    e0:62:28:f0:42:84:fe:9e:c4:68:ee:a5:73:ff:15:
                    44:5f:e0:61:f6:c3:f2:67:50:3d:b8:6f:13:65:bc:
                    52:91:05:95:39:69:9d:3f:7f:ec:ce:7c:df:16:23:
                    8c:b9:04:87:13:49:17:45:5c:97:bd:87:48:d4:fc:
                    e9:d6:ca:ec:1d:c4:8b:90:f5:ed:bb:d6:a6:15:64:
                    ad:7f:d6:c4:19:e0:4b:b7:80:09:4b:cc:9d:47:60:
                    a7:e6:7e:33:65:0f:14:ef:a4:95:57:31:6b:be:eb:
                    8f:9d:24:ab:69:e1:51:c6:1a:79:8a:c7:b3:e6:86:
                    a9:ca:e2:da:7e:55:d8:87:59:56:e0:66:d5:11:8c:
                    5e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:80:A6:4C:C1:44:78:70:F7:F1:29:82:73:90:54:C2:56:BA:E9:EC
            X509v3 Authority Key Identifier:
                keyid:33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:f5:e5:99:8a:92:17:3d:d9:79:65:b8:3d:54:49:30:e8:57:
         52:7c:d4:cf:58:b8:91:bb:25:4a:67:3c:f6:a5:82:17:c3:40:
         83:51:79:61:a2:9e:5c:c3:a0:76:81:82:6b:bf:27:4e:93:43:
         d8:89:04:ee:eb:27:fa:db:f6:9f:d2:a3:41:58:eb:0c:9c:f0:
         cf:04:72:3c:ca:d2:b3:0d:35:9c:54:a1:19:08:fc:18:55:e1:
         47:57:ab:46:45:b0:87:8a:78:10:79:b1:d0:79:f4:44:38:4b:
         14:43:cd:51:4e:df:39:9b:bc:e6:d0:c9:92:07:ff:a8:34:f8:
         f9:da:85:0f:78:89:a9:f2:de:8d:64:a1:ad:68:40:9c:65:4d:
         40:af:6a:e0:c5:b8:a8:bc:8a:39:28:b4:0b:31:4c:29:5f:4b:
         e6:4a:cb:d1:e4:17:f6:07:cb:9c:2b:dd:71:42:70:0a:8e:aa:
         41:84:91:c0:b1:8e:e2:64:0f:f8:f4:52:d9:8b:58:c8:65:24:
         27:40:18:3a:d7:86:6e:8d:e2:cd:60:17:71:43:36:0b:66:5b:
         5a:e5:72:14:ea:8e:a5:e2:cf:53:a2:56:ad:19:d6:74:03:d5:
         fc:1d:49:94:a7:72:dd:d5:cc:e8:f5:1f:62:27:f9:36:02:a2:
         0a:2b:d7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:03:25 2026 by rpki-client