Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
File:                     rOKNq-U2SWN_puTjId4bY0Y7g88.mft (raw, json)
Hash identifier:          LWb/cwbHzKi28tEMaXmVBVdenPGwxWuWN+YXrDdPf9Q=
Subject key identifier:   FB:06:99:2A:69:3E:C1:D8:34:50:91:E7:59:C0:D6:AD:1B:ED:F0:6E
Authority key identifier: AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF
Certificate issuer:       /CN=A9186249/serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
Certificate serial:       01ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
Manifest number:          01E6
Signing time:             Mon 21 Sep 2026 03:30:32 +0000
Manifest this update:     Mon 21 Sep 2026 03:30:32 +0000
Manifest next update:     Mon 28 Sep 2026 03:30:32 +0000
Files and hashes:         1: rOKNq-U2SWN_puTjId4bY0Y7g88.crl (hash: JwCz3cE0u1J3dII1SIEjcVlTYXF67/fpwFknDf+FNGo=)
                          2: E7F6D15AD17411EE87F7325DC4F9AE02.roa (hash: zQuRWZynPjX+xVieuFFOjcx7urcSlA8n96bIrvyW0V4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl
                          rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186249, serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
        Validity
            Not Before: Sep 21 03:30:32 2026 GMT
            Not After : Sep 28 03:30:32 2026 GMT
        Subject: CN=6ab0a4d8-9cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b5:cb:3d:66:7d:d2:87:dc:8f:8f:6a:99:ef:
                    3b:4f:fd:d2:62:9e:f3:59:07:f9:b2:cf:2b:b2:ac:
                    df:07:15:fd:39:8c:4e:08:77:33:f9:28:ce:b4:8f:
                    8c:2b:61:0a:7c:25:cb:7a:d3:27:32:cb:c3:3a:9a:
                    ee:ee:b6:ac:86:88:0e:14:91:34:61:cb:72:98:41:
                    f5:aa:cb:d6:4b:88:22:3b:27:78:d4:19:8c:ba:84:
                    12:33:5b:da:eb:17:e1:c7:ba:c2:95:b7:7c:dc:77:
                    2f:d2:85:1a:b1:40:b2:6f:68:5d:08:19:d0:b2:4e:
                    66:2a:66:a6:78:f3:28:0a:6b:31:b4:62:e9:20:fe:
                    95:f2:d6:b8:08:f0:37:20:cb:56:35:da:21:14:aa:
                    58:94:6d:74:68:34:53:60:83:0e:8b:5d:f9:01:9e:
                    ee:39:be:49:08:34:47:c2:1e:ec:d6:c7:12:90:24:
                    84:c4:9c:aa:51:3d:6d:ab:bd:55:3d:42:ed:4c:f8:
                    c4:fd:94:8a:73:24:97:24:8e:86:e6:f1:bc:1a:03:
                    a6:48:6b:5b:c7:22:2e:eb:44:19:c0:19:85:04:6e:
                    c7:78:22:d3:02:cf:d6:fe:c0:b9:36:9b:31:b1:b9:
                    85:be:2c:1f:49:a9:4e:bb:25:94:55:a1:dc:64:0a:
                    57:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:06:99:2A:69:3E:C1:D8:34:50:91:E7:59:C0:D6:AD:1B:ED:F0:6E
            X509v3 Authority Key Identifier:
                keyid:AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:80:72:c3:d2:e8:ef:dd:93:29:dc:52:93:32:73:f3:0d:da:
         f9:e8:ed:cf:6a:15:d1:78:a4:28:a0:a5:38:62:b0:91:fa:a3:
         af:1b:39:e8:bf:4b:61:71:73:a3:18:e9:23:7b:29:fb:1f:aa:
         53:2d:0d:f9:39:a8:55:03:38:f6:5e:4a:fb:d7:a1:3d:c6:ee:
         a2:d6:d2:fe:da:f0:23:f4:11:9c:b7:ee:18:41:7a:db:12:d5:
         fb:75:fc:54:e1:d6:87:90:b2:e9:b9:15:84:95:6b:4f:d0:f6:
         1e:6f:69:fb:04:af:82:f3:8d:f8:e3:48:18:f7:e8:be:42:62:
         14:29:ab:2f:24:6e:db:36:32:c8:23:7e:5e:5d:be:54:b8:6a:
         ae:e1:24:ee:5b:51:d3:08:58:8b:71:da:80:03:41:4b:f1:b3:
         94:38:31:6b:75:f7:b0:0f:0a:89:68:aa:6a:00:05:20:86:37:
         8c:d8:d7:bc:58:5d:ed:56:e5:2a:ff:5b:af:09:b8:95:67:43:
         cb:44:27:82:6d:a5:e9:71:96:c8:d8:a0:d8:7c:a7:51:78:4b:
         66:21:e6:f9:1f:df:11:09:98:6f:71:4e:0d:d7:06:a9:cc:02:
         85:32:2a:37:9f:0f:f5:8f:3e:91:c8:8d:4d:db:19:e2:92:69:
         bd:68:49:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:47:23 2026 by rpki-client