Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
File:                     1cjx3JTTw0gdbGlTaVakpSjV7cM.mft (raw, json)
Hash identifier:          st9AbZrCkU1QC0YvHmRokAs3tTLRUqmjGOHEJyalrLo=
Subject key identifier:   17:D6:99:CB:72:FE:70:08:09:76:09:4B:29:EF:09:AF:43:1E:2B:11
Authority key identifier: D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3
Certificate issuer:       /CN=A918AA4D/serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
Certificate serial:       3152
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
Manifest number:          311D
Signing time:             Sat 26 Sep 2026 15:28:10 +0000
Manifest this update:     Sat 26 Sep 2026 15:28:09 +0000
Manifest next update:     Sat 03 Oct 2026 15:28:09 +0000
Files and hashes:         1: 1cjx3JTTw0gdbGlTaVakpSjV7cM.crl (hash: Y59XF2+vE1TGzwcE3PT3pHilrUHBzeDxE3xdu/hm/Wg=)
                          2: 517E7D1AB0EC11E5A6934B42C4F9AE02.roa (hash: Bz//bvS0kdUfB4W4QFGlF1YOCaq6K5LrqWtF6l+hz/g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl
                          rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 15:28:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12626 (0x3152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA4D, serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
        Validity
            Not Before: Sep 26 15:28:09 2026 GMT
            Not After : Oct  3 15:28:09 2026 GMT
        Subject: CN=6ab7e48a-4cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9a:3b:b1:30:46:7a:3b:05:7b:db:e5:da:df:
                    fa:f0:a5:ce:0d:ab:3e:20:a8:a0:cd:b4:16:a6:5c:
                    05:1b:6d:2f:b7:6c:4d:19:4d:54:f4:a0:e1:9a:16:
                    61:a0:08:ed:cc:f6:4b:86:82:50:3c:4c:f4:b6:78:
                    5d:8e:b7:cf:ee:2d:09:f8:54:96:1f:cb:5a:f4:6a:
                    27:18:be:4e:d8:10:a9:45:7b:3c:8e:da:fc:de:1c:
                    d5:fa:de:97:df:74:c8:70:1a:14:2f:ae:2a:af:dc:
                    f4:51:a3:5f:90:60:55:30:4c:03:a2:88:da:c1:03:
                    12:52:8a:63:35:d3:cf:cd:d4:4b:b5:82:82:fa:b9:
                    3b:a7:cf:47:c7:cc:7d:92:5b:9d:a0:d2:25:4c:45:
                    96:fb:8f:47:c7:c3:22:90:db:3d:f6:71:3f:87:f4:
                    0e:ed:e8:58:a6:27:6e:52:9e:ad:12:65:13:f2:e9:
                    91:cb:62:33:31:d9:30:0d:1a:c9:fb:39:15:67:13:
                    ce:b0:43:2d:27:c7:e7:49:3c:32:4f:84:e6:2b:c4:
                    04:a6:d1:06:84:1a:f1:8c:34:d4:af:e3:8d:c7:57:
                    6e:12:f2:cb:00:99:db:91:0b:a5:50:fb:0e:44:1b:
                    6a:27:cf:67:c5:f9:d8:b9:2e:3b:47:b6:fc:c1:d7:
                    1d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D6:99:CB:72:FE:70:08:09:76:09:4B:29:EF:09:AF:43:1E:2B:11
            X509v3 Authority Key Identifier:
                keyid:D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:0d:11:8f:52:1a:71:77:28:5c:5f:74:bf:60:09:da:04:a1:
         0a:8d:d7:ca:98:6e:1f:39:f5:08:7e:9c:bd:60:cb:a5:db:7a:
         ad:f9:0a:17:71:6f:02:c0:05:29:df:cf:cd:87:1e:9d:70:f5:
         84:1c:ba:6c:64:39:30:00:4e:7a:32:bc:7f:d8:d9:df:5c:bc:
         86:a1:ca:2f:ea:13:d2:28:08:3d:13:4f:a0:63:a9:4a:d2:34:
         a2:07:48:d8:3b:47:8e:2a:2c:8d:36:0c:06:68:cd:3c:3a:4c:
         86:ca:2d:4b:c1:18:d6:20:b8:13:44:b4:98:bc:a9:78:a1:24:
         69:aa:3a:c5:a1:46:aa:35:0e:d5:91:9e:31:32:04:1c:e7:d8:
         44:f2:9d:a1:45:a1:4c:e7:8b:1d:1d:e4:d9:ff:8e:35:ae:bf:
         4b:84:24:58:7f:1a:bc:49:6d:f5:c7:2e:2f:c8:fe:c8:5b:97:
         3f:5c:7b:08:3c:c7:b0:e8:8e:6a:c0:1a:b5:b2:a1:50:b2:ba:
         fd:a4:48:98:07:c8:4f:aa:80:f8:a5:36:0f:f2:cc:eb:d3:85:
         61:fc:99:84:b9:5d:82:f7:c2:90:80:71:de:58:87:90:a7:0e:
         76:08:1c:1b:6b:a8:e7:04:2b:0c:e6:46:f6:43:24:16:1b:8e:
         14:95:83:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:52:56 2026 by rpki-client