Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
File:                     Cc_-Rn87CcPQbySRnPrH4APku3U.mft (raw, json)
Hash identifier:          nGdzT+WPJR6gtA8Xt2/dOLXBkSrnonj9QT2VAO7UdE4=
Subject key identifier:   B6:F2:93:73:2B:68:5A:5C:FF:1E:13:DB:EE:6C:14:4C:05:E8:7D:DD
Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
Certificate issuer:       /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Certificate serial:       1D14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
Manifest number:          1CD9
Signing time:             Tue 22 Sep 2026 16:07:33 +0000
Manifest this update:     Tue 22 Sep 2026 16:07:32 +0000
Manifest next update:     Tue 29 Sep 2026 16:07:32 +0000
Files and hashes:         1: Cc_-Rn87CcPQbySRnPrH4APku3U.crl (hash: 3nQ2CU3sW9RQ5dfDD8A/9aeopS0LZmv2Aen3VXfr16Q=)
                          2: DB9D2EDA8B6311F1BE3015DD5011F970.roa (hash: PxR/0RyR6Js/JI8WBCRgtBu0jrNkQBg+FdIwvgRcULc=)
                          3: F7CC52C45DF611EC8F523217C4F9AE02.roa (hash: xteJ79wHyuR0rixXXMGsUbkm0SbKtGms9qzJTlI8DjA=)
                          4: 6996CEB84E7011EFA4A32D5CC4F9AE02.roa (hash: 7MyVSleZnWfkmq0xHUwH+VcMTyYARFBA5ijsZwrRfPo=)
                          5: A61100A4C0AF11F0BCC2CE7FC4F9AE02.roa (hash: j6kB/znry1d2/Ft1aG3hJw5izTeR4sJCRF3C0LvwT/M=)
                          6: AE916370292511F198604A079E833773.roa (hash: tgUzFdlOQSWXXogjU4/dQwzUeee/8JuUMUF1DhKD6aQ=)
                          7: B0069018292511F198604A079E833773.roa (hash: rvCiCw6odmw242yWKwXeXkCvn0sxoVd8NeC7DqhgIPo=)
                          8: AF2687DE292511F198604A079E833773.roa (hash: tFLq8+CNxLhCxJRm+42b8Upze1btSlBQf6Y4qxRs7Xw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
                          rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 16:07:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7444 (0x1d14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
        Validity
            Not Before: Sep 22 16:07:32 2026 GMT
            Not After : Sep 29 16:07:32 2026 GMT
        Subject: CN=6ab2a7c4-8d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:74:44:20:90:95:1a:11:46:a6:3d:d0:76:4c:
                    f1:2e:d2:bc:43:9d:cc:93:18:38:c3:48:0d:0e:4a:
                    b2:48:d5:6a:62:85:41:ef:5c:72:8e:78:62:12:8e:
                    56:5f:e9:48:95:46:34:fa:42:45:27:14:99:35:b6:
                    4d:d6:de:6a:e6:b1:f8:92:f9:39:99:a2:83:91:c6:
                    8d:c2:62:73:98:1c:e7:73:32:db:60:43:13:23:93:
                    9c:cd:0c:26:ad:76:37:a3:3e:3c:87:a0:34:a6:9d:
                    dc:bf:ed:c8:67:a7:54:b0:cb:dc:bc:5c:4d:cc:cc:
                    fa:71:99:26:50:c7:10:49:20:62:43:b5:6b:4f:8d:
                    45:e8:aa:d6:64:b4:a5:fc:ef:22:35:df:0a:4c:02:
                    d7:a7:b1:d4:23:66:dc:04:53:7b:00:fa:2f:15:ce:
                    82:c3:03:b6:da:22:35:04:65:1c:1d:1a:9a:03:1a:
                    f2:b4:ea:25:47:16:a5:65:e5:df:97:33:df:bf:37:
                    50:12:68:3a:b5:54:73:b6:73:4d:cd:72:65:b3:68:
                    ab:a2:22:3e:e6:96:0c:45:bb:5a:07:1a:6e:07:60:
                    cb:68:cc:ac:f5:42:71:33:d0:3f:e9:de:58:47:61:
                    b1:58:c2:d1:1c:3e:84:4a:49:28:bb:2d:18:c4:78:
                    59:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F2:93:73:2B:68:5A:5C:FF:1E:13:DB:EE:6C:14:4C:05:E8:7D:DD
            X509v3 Authority Key Identifier:
                keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:92:c3:70:f1:df:06:ad:7f:6c:f8:ac:3b:8b:0e:c3:cf:ff:
         bc:f0:b0:60:58:60:7c:18:b5:64:dc:d4:ee:42:3d:a7:a9:d2:
         8f:bb:cc:a9:08:b3:66:1d:7f:02:99:b2:05:88:e4:7d:00:ff:
         d4:43:94:8f:e7:56:d8:f0:8e:bc:4f:8e:f6:e5:2f:e6:10:e3:
         8d:e4:ed:a2:07:1f:89:5a:b3:6d:1a:1a:87:82:80:25:10:17:
         0e:55:7c:02:44:58:d0:ab:d3:f8:53:02:b7:73:1e:f8:6a:18:
         c2:4b:bf:06:9a:50:c8:f5:05:94:9f:91:36:2e:0c:52:e8:4e:
         11:b7:87:02:94:13:f4:e2:bf:6c:79:aa:0d:77:77:8a:f7:59:
         dd:8f:bf:00:bb:68:c3:34:40:c3:0c:97:81:b4:3e:dc:47:da:
         d7:22:5f:bd:4c:a0:14:4a:47:f4:fd:b6:31:86:01:4b:20:51:
         8e:cb:a4:37:ec:0d:9b:d7:e4:e4:ab:34:f2:68:f2:97:fc:4a:
         c9:f0:15:a5:72:a9:92:46:e2:1a:1a:51:66:04:77:c9:18:96:
         77:4b:ed:b1:e3:e6:13:65:b8:46:0b:ce:8f:12:f1:fa:b9:d2:
         8c:c6:a6:82:80:96:6d:64:05:fd:92:10:2d:57:37:1d:29:5b:
         e5:b1:4d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:34:36 2026 by rpki-client