Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft
File:                     stutBbafR5fu9x8D1lq-rdKJLIA.mft (raw, json)
Hash identifier:          OaQQf+Usjhnjv+Wd6PlBCmeLMOxP6lUnOWhxja3DinE=
Subject key identifier:   79:EE:49:9C:27:A3:A2:84:E5:65:E1:82:89:9B:FA:A8:36:87:1A:C0
Authority key identifier: B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80
Certificate issuer:       /CN=A918D1A4/serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80
Certificate serial:       0450
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft
Manifest number:          0442
Signing time:             Sat 14 Nov 2026 23:59:37 +0000
Manifest this update:     Sat 14 Nov 2026 23:59:37 +0000
Manifest next update:     Sat 21 Nov 2026 23:59:37 +0000
Files and hashes:         1: stutBbafR5fu9x8D1lq-rdKJLIA.crl (hash: aB5p9N+wBRjphsf62crZrw3niF2Y7yqmqTTmzxR1JPg=)
                          2: 897E89B4D56B11EFBE0EB053C4F9AE02.roa (hash: n8oxLBBwwccj9M627OWnQmKjD6Ge8U2OEqxzAgLG+0o=)
                          3: 73AF033CF4DA11EFA82A4918C4F9AE02.roa (hash: wQsVzhGxALrSJM330+fjhnBQYwE8erc6hKI8qp8CPlo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl
                          rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 23:59:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1104 (0x450)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D1A4, serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80
        Validity
            Not Before: Nov 14 23:59:37 2026 GMT
            Not After : Nov 21 23:59:37 2026 GMT
        Subject: CN=6af8f5e9-fc9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0c:11:c7:1d:eb:af:9a:9b:1a:43:34:70:34:
                    ee:f6:90:5e:13:0d:40:c8:42:6a:91:4c:dd:d1:ad:
                    7f:e9:5b:4b:12:2b:bb:c7:23:fa:4a:71:a7:af:24:
                    11:bf:ac:92:65:a3:77:18:fd:61:d8:36:4a:b6:f6:
                    a3:7c:d0:01:61:d5:30:54:78:7c:5d:f7:d7:32:dd:
                    a3:75:12:fc:79:dd:f5:e2:ed:47:8d:38:58:80:9b:
                    e0:4f:22:ef:44:89:5d:7f:64:39:74:1c:02:38:c0:
                    d0:fb:38:19:31:54:b3:77:4c:a0:3d:b5:ad:69:26:
                    67:a8:68:97:b4:ff:cc:af:44:62:f5:3c:51:7e:39:
                    49:c2:a8:05:fd:a8:5d:49:24:4a:86:e0:72:16:0e:
                    df:cd:4f:d4:06:84:62:ae:1e:37:0a:67:1c:80:e0:
                    b8:00:e9:4d:40:20:2c:2d:d3:4f:2e:53:2d:c5:ad:
                    48:e5:1a:c8:23:79:26:ee:48:de:60:c3:53:6d:7e:
                    f1:9d:e4:ed:4f:1d:77:c6:ad:9f:51:12:cd:fd:68:
                    7f:bb:a8:33:67:71:3d:a2:0f:08:e7:e6:bf:b2:39:
                    04:02:4a:42:db:3f:45:b5:50:06:31:2b:45:25:18:
                    5d:8d:02:b1:9a:5d:1e:cb:8e:1e:2b:1e:e2:f0:53:
                    c5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EE:49:9C:27:A3:A2:84:E5:65:E1:82:89:9B:FA:A8:36:87:1A:C0
            X509v3 Authority Key Identifier:
                keyid:B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:b2:f6:b9:63:00:15:b5:1e:88:7f:e9:53:eb:4f:7a:04:10:
         39:3b:08:af:dd:9b:7f:b5:4c:39:8b:ae:93:9b:6e:7e:31:bb:
         bf:77:a6:da:63:ba:1d:4c:2a:1f:29:36:12:73:ad:e1:fa:78:
         0f:2f:44:75:2e:b3:7b:19:4a:da:0a:ad:12:06:4d:c3:d5:b4:
         ee:20:e1:45:09:5d:7d:c3:32:65:75:1f:10:53:74:61:39:3d:
         80:b4:d8:c6:62:42:7c:16:52:31:b9:4a:26:f4:84:4a:fa:5a:
         48:cb:14:67:cd:3d:7a:13:be:cb:44:25:de:fa:b5:f8:73:e0:
         68:71:3c:7c:1d:fa:2b:13:4f:f3:b1:81:d5:3c:fe:44:37:41:
         26:20:27:d8:1d:2f:1a:a3:8f:0c:23:03:58:71:65:cd:dd:19:
         c0:6d:11:9d:7b:3c:d8:14:ec:81:e3:1f:cb:3e:6f:33:cb:07:
         20:95:36:8b:a3:a5:c0:56:8d:01:4e:6b:c7:29:f3:90:c4:c6:
         d5:a4:30:44:e2:25:fb:e1:15:80:25:11:b8:2f:4e:23:95:16:
         52:fa:4f:e5:87:37:04:11:a2:29:c4:c6:fc:86:05:a6:97:a2:
         97:88:68:63:3b:79:5e:ef:9c:71:c5:78:39:34:67:70:3f:2c:
         d1:94:48:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 23:44:26 2026 by rpki-client