Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
File:                     0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json)
Hash identifier:          rDvpUzTsgXTLEua8f60BC5Q02x+S+ncVflRtnWJZa/U=
Subject key identifier:   02:7B:88:94:04:BD:50:49:FA:C2:73:8E:59:B5:6E:35:9B:0E:BE:EC
Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31
Certificate issuer:       /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
Certificate serial:       0D69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
Manifest number:          0D4B
Signing time:             Tue 22 Sep 2026 18:06:00 +0000
Manifest this update:     Tue 22 Sep 2026 18:05:59 +0000
Manifest next update:     Tue 29 Sep 2026 18:05:59 +0000
Files and hashes:         1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: TgZH8Ayu8xS6e9l56EpF37v68xyg+XH87KwHem3JJoo=)
                          2: B430443A324211EFB14FB614C4F9AE02.roa (hash: AzFqYClBcneb2uXCI+dnrAdcY2giqvGMeQmemVnunHc=)
                          3: FB170730324211EFA9B5F949C4F9AE02.roa (hash: HVckhDYyXfabBBTw5QKnMftqCm/CyMEWw6vhsSVFD98=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl
                          rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3433 (0xd69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
        Validity
            Not Before: Sep 22 18:05:59 2026 GMT
            Not After : Sep 29 18:05:59 2026 GMT
        Subject: CN=6ab2c387-9a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a1:ec:28:92:58:be:20:d6:46:67:02:3c:1e:
                    55:72:74:87:99:ea:66:72:9b:75:71:f1:88:0e:1c:
                    28:36:ab:bd:3f:4d:92:52:aa:bc:c8:2c:55:26:7b:
                    3e:40:59:a8:ad:f8:e6:0c:58:25:24:19:2f:ca:1b:
                    38:51:0b:3e:98:67:d2:45:52:07:7d:ea:22:2a:e2:
                    58:f6:5d:13:e3:08:fa:75:b7:cc:42:b5:ba:8f:11:
                    fc:4a:7e:b2:47:8b:c1:2d:07:41:ca:10:8b:ba:94:
                    82:cb:5c:0e:fd:d4:08:9e:eb:e0:f1:c7:28:d4:f2:
                    7b:a7:15:4e:3c:27:c3:02:97:92:73:6a:a1:53:d3:
                    e1:8b:76:e5:71:82:2b:64:bf:03:d6:f8:bc:80:59:
                    12:51:7d:09:55:39:d2:85:39:78:5e:a2:86:d1:ae:
                    53:4f:8b:81:5a:f7:af:46:bf:62:94:9d:d8:e6:9a:
                    84:84:80:6d:89:19:0a:49:5d:10:80:9a:69:33:35:
                    05:2f:84:6a:ed:7c:83:7d:b6:7b:24:d4:d8:8d:3a:
                    6d:a6:18:ab:d3:e7:44:39:88:f7:70:c9:ca:b0:93:
                    e1:51:8f:e1:ce:b8:6e:69:8e:59:40:0b:25:8b:ed:
                    33:ce:76:91:52:a5:6c:5b:20:7c:31:88:5b:75:f9:
                    6c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7B:88:94:04:BD:50:49:FA:C2:73:8E:59:B5:6E:35:9B:0E:BE:EC
            X509v3 Authority Key Identifier:
                keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:92:2e:9e:88:87:04:83:5d:53:9a:89:b3:6c:9d:2e:15:53:
         96:6b:16:cd:6e:95:39:87:60:e5:3b:ab:fd:fe:31:a0:25:30:
         0b:74:bf:9f:33:3f:dd:18:ea:0d:a2:51:49:8b:c4:c3:3d:3d:
         5e:2a:6a:ec:47:5e:0e:82:31:0c:25:39:7e:56:10:02:6f:be:
         25:16:b3:80:a3:72:06:dd:e1:dc:9c:65:4b:5e:74:d5:93:56:
         ab:03:28:7c:a0:1d:21:a5:2f:65:ca:92:96:68:a1:19:e0:cb:
         a9:f3:a0:53:d1:86:ba:be:a7:e3:01:1e:16:78:16:2f:6a:73:
         c7:e0:29:fc:5e:28:07:23:82:ea:07:0e:1e:af:a4:12:75:72:
         7f:22:04:03:c4:b1:39:bb:1a:5f:13:b1:11:db:c5:ed:a2:c9:
         c3:51:f2:1a:06:11:b5:96:01:02:27:ff:c7:21:2c:bf:f0:da:
         39:83:c3:48:51:ca:b2:99:4b:05:fd:57:7c:27:b9:ed:38:e7:
         c1:ab:fd:b2:2e:d9:53:e9:b0:7c:e0:6a:3f:10:8b:6d:51:56:
         18:aa:87:85:15:0d:08:8e:fd:a6:0c:f5:cb:9d:16:ff:79:db:
         d9:a7:70:3a:f1:36:2f:7c:32:37:82:2e:e3:94:9f:34:5a:75:
         42:47:4b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:51:49 2026 by rpki-client