Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft
File:                     CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft (raw, json)
Hash identifier:          fB+PPVaer0HNCLS35uqNHpuTmmco9+2vkqg+wfkcYE0=
Subject key identifier:   91:AF:3A:F4:CF:F4:F4:93:90:FD:BF:03:B2:D8:97:D2:09:4D:39:ED
Authority key identifier: 09:58:D7:C7:B5:75:67:D9:65:E1:48:04:81:52:E2:B4:78:FC:43:99
Certificate issuer:       /CN=A918FA35/serialNumber=0958D7C7B57567D965E148048152E2B478FC4399
Certificate serial:       C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft
Manifest number:          BF
Signing time:             Fri 25 Sep 2026 06:59:24 +0000
Manifest this update:     Fri 25 Sep 2026 06:59:23 +0000
Manifest next update:     Fri 02 Oct 2026 06:59:23 +0000
Files and hashes:         1: CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl (hash: 2EAmNst1xtmV6uG6vhFXdJz3RruCJnMfet6mQbdDwYg=)
                          2: EC6B1EDAC3F811F0BE50C87AC4F9AE02.roa (hash: nbmRDJh3IRDPeUlazhZpDIrnyEyv9hS37PMxJIjWO3M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl
                          rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 06:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FA35, serialNumber=0958D7C7B57567D965E148048152E2B478FC4399
        Validity
            Not Before: Sep 25 06:59:23 2026 GMT
            Not After : Oct  2 06:59:23 2026 GMT
        Subject: CN=6ab61bcc-56b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5b:18:e3:51:9a:d4:a4:4d:9d:b0:2d:60:d8:
                    11:58:66:c8:0b:0f:2b:76:90:90:f0:7d:73:97:b1:
                    42:af:6a:05:5f:84:85:b4:2b:39:e8:2b:d5:98:6b:
                    a2:1f:6f:fc:2a:42:a5:89:a3:48:b5:b1:b2:74:ff:
                    c2:dc:98:c3:f4:2a:39:9e:af:02:0e:5f:2c:10:5c:
                    1c:1c:2e:ec:60:ba:f6:60:ae:4d:21:5d:e6:68:92:
                    ec:54:58:6c:a5:2e:83:8a:0d:4c:53:ac:30:33:63:
                    a7:9a:ed:82:3a:ce:95:dd:f3:d3:81:9b:43:fd:5a:
                    f9:46:ab:5b:c0:a1:96:f7:c6:db:ac:b0:3a:77:28:
                    d4:fb:94:a5:48:28:be:e3:d4:bf:3b:67:a0:11:a6:
                    d5:26:31:4d:d8:ed:67:b2:98:60:f8:bd:87:7f:f2:
                    fa:5f:78:3f:69:e1:60:bc:4d:e5:42:93:3d:1b:d5:
                    92:22:fc:5a:78:6d:3c:57:4e:42:30:6d:7d:42:6f:
                    ef:7e:40:1e:23:e7:7e:8d:de:42:27:32:1e:a8:55:
                    68:fc:ab:73:dd:a3:ef:9c:42:75:42:ac:f9:5a:b5:
                    fd:14:1f:37:7c:1a:d9:06:88:b4:7f:76:53:49:7f:
                    6a:c8:50:00:71:38:6d:eb:28:53:db:2d:a3:ac:0c:
                    68:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AF:3A:F4:CF:F4:F4:93:90:FD:BF:03:B2:D8:97:D2:09:4D:39:ED
            X509v3 Authority Key Identifier:
                keyid:09:58:D7:C7:B5:75:67:D9:65:E1:48:04:81:52:E2:B4:78:FC:43:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:49:58:21:e0:e5:6b:1e:b2:07:a2:e2:92:37:c6:f0:ec:3b:
         43:9d:fa:67:67:4e:04:63:4d:59:cf:98:e7:aa:d2:c5:74:d8:
         a4:55:49:b2:2f:a3:5a:59:d9:32:41:e7:9f:2b:d9:b6:25:48:
         c4:56:a9:3a:91:61:4a:b8:f4:17:31:6c:8c:9b:d8:f6:ab:71:
         4a:be:d4:a3:af:f9:2a:f0:29:5e:61:a4:1e:68:11:a5:94:73:
         b8:09:2c:57:7a:e3:3d:d2:e2:2d:c2:7e:99:ff:27:03:5c:71:
         de:66:ee:6a:d8:9a:8d:86:ba:e9:c6:68:4e:2e:ae:6f:d0:a7:
         90:97:e3:d2:7b:89:39:25:73:4d:3d:31:38:56:bd:b7:84:78:
         7e:94:0c:2e:85:d2:7e:1d:a9:02:80:07:39:eb:a3:b6:2e:48:
         5e:58:f8:4d:ff:2f:09:38:26:83:7f:29:a9:d3:0d:a0:3f:94:
         ce:e2:e4:81:83:c6:1a:22:34:f8:51:d8:74:be:7e:9c:28:89:
         bc:ec:64:93:c4:66:34:07:3e:9e:0f:4b:b7:b0:c3:87:0e:5c:
         33:80:e0:66:ba:85:5c:de:c2:b5:c2:64:0e:2a:6e:ee:0b:cb:
         f2:bc:f3:ec:b3:7f:a9:7c:3c:e0:50:c5:5e:9f:97:02:f6:9c:
         78:32:0a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:17:35 2026 by rpki-client