Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
File:                     M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft (raw, json)
Hash identifier:          4C/FszzxvDPpWdHmm2xMyIRFWjcUi987esuLbc2rCHs=
Subject key identifier:   A8:78:CD:4C:06:4D:DF:A6:75:71:BC:EC:46:3B:93:01:AE:E4:8A:A0
Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0
Certificate issuer:       /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0
Certificate serial:       0449
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
Manifest number:          0433
Signing time:             Tue 22 Sep 2026 23:55:30 +0000
Manifest this update:     Tue 22 Sep 2026 23:55:29 +0000
Manifest next update:     Tue 29 Sep 2026 23:55:29 +0000
Files and hashes:         1: M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl (hash: PmQh6a4E6A8vyRjhQa/qrcoMLeE1r05bj+OaFbEQY8A=)
                          2: 25687A64364D11F0AECC3986C4F9AE02.roa (hash: SiaKfWh20onDMNEmqxmOZpPd2+52s+o/XbL2Uti7Li8=)
                          3: 249BA23C364D11F0AECC3986C4F9AE02.roa (hash: k2Tm+VECAOkqgz18jDdhRYGz/UVnU5T68kA32PJlYJ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl
                          rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:55:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1097 (0x449)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191E08, serialNumber=33B6953295801038F017FA65D470781A5CC772C0
        Validity
            Not Before: Sep 22 23:55:29 2026 GMT
            Not After : Sep 29 23:55:29 2026 GMT
        Subject: CN=6ab31571-2a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f8:78:dd:25:e6:d9:b8:f8:0a:fb:08:cc:20:
                    8d:9e:1e:e7:4b:39:ed:a2:12:ef:b9:8f:48:84:22:
                    30:f6:18:21:bf:de:fa:51:45:44:05:87:4c:b4:b7:
                    f1:01:69:ba:3f:6a:eb:cb:9b:0a:d7:03:c5:a1:84:
                    28:77:22:86:70:98:ed:bd:eb:8e:03:98:c7:7c:49:
                    7e:a3:47:69:f0:b8:19:a1:f7:13:80:25:fe:be:4a:
                    c1:91:26:8d:05:e5:25:1e:34:90:d0:db:35:99:45:
                    f9:8c:1e:9d:28:e0:2b:b1:13:61:c0:c1:ad:3f:5b:
                    24:6f:c3:05:a7:8c:32:73:94:fc:2d:9c:8f:ed:5d:
                    2e:ee:f9:02:3e:fd:b6:59:bd:db:3f:e4:d1:73:2f:
                    f2:01:13:cf:ab:16:fc:0f:39:c8:fb:86:86:b8:2f:
                    af:92:bd:70:00:fb:b3:0e:1a:23:8a:53:a5:84:b2:
                    02:db:e3:8e:7f:8c:a5:4e:e9:c1:a1:24:45:0b:be:
                    b8:26:8d:61:24:84:4a:28:73:20:4f:6f:88:b6:88:
                    8d:0d:d4:87:5c:cc:32:6b:61:c5:9a:88:b2:f2:62:
                    2b:32:50:09:cc:ce:e0:87:03:89:20:e5:82:fa:1f:
                    71:c2:6e:ff:a0:e2:2c:ec:d5:5f:68:80:52:6b:8c:
                    42:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:78:CD:4C:06:4D:DF:A6:75:71:BC:EC:46:3B:93:01:AE:E4:8A:A0
            X509v3 Authority Key Identifier:
                keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:c0:30:88:7e:bf:b7:41:60:dd:16:cf:21:34:c6:26:78:26:
         bd:2d:99:26:42:73:3e:41:e1:b9:84:6a:77:cc:60:65:51:60:
         3f:91:a3:b4:e6:45:04:f9:e5:67:c2:ea:e0:25:48:c7:a2:d9:
         1c:35:c8:5e:63:cf:67:e1:e0:b8:74:d6:8a:61:0f:b7:da:64:
         b8:ef:68:40:27:ee:61:03:fb:9d:bc:f4:71:df:33:51:61:a5:
         64:59:79:8d:76:f9:4b:56:f4:b5:42:fc:58:9d:84:70:b9:84:
         30:96:f3:46:7a:00:98:94:69:58:b5:42:d7:cb:46:dd:05:22:
         25:be:4e:49:4f:77:68:ba:c2:cb:bb:7a:3b:15:f5:a4:ca:53:
         99:00:fb:ae:22:57:88:e5:8b:ff:15:41:d8:b3:a2:b5:dc:9a:
         d2:56:38:f2:02:57:a5:b4:bf:0a:9c:57:bf:04:e3:b2:9e:e2:
         14:ce:e2:82:8d:f9:b0:b6:63:76:cc:b3:d0:3a:cc:b5:ec:48:
         ab:76:24:8e:26:01:74:ea:27:39:59:a5:d9:51:27:79:01:d8:
         c5:03:75:1a:5b:7e:e9:9d:3f:b4:58:0b:7b:5a:92:77:94:b5:
         ee:a1:ac:7b:38:00:c0:d4:9a:2b:d6:4a:d2:60:b6:56:d9:e9:
         63:4e:53:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:57:01 2026 by rpki-client