Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
File:                     qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft (raw, json)
Hash identifier:          kdDSjPcXTQvlGUp+VB/QZkGF62Hz1gBMON32lCzb5AM=
Subject key identifier:   A3:DC:0A:77:BE:09:9F:53:03:81:87:DB:16:F3:DB:3C:93:28:91:19
Authority key identifier: A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74
Certificate issuer:       /CN=A9192A47/serialNumber=A86E5D40AA1529D4FF22B32C4E93006D0FA2CA74
Certificate serial:       0159
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
Manifest number:          0151
Signing time:             Wed 23 Sep 2026 05:06:05 +0000
Manifest this update:     Wed 23 Sep 2026 05:06:04 +0000
Manifest next update:     Wed 30 Sep 2026 05:06:04 +0000
Files and hashes:         1: qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl (hash: /IgShguuC8lTC9n5HL0c2U7Vhh4+wPGA5D8oD8WkgRg=)
                          2: 8F32CF70B52911F0A8B8B043C4F9AE02.roa (hash: taxyHSMu6qgppApaM1TlGNcuezRlMpE06j4rH3H1Gp0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A47, serialNumber=A86E5D40AA1529D4FF22B32C4E93006D0FA2CA74
        Validity
            Not Before: Sep 23 05:06:04 2026 GMT
            Not After : Sep 30 05:06:04 2026 GMT
        Subject: CN=6ab35e3d-a334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:21:3e:f4:58:e6:47:45:d0:fc:2f:d5:67:69:
                    3f:c0:8d:f2:dc:7e:e4:5d:12:97:69:45:ce:61:ae:
                    dc:70:18:22:81:cf:69:4c:3c:90:00:1f:70:14:16:
                    e2:47:b1:68:7f:08:b8:d2:73:7c:ff:58:07:12:92:
                    de:5f:8c:d2:ac:e6:21:e9:fb:bc:37:38:51:f2:45:
                    59:dd:46:8f:99:1f:f6:20:03:55:b7:aa:2b:ac:38:
                    98:17:6a:73:e0:f4:d8:aa:2e:c4:92:ea:d6:57:2f:
                    db:95:18:d2:e8:45:c6:d1:16:3a:e5:50:ee:46:11:
                    76:a6:03:06:ea:09:5b:b0:3a:21:c1:e7:13:dd:c6:
                    3b:54:2f:7f:0f:0d:35:06:b7:24:0a:8f:5d:eb:51:
                    ef:98:09:ef:6d:b0:44:f1:65:f3:e0:c4:5b:b9:ab:
                    c5:4c:cb:b5:61:ff:a5:29:d6:72:40:29:0e:7b:11:
                    1a:e4:f4:1e:e7:59:e4:5a:91:28:5a:1b:25:e5:05:
                    37:ce:c6:be:88:db:16:17:d2:10:e9:7a:14:cf:f8:
                    c1:bd:bb:2a:8e:7f:78:22:f1:a2:c0:10:fb:ac:35:
                    7a:de:7a:72:32:09:38:d8:19:f4:55:ce:97:cd:ef:
                    81:b6:13:a7:88:a8:53:82:82:9c:e3:bf:5e:61:3e:
                    6f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DC:0A:77:BE:09:9F:53:03:81:87:DB:16:F3:DB:3C:93:28:91:19
            X509v3 Authority Key Identifier:
                keyid:A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:fc:36:5c:21:7f:7a:0a:5a:e4:8c:79:4c:5e:cb:0e:6e:94:
         e9:52:20:b8:fa:10:ba:1c:7a:b5:eb:f2:b9:ca:e4:03:a5:8b:
         b4:3f:62:f7:78:37:5f:ec:cc:55:e7:e2:b7:6a:42:19:85:2a:
         f5:70:82:da:b0:0a:fb:73:32:6b:e2:a6:67:b0:b5:c0:06:4e:
         f4:ca:c7:9f:47:7f:ba:85:3d:79:66:03:5c:b5:a0:0b:3c:f4:
         99:a6:65:b5:71:f4:c8:44:13:50:cf:08:b9:b5:d5:e7:32:fd:
         4e:be:fe:39:2d:56:21:a4:95:a3:1c:8f:b9:81:c4:4f:54:ca:
         83:5d:23:9f:95:55:99:f0:40:29:9d:7b:9c:8c:ec:3f:71:71:
         70:59:2d:5a:af:c3:54:f8:fa:86:d8:b8:f4:86:b1:8a:a0:67:
         bd:7e:23:0c:9a:de:d7:86:73:09:9c:f4:41:cc:2f:6a:39:a2:
         f0:61:74:c9:ab:cf:c5:f1:87:32:f5:fe:c6:06:2b:b0:f3:8d:
         b7:f7:32:45:24:63:5b:c2:8a:8a:30:b3:fa:2a:42:f6:b9:81:
         76:d8:06:e2:0c:4a:79:a5:ac:09:5e:00:24:f1:eb:61:c4:66:
         ce:b8:d6:5d:89:f2:8a:09:5b:19:77:bb:4d:4f:4f:c6:8b:45:
         84:20:ca:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:50:25 2026 by rpki-client