Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
File:                     f32FZbsEGDw68czSI-nEYR8VCAY.mft (raw, json)
Hash identifier:          Zww8VUb77LfEdfUFbEKPgCCCugJ2v5sZo7+evPn94EU=
Subject key identifier:   DD:D6:BC:98:31:87:6B:61:C5:F6:31:E2:71:8B:AD:C7:37:80:DC:D6
Authority key identifier: 7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06
Certificate issuer:       /CN=A9194004/serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
Certificate serial:       0253
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
Manifest number:          024E
Signing time:             Wed 23 Sep 2026 02:11:30 +0000
Manifest this update:     Wed 23 Sep 2026 02:11:29 +0000
Manifest next update:     Wed 30 Sep 2026 02:11:29 +0000
Files and hashes:         1: f32FZbsEGDw68czSI-nEYR8VCAY.crl (hash: mrHhw/0dn0+H+XNrKt0xLawJGKG5bJAuHjYp4a+Bl0M=)
                          2: 4A6E97AC311E11EE85C30E3BC4F9AE02.roa (hash: eZZ6OFwcrcrXTZgOQDhlIiXfyLs/tMt4GT83cZsLk+s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl
                          rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 595 (0x253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194004, serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
        Validity
            Not Before: Sep 23 02:11:29 2026 GMT
            Not After : Sep 30 02:11:29 2026 GMT
        Subject: CN=6ab33552-5535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:68:a4:aa:38:2d:5a:65:90:2b:21:5e:30:d4:
                    9a:e0:6b:a8:80:df:9c:80:0e:9d:4a:1e:d2:44:5b:
                    43:a1:66:07:c3:ee:f5:55:0a:e8:75:74:c6:cb:f3:
                    45:33:95:b1:d8:37:bf:6d:04:23:e5:d7:22:95:0f:
                    33:15:7c:f5:90:5e:93:5d:4a:6e:45:ed:63:66:d9:
                    d1:1e:27:08:85:e7:74:63:9b:e6:c4:a3:ef:90:66:
                    d0:15:0f:85:56:a0:33:c3:b1:b5:a9:23:be:2a:17:
                    cd:6b:ab:fb:b7:bc:ef:37:03:74:99:64:86:e2:0c:
                    24:93:9e:d5:d8:d4:0d:d1:ef:35:1f:83:39:1e:d8:
                    ef:61:70:ac:db:38:9a:23:bc:86:3d:b4:bc:d8:66:
                    ed:52:95:ac:af:b2:67:83:03:7b:11:0b:e7:57:46:
                    66:a9:32:c0:f5:0f:3c:db:43:f3:d9:b3:c1:51:10:
                    d8:c0:30:4e:aa:58:65:b2:de:b0:da:28:d8:c8:6e:
                    59:0a:71:5b:b7:a3:4f:ee:9b:81:d3:f6:4b:45:3d:
                    73:09:c0:01:a2:97:d1:37:7c:2d:6d:27:8d:bd:74:
                    0e:cf:65:3f:32:7b:77:e9:46:3b:76:8f:f7:4a:ae:
                    af:64:02:e1:ba:eb:61:b0:ea:ad:d8:c7:24:2b:00:
                    79:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D6:BC:98:31:87:6B:61:C5:F6:31:E2:71:8B:AD:C7:37:80:DC:D6
            X509v3 Authority Key Identifier:
                keyid:7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:74:b1:22:96:cc:0d:90:bc:66:a5:ee:35:a8:73:8e:79:c5:
         f0:a8:4f:72:60:50:4a:ef:de:2a:d6:52:a0:27:ed:f3:14:9d:
         63:82:af:af:f9:06:86:2e:e8:f3:c8:14:2d:ad:de:88:55:4e:
         24:0e:39:7f:c8:55:77:fb:a2:01:ac:da:bc:a3:7d:1f:73:13:
         6f:f6:9a:8e:f1:0b:34:6b:92:a4:eb:44:ca:d2:ef:8f:a9:c2:
         b1:c6:e7:3f:6a:59:71:eb:86:a3:e6:61:8d:c7:38:e4:d9:e2:
         b9:45:a4:39:f2:96:c8:77:cc:5f:fd:30:4e:16:93:54:a8:0a:
         e0:48:46:a3:d8:5d:24:68:b6:c8:ca:f1:92:e5:4d:54:21:5f:
         d2:05:75:ed:a8:a7:47:f7:26:11:1d:02:f2:f0:12:1b:8f:7d:
         51:75:51:4a:51:6f:1b:c5:47:34:54:1d:c0:82:bd:a8:7d:4c:
         02:ba:2e:33:da:3f:02:a6:c0:4f:a3:33:f8:0b:31:69:f2:e2:
         b2:a9:14:c4:0b:c4:70:b1:4e:4d:54:fb:3f:bc:91:71:a8:06:
         1e:4d:12:92:59:0a:24:77:53:1e:b5:1b:1d:27:5a:b1:08:2f:
         8b:c6:64:c6:d8:c2:b3:3c:ca:c2:ec:d4:75:dd:b9:f9:c3:64:
         f5:d7:ac:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:14:30 2026 by rpki-client