Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
File:                     bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft (raw, json)
Hash identifier:          feDt6iCa+su0DLPi2IhAKHc6SM8zLCED//+Hvog/iqY=
Subject key identifier:   7C:3C:EE:61:11:2E:6E:D3:03:E1:9A:BA:68:E3:70:9C:12:60:CD:84
Authority key identifier: 6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB
Certificate issuer:       /CN=A9196172/serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB
Certificate serial:       1237
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
Manifest number:          1221
Signing time:             Sat 26 Sep 2026 17:10:50 +0000
Manifest this update:     Sat 26 Sep 2026 17:10:50 +0000
Manifest next update:     Sat 03 Oct 2026 17:10:50 +0000
Files and hashes:         1: bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl (hash: Wna++w+yElfCFL9FO3v3rSadsJ/DqsmgbObe4xvTGBw=)
                          2: 2CE73CF20F1D11E991F4271EC4F9AE02.roa (hash: dwjkn2DW2HgGCHSm1qCTooFpBKfe2SamOh5enGZ3aMA=)
                          3: 2D9B5B380F1D11E991F4271EC4F9AE02.roa (hash: l9qxQIDYZFB8lqVkzL19z7LMxH3Tman8VfcseXtGTGQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl
                          rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 17:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4663 (0x1237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196172, serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB
        Validity
            Not Before: Sep 26 17:10:50 2026 GMT
            Not After : Oct  3 17:10:50 2026 GMT
        Subject: CN=6ab7fc9a-4fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a1:97:cf:12:14:ef:ae:be:33:43:79:8d:f3:
                    a7:c1:23:ca:39:9d:2d:f9:aa:69:b5:7a:25:06:fc:
                    83:79:2a:dd:71:1b:6e:8c:85:02:85:5c:c0:86:6e:
                    a8:dc:ad:54:44:d3:8f:04:f3:31:5f:ba:34:c8:ed:
                    d7:21:19:6f:b4:de:5b:ea:89:f4:e3:dc:64:8a:38:
                    40:76:30:dc:7d:ec:2f:71:60:56:69:73:52:ca:c8:
                    17:1a:1e:1a:53:7c:d1:9c:fb:a4:a0:74:ee:08:95:
                    e2:5b:01:0c:5d:da:40:8a:c6:e5:54:f6:bd:f9:42:
                    dd:dd:bb:1f:82:90:e5:46:67:1f:74:6a:23:d5:59:
                    1a:08:0a:50:2c:4b:42:ce:f8:42:0c:25:77:66:25:
                    9c:ac:37:02:c1:3b:a4:78:b7:71:08:1f:b2:1b:ed:
                    c4:92:b9:9d:ef:d4:68:db:76:42:04:46:96:da:fd:
                    e3:16:cc:2b:6d:03:b9:b1:f7:52:ad:56:41:1c:d2:
                    ab:9b:72:fc:8f:59:34:9e:11:14:dd:30:11:8f:d5:
                    99:77:fa:ae:e5:b3:1a:5a:04:80:6b:6b:87:e2:fb:
                    2d:03:ad:0f:a4:cb:df:0d:89:3c:ad:bf:6a:7d:80:
                    8b:10:1b:80:94:36:52:7b:2b:d7:d1:19:b8:d1:42:
                    e3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3C:EE:61:11:2E:6E:D3:03:E1:9A:BA:68:E3:70:9C:12:60:CD:84
            X509v3 Authority Key Identifier:
                keyid:6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:14:c0:1a:75:ab:61:48:3f:86:5e:7c:3d:23:92:fa:e0:8c:
         b0:ed:83:57:23:21:0f:ea:76:e8:66:1b:d6:38:63:64:82:ca:
         fe:a6:a9:95:a0:91:6f:f9:20:16:c3:51:8f:6a:9b:c9:a1:ab:
         e5:bf:5f:7b:12:e3:6a:e0:0c:2d:6a:25:17:73:32:cd:d7:36:
         64:2b:85:f9:56:57:7b:b6:53:06:0a:4c:c9:43:57:a2:5a:d7:
         6f:35:80:c4:01:c0:f3:42:9b:ef:48:fd:89:4d:d4:a5:03:26:
         38:11:c2:96:09:11:15:cd:27:fe:5a:94:ee:6f:67:3b:6e:4d:
         10:ed:eb:0c:0b:a7:e2:8b:5e:43:f2:d6:a6:d3:2a:5a:00:1b:
         bc:e5:9e:54:2e:d9:f7:cd:cd:44:49:21:06:21:62:39:29:e1:
         f4:18:ab:b1:d5:01:c8:72:1a:82:95:69:79:c2:df:fd:92:8e:
         9d:ad:bf:b6:84:66:0b:d2:2f:62:5a:f3:f5:1d:bf:25:58:9f:
         36:14:55:77:89:5d:5a:c8:5d:7c:dd:98:0a:e7:fd:08:b1:7e:
         21:f7:ba:74:2c:0d:33:06:21:15:24:08:20:af:50:b4:ea:d3:
         de:dd:bf:59:41:64:a6:02:31:7f:0b:59:d8:35:c5:c2:af:43:
         8b:1a:e4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:50:50 2026 by rpki-client