Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
File:                     Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json)
Hash identifier:          soiHP92PITxhvLGGjqf6fiw2HtBLq86Zh7O8Xhwnrw4=
Subject key identifier:   11:F6:F7:99:91:28:CF:93:62:03:21:6A:E2:9A:D2:D5:33:B1:BE:68
Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
Certificate issuer:       /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Certificate serial:       35A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
Manifest number:          358B
Signing time:             Tue 22 Sep 2026 15:05:45 +0000
Manifest this update:     Tue 22 Sep 2026 15:05:44 +0000
Manifest next update:     Tue 29 Sep 2026 15:05:44 +0000
Files and hashes:         1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: bHGQHxsmjl/BkvkPnbmTFl1geI0lwi9ep8pIizcgmQw=)
                          2: E73006AA682811EB8D635520C4F9AE02.roa (hash: sDXIi4FmNE0iX4Dfq4o1yKRfQ07xt+5i6eoc1LblsFY=)
                          3: BC3EBE062E5B11F1A895088A9B833773.roa (hash: lcPnaIB18udIDK59GlXd33E7TBxqjppD2+EBWUcfuec=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
                          rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:05:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13730 (0x35a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
        Validity
            Not Before: Sep 22 15:05:44 2026 GMT
            Not After : Sep 29 15:05:44 2026 GMT
        Subject: CN=6ab29948-b6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b4:14:ac:9a:86:cd:8e:7b:9a:8b:80:88:bf:
                    e4:23:49:a0:0a:51:0d:0a:1d:09:fe:87:2d:d3:27:
                    cc:45:b5:a9:5e:8d:ef:b3:16:9a:0a:42:21:c5:92:
                    41:62:c2:a0:57:bb:86:f5:2a:f3:f7:c9:9d:e4:7f:
                    5f:75:db:08:ce:cb:a3:6e:fd:4f:cb:32:d7:60:46:
                    ac:03:a8:d4:0d:95:ab:0e:c8:30:f1:d3:5a:80:00:
                    2e:11:5a:b5:e7:65:10:42:46:90:72:64:68:e7:83:
                    7d:43:43:ca:81:c4:69:51:48:ee:17:7f:d5:4d:2d:
                    c2:81:4e:a1:98:27:0a:e4:6d:20:56:a5:a7:f1:bc:
                    19:3f:c7:9c:0a:f2:e1:b8:cc:30:31:7e:0a:f2:66:
                    93:da:db:75:58:7e:63:63:82:da:3b:5a:50:24:d5:
                    69:c3:5d:ff:90:89:14:cf:5f:71:45:98:da:39:9a:
                    e6:17:70:25:a4:86:bd:e5:79:19:08:67:c9:3e:b2:
                    e2:c6:d9:c8:0e:de:01:d5:0e:cb:ad:b9:8d:94:1b:
                    41:ce:4c:3f:7f:a1:6c:30:c0:e3:d2:98:d6:d5:70:
                    89:e1:fc:a1:22:06:35:b3:af:5f:1a:fc:6d:2c:fb:
                    7e:24:fc:b0:c3:2f:92:fe:cf:46:33:09:ce:a4:42:
                    e9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F6:F7:99:91:28:CF:93:62:03:21:6A:E2:9A:D2:D5:33:B1:BE:68
            X509v3 Authority Key Identifier:
                keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:fa:d4:87:d3:85:b5:10:9f:fc:6a:cf:fc:27:e7:21:87:4d:
         f4:43:0e:ac:c7:78:31:88:8f:e9:e0:62:e7:a5:1c:72:f6:22:
         07:ce:bb:9f:9f:96:d6:49:26:56:1c:c5:f9:4f:e0:3e:9d:68:
         c9:09:57:92:f4:8c:a5:8b:fd:c9:c0:2a:f4:45:eb:87:fe:b0:
         e7:e4:25:7f:0d:b8:01:d2:ef:b8:ad:62:6a:bb:7f:45:b4:73:
         31:4f:34:cd:12:5d:90:d7:0f:e4:54:d5:1b:8e:22:07:92:a8:
         34:39:d4:c7:6b:3b:8c:8c:3b:90:be:37:2c:f5:fc:23:f5:54:
         9e:6c:17:92:25:3c:69:ac:8b:03:f7:fa:94:d0:5f:70:ab:a4:
         bd:31:f7:a0:20:c2:41:35:02:47:f1:61:f7:7c:d7:52:5b:f6:
         4b:f9:96:7f:bb:90:66:2a:be:c7:c9:d4:ea:e9:dc:73:b1:4b:
         e5:a2:03:e2:a7:a7:95:24:31:4b:2c:e5:9b:a9:af:f6:06:ea:
         74:52:bc:3b:c8:b8:ac:11:5f:d0:97:b9:66:39:e9:8a:7d:a3:
         b5:c3:92:50:fa:47:52:22:26:ed:06:62:51:f8:bb:88:3b:fd:
         df:57:b3:be:44:80:0b:ee:d5:dd:7a:58:29:05:e3:bb:40:6c:
         60:b0:ef:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:44:32 2026 by rpki-client