Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
File:                     ips7kjmTluj8a4YwntVzMMlOEX0.mft (raw, json)
Hash identifier:          BykPP56SjNMqKLG3cJclhQzBEv9quGloAh9toWkP/oI=
Subject key identifier:   86:89:0A:A9:A5:02:3E:53:2C:45:9F:FA:9D:C0:9D:02:A9:DB:94:50
Authority key identifier: 8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D
Certificate issuer:       /CN=A919A3CA/serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
Certificate serial:       0A8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
Manifest number:          0A81
Signing time:             Mon 28 Sep 2026 19:44:29 +0000
Manifest this update:     Mon 28 Sep 2026 19:44:28 +0000
Manifest next update:     Mon 05 Oct 2026 19:44:28 +0000
Files and hashes:         1: ips7kjmTluj8a4YwntVzMMlOEX0.crl (hash: kDXSlK6S6++DacH7Dz5Q4qWkTnNOlW2IoKu4gZNzdkY=)
                          2: B972C58C8FA611EAB095C928C4F9AE02.roa (hash: Lmz5u1XQZ5pr8gx+0xG0dq5xcsKIBrpCQ17vf78quGQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl
                          rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 19:44:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2701 (0xa8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A3CA, serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
        Validity
            Not Before: Sep 28 19:44:28 2026 GMT
            Not After : Oct  5 19:44:28 2026 GMT
        Subject: CN=6abac39d-f7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1e:4e:8f:28:e9:96:26:b4:d5:a5:b9:46:5b:
                    d4:8d:c8:70:5f:c5:c8:1b:a6:4d:95:f0:58:6c:59:
                    67:fd:28:04:e7:98:99:f5:b0:a4:6c:a7:d0:17:67:
                    45:bd:99:09:ea:86:fc:5e:7a:46:1d:ec:98:dc:80:
                    8f:aa:34:55:3d:05:ef:e1:a6:1d:89:ee:40:99:a9:
                    f8:f3:8e:3f:5c:d9:c9:15:7c:cc:2e:c5:e8:92:60:
                    4b:d1:1c:b3:7e:2a:10:62:de:1d:bd:3c:b6:6d:a0:
                    49:0d:31:87:0e:b7:9d:47:e7:a7:dc:6b:df:20:b9:
                    d0:eb:20:74:0f:da:f9:a4:d2:66:7b:44:32:ca:af:
                    0c:d6:5d:8d:09:e3:89:ee:50:f1:3b:4a:9d:ee:ac:
                    b4:fb:94:67:ac:34:09:07:2c:f4:1b:ca:b3:78:1b:
                    01:f0:90:42:f8:67:da:a4:4f:1a:01:59:b3:81:b5:
                    e7:f1:0f:f3:a8:32:cf:3b:47:d4:92:fe:f5:d1:51:
                    d7:84:09:1a:3e:bf:dd:84:8a:4e:f1:b2:5f:21:ba:
                    e9:99:18:4e:26:2b:69:87:28:e3:6c:72:00:da:80:
                    bc:ca:a3:96:57:f8:8f:26:50:9b:13:99:b1:7a:7d:
                    d3:dc:91:2e:ce:66:ff:3a:f3:e2:76:82:61:79:9b:
                    2b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:89:0A:A9:A5:02:3E:53:2C:45:9F:FA:9D:C0:9D:02:A9:DB:94:50
            X509v3 Authority Key Identifier:
                keyid:8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:73:1c:4a:23:ee:e7:42:c4:c7:9b:16:33:d0:0b:02:04:42:
         3c:a0:c8:83:ba:a2:48:3f:0e:4f:05:df:1f:6b:fe:b9:76:c8:
         82:f3:f5:7d:3b:56:e9:31:9d:2b:cd:6e:d6:05:9a:36:82:7e:
         cb:99:ae:79:67:16:c8:8e:02:3f:e4:66:1e:8f:4c:e6:e5:ea:
         cc:26:66:22:0c:e7:04:16:c2:aa:e1:de:35:78:63:eb:03:dc:
         3e:32:c9:c2:95:1b:d7:01:0e:85:65:2f:7d:f9:17:a3:49:c0:
         ae:59:b7:27:7e:87:a8:8e:18:bd:6d:5f:47:a5:71:72:c8:2f:
         5c:40:af:a7:22:90:06:ae:6a:3e:d6:a1:9d:e7:12:29:27:35:
         2c:10:e6:a3:b7:5f:11:c0:9a:e5:bf:2a:21:76:ed:37:80:2d:
         15:19:55:46:28:0c:5b:34:11:18:dc:74:fc:09:17:56:b3:a3:
         47:9f:c7:cc:8f:1d:2b:b0:b4:de:d0:77:fa:8b:48:12:94:8f:
         26:c3:eb:32:58:f1:db:7b:a5:87:88:f1:fc:81:8c:87:e6:7b:
         e2:5e:78:7e:9f:a8:d6:ac:92:4e:d2:bc:aa:51:9a:a2:a9:c9:
         38:82:d7:de:f0:b4:e5:0c:a6:54:35:94:44:10:12:a6:7e:54:
         34:2a:30:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:53:53 2026 by rpki-client