Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft
File:                     -_-IremTZomzJBRb_mO3TVeqrAs.mft (raw, json)
Hash identifier:          cAlrU373gEwMQnLK/E08hebnvmYazFrCqN8fg6GNfgU=
Subject key identifier:   52:58:96:93:DB:53:4C:04:99:DA:6E:AA:5E:27:04:67:0E:F4:77:C7
Authority key identifier: FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B
Certificate issuer:       /CN=A919F525/serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B
Certificate serial:       0187
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft
Manifest number:          017D
Signing time:             Sun 27 Sep 2026 05:14:02 +0000
Manifest this update:     Sun 27 Sep 2026 05:14:02 +0000
Manifest next update:     Sun 04 Oct 2026 05:14:02 +0000
Files and hashes:         1: -_-IremTZomzJBRb_mO3TVeqrAs.crl (hash: Wpn0pVTj7MB1E1Frd3wps+4jPpJAfmwpMaYsfDA/+bM=)
                          2: C276060084F011EF9D52F573C4F9AE02.roa (hash: GaX2eTz1KVZJBCRnp0CPc8pGqtf6VC7dkGVx9Fs53F8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl
                          rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 05:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F525, serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B
        Validity
            Not Before: Sep 27 05:14:02 2026 GMT
            Not After : Oct  4 05:14:02 2026 GMT
        Subject: CN=6ab8a61a-b388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7a:b0:f6:53:11:04:6b:c1:7e:b2:be:a5:e3:
                    ea:df:77:af:e7:4f:80:cb:7a:07:6b:e6:8c:d6:6c:
                    38:a6:f3:32:05:53:5b:53:4c:9a:8d:52:11:c9:bc:
                    db:19:ee:00:6c:90:21:25:31:93:65:2a:af:02:81:
                    d3:0f:f3:74:eb:d1:e3:8f:56:cf:47:69:a9:90:bf:
                    19:35:7f:ee:20:90:95:0d:e6:b5:16:4b:f1:9c:dc:
                    d2:55:fe:1a:7a:58:3c:db:3d:35:ec:84:33:a0:bc:
                    a5:4b:99:ef:02:89:d3:23:ad:32:5a:f9:40:cd:d8:
                    3a:d3:cc:e1:7a:2b:e2:3c:bf:28:9b:1f:8a:86:c0:
                    bb:fb:67:2e:46:cc:99:b9:4f:23:96:5b:74:da:06:
                    ac:5c:a9:24:7c:1a:48:83:63:e3:e4:0e:34:ee:b2:
                    69:e2:5e:07:b8:f4:0a:de:97:96:8e:cb:9d:bb:91:
                    16:80:3e:ba:45:3c:62:ce:0c:8a:e9:3a:3e:5a:de:
                    39:b3:b0:28:1e:be:22:d3:1d:85:81:05:d3:f4:1e:
                    34:62:86:35:e5:58:76:f9:95:ed:52:57:bd:cc:d6:
                    18:71:62:72:14:58:c8:e4:af:40:4e:37:ba:b4:38:
                    20:2f:c5:dc:62:8c:e1:2a:63:7f:61:3e:d8:6b:a5:
                    6f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:58:96:93:DB:53:4C:04:99:DA:6E:AA:5E:27:04:67:0E:F4:77:C7
            X509v3 Authority Key Identifier:
                keyid:FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:3c:a6:25:f6:22:b4:d2:c2:59:a9:e7:74:e3:5e:fa:2d:d8:
         2b:4f:15:a1:7d:83:e9:7a:8d:ce:e2:ae:94:ff:26:b4:e0:a6:
         46:6b:0e:19:4b:14:14:b7:69:13:7a:2e:0b:8c:1b:7d:f5:61:
         09:93:ae:63:4a:45:78:8f:79:45:1f:7c:00:ab:36:e2:9e:39:
         dd:28:8d:2c:10:51:8f:2a:eb:fb:c8:4c:be:a6:fd:4c:66:1b:
         92:f4:82:82:7e:94:85:06:ac:9b:f0:8b:c2:86:e8:15:a7:68:
         8a:6b:03:df:51:34:39:e5:fb:f5:24:75:a7:ad:c5:80:cb:2b:
         55:9f:b8:a6:39:a5:07:d9:40:19:26:6b:e2:d8:59:ca:bf:f2:
         53:ef:ec:d7:02:bf:63:9c:70:d5:d4:76:c6:b9:e4:8e:21:ca:
         3d:21:9d:5b:fc:e8:56:a1:60:b6:6a:d1:b1:22:5d:5b:70:b0:
         d6:4a:7f:57:11:ed:96:53:28:69:06:cd:02:99:6b:aa:fb:3b:
         d1:3c:ab:19:dd:2f:51:fc:b9:99:9c:93:bc:19:e3:9c:4a:70:
         52:49:db:31:f2:8f:84:1e:0f:dd:7c:30:2f:8b:01:3a:79:bf:
         fe:31:83:fb:08:4c:85:49:58:06:50:bf:fd:4d:a2:6a:c4:b4:
         b0:e6:d7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:18:50 2026 by rpki-client