Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE6DE/D7C63AE0977011F19CA186DC4511F970/FTpmVjdgJzJMGb7qBrVEZUYfvj8.mft
File:                     FTpmVjdgJzJMGb7qBrVEZUYfvj8.mft (raw, json)
Hash identifier:          w4Ux7FJ2GB4HhOm+MVGvbcMvwzHoiMnbSQHCiY80j7Q=
Subject key identifier:   28:DD:9D:4F:47:78:90:98:BE:4C:0D:5C:E2:5F:31:A6:36:6C:D8:51
Authority key identifier: 15:3A:66:56:37:60:27:32:4C:19:BE:EA:06:B5:44:65:46:1F:BE:3F
Certificate issuer:       /CN=A91AE6DE/serialNumber=153A6656376027324C19BEEA06B54465461FBE3F
Certificate serial:       1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTpmVjdgJzJMGb7qBrVEZUYfvj8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE6DE/D7C63AE0977011F19CA186DC4511F970/FTpmVjdgJzJMGb7qBrVEZUYfvj8.mft
Manifest number:          19
Signing time:             Sun 27 Sep 2026 09:34:46 +0000
Manifest this update:     Sun 27 Sep 2026 09:34:45 +0000
Manifest next update:     Sun 04 Oct 2026 09:34:45 +0000
Files and hashes:         1: FTpmVjdgJzJMGb7qBrVEZUYfvj8.crl (hash: ULK6Tgez/dKkp/8tyS8LUhVAj+RuScGtWHk0HLdKqHg=)
                          2: 9888C224977211F19213E74F4611F970.roa (hash: qjKOuVRuo0iSJkq/X2X1qVQVx0b/lgzrwkYHlNPxuOM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE6DE/D7C63AE0977011F19CA186DC4511F970/FTpmVjdgJzJMGb7qBrVEZUYfvj8.crl
                          rsync://rpki.apnic.net/member_repository/A91AE6DE/D7C63AE0977011F19CA186DC4511F970/FTpmVjdgJzJMGb7qBrVEZUYfvj8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTpmVjdgJzJMGb7qBrVEZUYfvj8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE6DE, serialNumber=153A6656376027324C19BEEA06B54465461FBE3F
        Validity
            Not Before: Sep 27 09:34:45 2026 GMT
            Not After : Oct  4 09:34:45 2026 GMT
        Subject: CN=6ab8e336-d30a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:35:0a:99:44:67:dd:07:83:92:37:91:fb:2b:
                    32:42:35:c5:81:1c:ac:64:ba:e3:7a:b2:ef:34:a1:
                    20:15:3e:26:88:8a:e2:14:3c:49:2e:02:04:67:b6:
                    df:6c:17:0f:ec:8e:3c:23:d6:d0:d0:52:3d:1d:61:
                    ca:fb:39:34:f9:62:9b:9e:20:95:9a:0b:44:c1:2d:
                    6e:68:fe:83:b6:7d:7b:a7:eb:76:ed:58:5b:3b:df:
                    39:dc:df:4d:33:0b:b8:ed:e8:a9:d6:10:05:6a:e8:
                    8b:ab:f2:c9:ba:42:14:cf:09:c1:ad:e6:23:41:18:
                    eb:8c:92:8f:2b:3d:67:a2:77:6b:c3:9f:81:56:e6:
                    fa:09:10:33:a6:8a:e0:22:37:46:3f:0c:05:5b:d8:
                    b1:96:0c:35:19:81:2d:61:ed:9e:9d:96:2b:2f:68:
                    0a:9c:44:b1:74:af:cd:f7:be:80:22:ed:43:60:85:
                    b3:df:11:b0:6d:a2:07:46:73:5e:90:3e:ae:2f:4c:
                    66:90:39:48:ff:16:f3:b2:8f:0a:cf:05:c5:b4:57:
                    2c:41:a1:ef:ed:ae:51:09:10:91:94:69:67:37:2c:
                    8a:5f:03:35:f0:d4:42:f8:56:a4:f5:25:f2:23:68:
                    fd:39:3f:88:74:8c:fd:c7:7c:5b:fd:1f:63:bd:ff:
                    d8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DD:9D:4F:47:78:90:98:BE:4C:0D:5C:E2:5F:31:A6:36:6C:D8:51
            X509v3 Authority Key Identifier:
                keyid:15:3A:66:56:37:60:27:32:4C:19:BE:EA:06:B5:44:65:46:1F:BE:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE6DE/D7C63AE0977011F19CA186DC4511F970/FTpmVjdgJzJMGb7qBrVEZUYfvj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTpmVjdgJzJMGb7qBrVEZUYfvj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6DE/D7C63AE0977011F19CA186DC4511F970/FTpmVjdgJzJMGb7qBrVEZUYfvj8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e0:39:b6:22:c3:99:c3:3f:e3:21:77:9e:d4:fb:49:7a:1b:
         64:07:f6:c9:e8:88:76:7b:6a:4c:18:ea:dc:51:56:41:30:e1:
         40:82:a7:5d:08:dd:21:f4:07:3d:40:10:f5:a8:eb:70:4c:ba:
         53:06:99:54:fb:37:86:b3:28:c9:c4:d5:cc:a6:ba:9a:98:ce:
         e3:42:4a:21:28:98:b4:40:2f:1a:da:f8:60:ca:f2:8c:98:71:
         a4:b8:15:e6:57:59:c2:a9:64:31:27:f9:5c:be:2c:51:9d:4b:
         df:6d:e5:9a:72:7e:d6:c3:ce:e1:c3:78:d6:d4:02:0a:e4:29:
         b9:4f:c2:d8:5f:2d:ef:95:65:40:a6:fa:d5:3c:f8:f0:75:43:
         2c:5a:d5:7c:ee:f2:98:cf:5f:d2:2e:33:77:26:03:97:72:a7:
         c7:c5:a2:95:7f:4b:6d:f4:bb:4b:0d:5d:2f:33:e5:3f:7e:b5:
         5b:2f:fd:5f:66:73:92:ac:48:5e:be:c5:46:96:6d:77:d1:27:
         08:35:55:5c:90:2f:09:63:2b:75:81:eb:66:3a:c3:4b:de:b7:
         5b:51:50:d9:bf:36:9c:f6:77:84:e5:81:5f:65:e8:3d:44:86:
         f0:c8:01:2c:db:6e:c6:87:9c:d9:d7:8d:90:11:d7:ed:0e:45:
         a7:f8:53:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 07:20:29 2026 by rpki-client