Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
File:                     D3l9fCpdNafL2-hN_HPLmBnV7yM.mft (raw, json)
Hash identifier:          eGoc6IVii3VmUYqyHkKPetld7pXQHDGPoyWALQcLlSo=
Subject key identifier:   26:99:5F:6A:55:F6:CA:24:7C:4B:65:00:2A:A1:22:E0:2E:2C:C8:65
Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23
Certificate issuer:       /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23
Certificate serial:       0373
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
Manifest number:          0369
Signing time:             Wed 23 Sep 2026 00:30:17 +0000
Manifest this update:     Wed 23 Sep 2026 00:30:16 +0000
Manifest next update:     Wed 30 Sep 2026 00:30:16 +0000
Files and hashes:         1: D3l9fCpdNafL2-hN_HPLmBnV7yM.crl (hash: R8sLEeqNoNEVk12EbLadmbjeBEiCm6IB8ejo/g+eVyE=)
                          2: A1B8513612FE11ED8A1DA356C4F9AE02.roa (hash: BM+ozPBqi+7jkDfiv4Ek3CSSWjwIGqheBBZo7D8CtKg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl
                          rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883 (0x373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0913, serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23
        Validity
            Not Before: Sep 23 00:30:16 2026 GMT
            Not After : Sep 30 00:30:16 2026 GMT
        Subject: CN=6ab31d98-b113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9e:47:3a:b1:9e:a1:1a:40:58:78:70:e0:5a:
                    a6:89:7e:46:b0:47:17:1b:12:67:12:21:de:10:a9:
                    bd:92:31:43:e9:e0:d8:a5:b7:80:ac:91:0b:43:24:
                    eb:3a:48:3f:c2:22:ef:14:ff:9e:94:0e:5a:d6:34:
                    09:7c:bb:94:09:5c:e3:73:81:f1:c2:37:14:3b:4b:
                    a2:ca:3b:fb:90:2c:e5:0d:80:55:a5:74:9c:34:32:
                    d7:e6:4b:94:7d:76:8a:fb:3e:98:d4:25:23:83:69:
                    d5:fa:ad:c9:45:09:85:1f:51:c5:30:f3:2b:b3:8a:
                    60:4f:88:60:2d:73:19:63:58:cc:56:4f:96:07:fd:
                    5e:f1:c9:cd:3d:f5:4b:55:38:89:b8:a2:9b:91:e5:
                    dc:e3:87:52:2b:cd:c8:f7:ef:6f:ab:c0:ad:ac:9c:
                    91:e4:a7:b0:36:87:d7:9b:be:03:de:b2:42:b9:a2:
                    a3:9b:58:8c:31:7c:43:30:77:21:88:64:be:be:f8:
                    2f:dd:a2:e3:35:13:1b:61:ef:f1:93:65:2f:60:45:
                    92:91:f4:b5:87:72:6c:ca:db:ac:3c:1a:fd:7b:58:
                    6c:f7:38:4e:fb:f9:2b:d9:43:0e:ef:bd:e3:fd:52:
                    5a:38:ac:c6:c4:6d:2b:ba:ef:c0:76:4c:56:2b:ad:
                    81:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:99:5F:6A:55:F6:CA:24:7C:4B:65:00:2A:A1:22:E0:2E:2C:C8:65
            X509v3 Authority Key Identifier:
                keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:78:25:40:9f:dc:e5:61:ad:6d:5e:24:ef:18:a8:24:dc:1b:
         28:83:ea:59:b0:b5:ee:3f:47:b4:30:40:50:66:a7:61:6e:08:
         8b:c1:42:53:07:65:8e:a0:41:5e:88:9d:7f:9c:25:fc:c5:c8:
         3f:f3:7f:cf:b8:2c:7e:04:2c:1f:c1:61:e7:f0:83:f3:94:55:
         85:47:8a:b1:62:b4:77:51:6d:c9:c5:9e:99:62:f0:c2:5e:e8:
         09:98:eb:33:d3:bb:24:06:d3:63:c4:28:5e:85:d7:f9:01:86:
         a4:3b:86:b4:65:14:6e:cc:c8:c1:eb:04:83:3c:34:2d:66:69:
         f9:22:8e:91:b9:22:9f:52:f9:61:e8:12:aa:a2:54:33:74:9e:
         7b:7e:2c:e2:e0:b0:ce:b5:a8:c5:9c:2d:ce:88:43:68:67:19:
         4c:44:c7:2f:a2:30:2d:87:23:83:7b:90:26:1d:14:f4:08:57:
         1c:9d:95:cd:50:02:b5:40:4f:cc:10:bf:97:1e:19:b8:e8:be:
         db:3c:22:bd:92:0d:45:3c:9c:72:76:78:67:da:01:dd:c6:67:
         0a:d2:6c:03:84:24:95:b3:21:5b:4c:94:05:d5:6b:85:c4:6d:
         4d:0d:9f:41:71:18:58:1f:ac:01:7a:48:01:6c:ec:c2:1e:77:
         65:fb:78:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:04:11 2026 by rpki-client