Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft
File:                     snbxWm1Kl8SBkekr0WYfNovvIeQ.mft (raw, json)
Hash identifier:          LEIPeqpv3fT7+UwrhFTH3ubsihi7ZjblO+SoppSg5A8=
Subject key identifier:   8B:09:E8:B2:62:C9:D1:DB:01:EA:72:61:C6:82:25:25:FE:D1:40:BA
Authority key identifier: B2:76:F1:5A:6D:4A:97:C4:81:91:E9:2B:D1:66:1F:36:8B:EF:21:E4
Certificate issuer:       /CN=A91B37C4/serialNumber=B276F15A6D4A97C48191E92BD1661F368BEF21E4
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft
Manifest number:          0172
Signing time:             Sun 27 Sep 2026 05:18:45 +0000
Manifest this update:     Sun 27 Sep 2026 05:18:45 +0000
Manifest next update:     Sun 04 Oct 2026 05:18:45 +0000
Files and hashes:         1: snbxWm1Kl8SBkekr0WYfNovvIeQ.crl (hash: IC9H1KEmBc6756Q1b4vBCWmaI9tS7tcYu+Nw27e9+y8=)
                          2: 3E4B01008BDA11EFA4A11684C4F9AE02.roa (hash: efzaqQoS8xAy0qR24miaNeo4rUHDpnVE5YQrIw9jbAM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 05:18:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B37C4, serialNumber=B276F15A6D4A97C48191E92BD1661F368BEF21E4
        Validity
            Not Before: Sep 27 05:18:45 2026 GMT
            Not After : Oct  4 05:18:45 2026 GMT
        Subject: CN=6ab8a735-5e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:be:0b:66:ed:cf:e1:12:a0:5c:f6:7f:27:2d:
                    0b:e7:60:84:b7:14:0a:5d:af:27:be:ae:eb:1f:4b:
                    e9:77:17:be:9c:d1:5c:de:fd:9f:32:9e:08:4c:db:
                    ee:11:58:37:90:13:14:20:15:f1:0f:34:22:78:26:
                    35:53:14:5f:ce:00:e3:90:cd:dc:e7:22:6c:ba:19:
                    f2:26:48:54:07:09:6d:79:ac:7e:5e:21:42:9c:d8:
                    29:96:15:4a:df:6c:e6:2a:1a:f0:ff:c4:ed:92:49:
                    77:d7:4d:b3:8d:ac:65:84:77:2f:7a:bd:16:00:a9:
                    b3:9a:33:8e:49:61:be:2f:48:0d:ad:f0:e6:70:73:
                    e0:d7:19:27:cb:cf:a6:df:cb:09:5d:76:6c:27:8f:
                    74:4b:49:04:03:61:67:1b:df:59:0d:50:12:26:4c:
                    2f:2b:90:97:d5:a3:21:a9:12:d9:6f:ee:f2:66:a3:
                    d0:4b:43:0b:4a:24:ce:c2:e8:10:3e:64:ff:25:08:
                    58:b1:83:33:13:58:26:08:2d:0d:0c:4e:4d:03:ff:
                    e0:21:66:8f:2a:63:55:2a:b6:4e:d5:b7:58:c5:7f:
                    8c:59:2e:8f:fa:41:0b:18:f0:81:5d:d4:35:aa:55:
                    8e:5a:bb:59:b0:df:cf:89:a0:0e:64:c8:b5:9c:15:
                    e6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:09:E8:B2:62:C9:D1:DB:01:EA:72:61:C6:82:25:25:FE:D1:40:BA
            X509v3 Authority Key Identifier:
                keyid:B2:76:F1:5A:6D:4A:97:C4:81:91:E9:2B:D1:66:1F:36:8B:EF:21:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:0e:08:8e:31:f7:58:55:35:02:b0:a8:78:00:7c:85:7e:06:
         b0:07:89:11:c3:70:d7:e1:86:77:f3:3e:72:ea:36:37:45:cd:
         c5:38:8b:af:31:36:bc:3f:ea:2d:d4:f6:52:9a:ac:56:7c:b9:
         a1:89:5e:59:7a:32:09:c3:fb:90:98:46:93:a9:5d:46:ef:47:
         ee:7d:e5:63:24:54:83:87:e2:fe:9e:1b:97:7e:72:9e:c5:59:
         a3:6f:19:61:13:83:f3:5d:5f:92:6f:e2:cc:c3:c3:31:dd:e3:
         51:b2:83:f9:26:f5:4b:15:36:74:a0:1f:d9:a1:81:5e:71:83:
         61:70:de:4d:23:27:07:df:e7:b1:9a:14:79:fd:56:58:bf:1b:
         41:67:07:b5:51:6a:75:62:de:77:7d:85:64:80:00:7b:a8:e8:
         81:5c:a6:86:86:25:58:77:3e:f9:f7:7b:30:34:37:b5:1e:5c:
         83:c8:18:d6:a9:37:1f:6c:e7:8b:7b:93:89:57:88:5b:98:e0:
         85:cc:b5:a2:5e:9d:c0:cb:f8:b2:1f:5d:76:3d:c0:bc:f6:14:
         14:ce:f8:0d:55:ed:b4:1f:99:29:7a:29:5e:ab:b7:4d:1a:ec:
         44:c0:83:a3:b8:0e:4e:41:a9:1e:00:eb:e3:62:4d:11:f5:0b:
         89:0b:b5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:14:30 2026 by rpki-client