Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft
File:                     V7aHJ0szGe2QcblmFY-birZK5vc.mft (raw, json)
Hash identifier:          6A83YYq3JJ/lcNrNTtxEyjLNBBINWwv5KKq0VQoJFFE=
Subject key identifier:   B9:29:24:FA:D1:B9:9C:B0:6F:76:8B:E1:FF:C4:98:26:66:8F:A9:56
Authority key identifier: 57:B6:87:27:4B:33:19:ED:90:71:B9:66:15:8F:9B:8A:B6:4A:E6:F7
Certificate issuer:       /CN=A91B527E/serialNumber=57B687274B3319ED9071B966158F9B8AB64AE6F7
Certificate serial:       2895
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft
Manifest number:          288A
Signing time:             Thu 24 Sep 2026 15:34:35 +0000
Manifest this update:     Thu 24 Sep 2026 15:34:34 +0000
Manifest next update:     Thu 01 Oct 2026 15:34:34 +0000
Files and hashes:         1: V7aHJ0szGe2QcblmFY-birZK5vc.crl (hash: et7XykIiu1JqILLzjcyIoqjTjWi2DtxJrNat3plnXt8=)
                          2: C22BA9D094E411EA9076F758C4F9AE02.roa (hash: H2W7FUFHmZ8Q0NnMSEGYzmhsdnQ1yfavtemrLs6lXMY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.crl
                          rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 15:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10389 (0x2895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B527E, serialNumber=57B687274B3319ED9071B966158F9B8AB64AE6F7
        Validity
            Not Before: Sep 24 15:34:34 2026 GMT
            Not After : Oct  1 15:34:34 2026 GMT
        Subject: CN=6ab5430b-81ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a9:a2:d8:70:d9:85:1f:22:36:d0:f7:50:32:
                    90:de:75:0e:5b:e6:2d:ba:80:a4:9f:a2:6e:7f:ea:
                    79:76:86:9d:fa:61:03:2f:d5:75:49:0b:57:ac:76:
                    ac:6c:c2:2f:1d:a5:63:08:be:b0:f3:bf:23:60:29:
                    1d:1a:56:e3:bc:94:97:8f:c1:cd:2a:4a:a2:50:8e:
                    0e:4f:37:ad:e3:fe:a3:69:9f:e4:e5:08:e7:a5:33:
                    b6:81:41:e2:c5:e7:cb:c7:1b:d5:2a:1c:b5:d2:f9:
                    b4:8d:b8:34:58:ac:cb:03:43:2c:da:7a:08:53:92:
                    63:b3:c8:6a:57:ef:b1:6b:31:eb:b5:93:91:73:b3:
                    e6:89:1a:18:82:27:f0:e7:4f:d9:d6:21:e4:4d:d8:
                    f2:23:47:0b:3e:c7:b7:71:47:29:f6:39:f0:03:45:
                    d4:96:5d:82:5c:0b:57:e4:c7:79:b5:48:6a:e9:5a:
                    6c:a1:8b:68:b6:2e:cc:dc:67:b2:1a:45:92:87:b3:
                    b2:9c:38:ea:23:34:a2:8b:de:fe:67:64:79:ad:c4:
                    40:59:76:a1:80:fe:87:f4:89:29:fb:b8:aa:10:06:
                    12:eb:d1:e6:e7:15:f0:a6:db:dd:33:91:be:40:e4:
                    c4:43:11:f5:9b:95:05:07:92:f4:36:8f:18:8b:2b:
                    d0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:29:24:FA:D1:B9:9C:B0:6F:76:8B:E1:FF:C4:98:26:66:8F:A9:56
            X509v3 Authority Key Identifier:
                keyid:57:B6:87:27:4B:33:19:ED:90:71:B9:66:15:8F:9B:8A:B6:4A:E6:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:de:a5:1d:94:96:ca:5c:7e:6b:60:0e:48:ee:09:f9:7f:94:
         2c:12:97:1f:33:5a:1f:43:ef:d5:9b:b4:be:6e:7f:ef:4a:a3:
         fa:b8:6a:8e:cc:10:a2:ef:f7:08:7b:af:f6:ea:16:64:4e:fe:
         8e:4e:b9:e3:7e:af:ce:11:29:d0:8f:06:92:9c:b4:cd:6c:ce:
         a7:d1:67:11:de:ce:ea:c9:d3:4e:e3:66:0a:ab:5c:dd:08:60:
         b4:8b:6c:a0:cb:9b:e3:a1:40:43:47:b4:69:73:e2:ef:54:b9:
         25:f2:c2:f1:f3:1b:1a:36:1b:3d:88:88:b8:30:03:91:27:80:
         07:55:72:25:7a:d6:1a:a1:7e:51:48:c6:c2:f7:70:f0:29:b0:
         5e:76:95:06:08:1c:f5:66:c5:a9:b8:ea:9b:cf:94:f6:ed:9e:
         2a:4d:c9:1e:c2:a0:0b:6a:d7:02:76:aa:4d:17:ea:57:4a:67:
         c8:5d:fd:5e:ac:26:22:c9:65:e0:12:bf:2f:e7:32:c4:90:fa:
         69:25:40:5e:c6:ff:05:3d:b6:b2:c0:04:76:7f:c9:4c:04:2e:
         33:7f:97:28:42:f2:ac:31:4c:f4:00:3f:df:1c:09:da:4c:6b:
         87:68:a0:cd:07:46:4a:ac:14:7b:c1:c9:26:b1:95:b0:01:f4:
         bd:57:b8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:11:45 2026 by rpki-client