Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
File:                     Swkt8QQoD0W8PyeW9AHMK0xhROk.mft (raw, json)
Hash identifier:          8Idlmzekn/BTJLQzORZwteeJzQDpod435W3YIR80y88=
Subject key identifier:   6E:06:C2:A0:C3:23:72:94:64:82:48:6C:D8:9A:2B:2D:AF:6B:62:5E
Authority key identifier: 4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9
Certificate issuer:       /CN=A91C8307/serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9
Certificate serial:       0157
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
Manifest number:          0151
Signing time:             Fri 25 Sep 2026 05:21:50 +0000
Manifest this update:     Fri 25 Sep 2026 05:21:50 +0000
Manifest next update:     Fri 02 Oct 2026 05:21:50 +0000
Files and hashes:         1: Swkt8QQoD0W8PyeW9AHMK0xhROk.crl (hash: XICfJo5UCKCGU4EX2xkACJsFUkvHuV9XT+5M3p4YDhY=)
                          2: E5FC085A843011F0971BDC44C4F9AE02.roa (hash: dm3BcPGPdQuO5Idson2cH8Me4yvZsLSNX+U6zphRieA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl
                          rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8307, serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9
        Validity
            Not Before: Sep 25 05:21:50 2026 GMT
            Not After : Oct  2 05:21:50 2026 GMT
        Subject: CN=6ab604ee-2d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:39:66:a0:ab:e0:df:3b:26:a8:06:6d:59:5e:
                    c1:59:ad:a0:6c:ff:3a:18:fa:6e:1c:75:85:95:88:
                    50:77:4e:98:20:c0:e0:78:57:b6:19:d3:5d:28:11:
                    6f:c8:be:00:0d:30:3f:bf:31:dc:73:3d:f0:36:b2:
                    78:7f:37:aa:5f:9f:a1:88:1d:26:a4:03:ff:55:a4:
                    17:6a:73:8b:3a:dd:75:f9:48:86:d3:83:78:ce:6f:
                    a8:85:a9:82:8b:bb:5b:63:e9:41:c4:e4:5a:41:67:
                    09:c8:c4:36:53:d7:74:c5:0b:f9:da:fa:33:ff:ed:
                    15:1c:b4:2f:5c:7e:6a:1e:cc:20:34:4d:03:ae:bd:
                    e6:21:1a:99:48:74:d4:08:d6:99:ab:23:f4:99:1f:
                    90:b8:b6:8c:53:99:f8:bb:dd:e5:44:53:40:02:cf:
                    be:67:fb:3c:2d:ea:73:98:22:85:22:e7:05:2e:a4:
                    3d:bb:c0:98:a3:f5:ea:04:e0:19:d1:a8:8b:3e:70:
                    42:bd:e6:7e:c0:fb:bb:27:b8:a2:83:4f:e4:5f:7f:
                    da:5b:3a:8a:7c:f6:5f:70:06:d4:cd:dd:c3:e8:28:
                    2e:60:2d:d1:79:1c:85:68:d2:83:38:da:34:31:95:
                    09:87:7c:99:60:00:a4:f8:5c:ad:59:84:4c:b4:5b:
                    5e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:06:C2:A0:C3:23:72:94:64:82:48:6C:D8:9A:2B:2D:AF:6B:62:5E
            X509v3 Authority Key Identifier:
                keyid:4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ae:56:3d:6c:c0:40:75:28:e1:4e:fa:c1:3e:06:f0:a7:30:
         09:4c:58:0b:48:c2:c4:8a:f4:1b:d4:9a:44:8b:12:93:4d:be:
         c5:32:98:ce:25:d4:43:06:72:cf:71:87:9c:e1:57:ec:d3:2c:
         f6:8f:15:9e:b4:b5:68:d9:41:92:52:38:c2:25:86:53:18:fe:
         45:73:df:80:98:9e:c0:68:2a:fc:45:6c:20:0a:82:c6:eb:3b:
         ce:0d:4f:e1:ce:61:ba:1d:ba:93:eb:8b:60:79:91:ed:73:e1:
         5c:0c:67:12:2c:98:b7:eb:d9:e5:f4:8f:80:bc:ae:96:e6:67:
         7f:83:57:69:18:9b:3c:f5:47:5e:8a:c4:6e:d6:c9:43:63:e3:
         6c:0a:83:f0:6b:ac:f6:f8:56:61:04:e5:41:0d:29:8e:47:51:
         56:f6:12:a7:b7:03:95:2f:33:b9:e8:d6:83:53:ac:8a:6b:3a:
         2a:59:44:d4:15:1f:18:22:46:63:93:ad:d8:d6:98:0f:97:30:
         f0:09:94:a3:35:8b:c8:3b:a8:7a:f9:5d:d1:c5:7b:33:49:a8:
         18:15:0f:e8:12:f0:91:aa:29:a3:80:d6:51:c8:0d:ed:d2:23:
         33:8d:87:e3:2b:b2:dd:1f:85:b7:44:45:79:65:7e:31:53:13:
         f8:63:f1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:01:23 2026 by rpki-client