Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft
File:                     MEsColZqFjrazh-lIaMKfmJqwR4.mft (raw, json)
Hash identifier:          +zjsQclPnuudjohC3jZpjtceXeupfYA4J52Ww6u3sm8=
Subject key identifier:   B3:AD:A7:5A:1E:3E:77:FF:1B:04:1C:97:84:75:11:49:9B:06:55:35
Authority key identifier: 30:4B:02:A2:56:6A:16:3A:DA:CE:1F:A5:21:A3:0A:7E:62:6A:C1:1E
Certificate issuer:       /CN=A91CAECE/serialNumber=304B02A2566A163ADACE1FA521A30A7E626AC11E
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft
Manifest number:          0113
Signing time:             Wed 23 Sep 2026 05:46:38 +0000
Manifest this update:     Wed 23 Sep 2026 05:46:38 +0000
Manifest next update:     Wed 30 Sep 2026 05:46:38 +0000
Files and hashes:         1: MEsColZqFjrazh-lIaMKfmJqwR4.crl (hash: Uc3DI2sfgHkpgqbRg5No6eaWQ4Cv2/oKcv/2InW9zY4=)
                          2: 07063FA4134B11F0B48EFA0AC4F9AE02.roa (hash: yRpg8YzN41NYB9rsIYgkG05og6BR0pcJnbn3a4gO0DU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.crl
                          rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAECE, serialNumber=304B02A2566A163ADACE1FA521A30A7E626AC11E
        Validity
            Not Before: Sep 23 05:46:38 2026 GMT
            Not After : Sep 30 05:46:38 2026 GMT
        Subject: CN=6ab367be-03e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d3:4f:db:15:17:62:8e:87:8e:85:13:99:11:
                    49:09:03:47:46:cb:85:e6:d9:7a:4a:46:b6:7b:b8:
                    b8:2c:79:5d:8f:aa:e7:d9:8b:2b:71:27:97:8c:dc:
                    d6:e5:f0:0c:b8:e1:37:59:95:97:b9:b6:a4:c5:e6:
                    d7:08:fa:5e:86:d2:e7:de:ef:e2:88:ce:63:61:a6:
                    bd:30:a8:23:dc:25:cc:03:69:9e:88:22:f5:ec:a5:
                    98:5d:79:7e:9b:36:b5:26:f5:3e:6e:6e:f1:05:67:
                    7e:af:75:1b:33:fe:05:d4:ee:fe:42:71:1d:64:b8:
                    45:f8:45:3d:08:7c:1e:5d:20:ef:55:bb:20:bb:1e:
                    47:c8:5f:de:b6:34:d9:eb:f5:42:55:41:f6:f6:82:
                    74:15:e5:15:8a:51:58:43:a5:a7:0a:3e:81:43:03:
                    46:ed:69:ee:24:68:14:e7:67:44:fb:37:c1:ad:10:
                    a7:96:a2:47:1a:4a:9d:e2:6e:5f:a9:d9:83:16:61:
                    d9:6a:47:2a:bc:28:b0:14:d9:f4:0b:40:00:e5:18:
                    e5:69:e2:ae:68:21:dd:ad:29:85:ce:a8:16:da:b2:
                    49:ef:b1:3f:25:a5:c2:03:df:99:40:db:66:0b:10:
                    b6:c4:09:74:c9:5b:b8:74:ce:c0:a0:dc:bb:8a:29:
                    ed:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AD:A7:5A:1E:3E:77:FF:1B:04:1C:97:84:75:11:49:9B:06:55:35
            X509v3 Authority Key Identifier:
                keyid:30:4B:02:A2:56:6A:16:3A:DA:CE:1F:A5:21:A3:0A:7E:62:6A:C1:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d1:5e:8d:f7:18:4a:b9:48:dc:a9:c8:d9:05:d0:d1:bc:20:
         25:81:76:90:5e:69:5f:6f:2f:7c:39:5f:5c:0f:97:68:c3:e2:
         d9:c9:d5:59:12:a1:89:c0:06:88:d8:7a:4b:c2:11:3c:ee:6a:
         d3:b7:ab:11:34:ac:70:b5:63:38:c0:c1:15:2a:e8:ed:c2:3e:
         c7:da:d9:af:0f:66:69:52:86:05:f4:5d:df:d6:07:8a:15:c9:
         d2:67:20:07:c1:bb:bb:c1:d1:94:8d:4d:d0:97:33:12:1a:54:
         51:93:d0:f0:c7:e4:04:f5:96:e3:2b:ba:2a:9b:ff:13:fc:f3:
         ed:80:c8:ba:74:e0:93:4c:65:93:3f:e6:55:57:34:b3:48:24:
         0b:01:9b:eb:f7:3d:32:9f:a8:f6:51:cd:0b:de:c2:56:4f:8e:
         5a:d0:7f:c0:95:ae:ef:6b:24:1c:bb:3e:50:07:ba:e7:54:35:
         b2:75:21:ca:f9:ab:b8:57:bc:40:15:de:21:51:60:ad:33:1e:
         f5:e4:37:b4:7a:05:ab:84:2f:0d:5c:9a:fc:14:48:a6:24:fb:
         25:43:01:e8:d1:01:f3:f8:5a:44:43:56:ee:25:b0:36:6f:d1:
         0e:e4:e2:93:27:07:05:39:ad:74:e8:38:43:00:8f:17:3a:7c:
         58:2e:89:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:48:58 2026 by rpki-client