Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft
File:                     2m3rP2XMI2eEg6drt445Hy-cZCE.mft (raw, json)
Hash identifier:          +eSWIGZK/YGvuxOJgP+pJqfmzBo+rM3sPJMRQcQ5iP8=
Subject key identifier:   04:7A:E0:49:A1:2A:AE:BA:4C:8C:A8:21:DB:B3:0B:88:D4:17:E0:18
Authority key identifier: DA:6D:EB:3F:65:CC:23:67:84:83:A7:6B:B7:8E:39:1F:2F:9C:64:21
Certificate issuer:       /CN=A91CE959/serialNumber=DA6DEB3F65CC23678483A76BB78E391F2F9C6421
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2m3rP2XMI2eEg6drt445Hy-cZCE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft
Manifest number:          65
Signing time:             Fri 25 Sep 2026 03:43:34 +0000
Manifest this update:     Fri 25 Sep 2026 03:43:34 +0000
Manifest next update:     Fri 02 Oct 2026 03:43:34 +0000
Files and hashes:         1: 2m3rP2XMI2eEg6drt445Hy-cZCE.crl (hash: dLB9VANB8f/7Ar+wmhvIb6cijn2cduva+DSpUv6hpcs=)
                          2: E302E312268811F185CD3CFFB4833773.roa (hash: 1Tn0eJ0bGdKPh/87544Mu+NSKKv9zP/9QDVNwO5GdQc=)
                          3: DD10EC4221D311F1A9814A2D233D8C67.roa (hash: /yzAJPiNJxpo9+q64etk5otNPKwR6uKsst/Nxwyi5gg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.crl
                          rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2m3rP2XMI2eEg6drt445Hy-cZCE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 03:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE959, serialNumber=DA6DEB3F65CC23678483A76BB78E391F2F9C6421
        Validity
            Not Before: Sep 25 03:43:34 2026 GMT
            Not After : Oct  2 03:43:34 2026 GMT
        Subject: CN=6ab5ede6-fef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4c:b5:21:19:6b:a2:5d:57:b9:3a:a6:f1:2d:
                    d2:51:e3:ca:9c:c9:26:36:68:b0:bb:41:9d:ca:20:
                    fb:38:b5:29:34:a1:2c:d0:04:09:37:5d:19:da:1c:
                    1f:00:fb:b1:fb:e3:e3:fc:c3:e1:57:29:39:f5:9f:
                    6b:c7:a2:ed:ab:0e:2d:5f:5b:d7:36:5c:22:f0:e9:
                    77:8c:cf:95:7b:65:93:3d:82:a8:b6:38:c6:8c:a8:
                    63:64:da:ef:0a:71:07:fb:b8:f9:72:29:fd:80:be:
                    cc:a6:38:3d:70:f4:20:83:ea:85:e8:9b:e2:b6:5b:
                    f4:2b:2d:45:ff:05:1c:da:0d:fe:eb:f1:35:ed:ac:
                    c5:ad:9c:87:73:a9:d1:2f:aa:05:65:89:c0:78:fc:
                    2d:01:94:8a:b6:95:ea:57:85:67:05:94:87:1c:db:
                    0e:b3:81:40:61:da:06:ba:41:7e:d4:a5:8c:bc:ac:
                    ee:26:39:82:3b:48:6d:90:da:f6:e1:ce:b6:8f:c6:
                    6b:67:97:3c:85:28:1d:33:45:1d:84:90:1e:1f:b9:
                    22:b4:d2:06:e2:b0:44:b2:38:94:e3:9d:c3:bb:db:
                    bf:59:37:ef:37:51:aa:00:12:2d:ea:13:71:67:4e:
                    a4:b4:7c:8f:0a:ca:b8:18:d9:b1:cb:a8:43:f6:a9:
                    6f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7A:E0:49:A1:2A:AE:BA:4C:8C:A8:21:DB:B3:0B:88:D4:17:E0:18
            X509v3 Authority Key Identifier:
                keyid:DA:6D:EB:3F:65:CC:23:67:84:83:A7:6B:B7:8E:39:1F:2F:9C:64:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2m3rP2XMI2eEg6drt445Hy-cZCE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:db:97:98:c6:44:83:e5:a4:13:11:aa:a1:be:d8:e6:d3:b9:
         4b:04:69:ca:5c:30:fb:f5:77:4e:56:e8:b0:b0:e6:01:04:39:
         b2:8f:a7:0b:14:7f:1e:71:d3:51:b8:e4:44:0a:ae:40:ec:38:
         b0:61:0a:bb:43:16:35:8f:78:94:cc:fb:52:e9:d9:8a:53:cb:
         1e:75:da:6d:9d:69:ab:8b:aa:a0:51:17:c2:6d:97:db:09:a2:
         fb:13:e7:c5:b0:ea:ff:10:ae:9c:a1:26:d1:82:17:b2:2f:4e:
         79:3a:a0:48:ce:77:4c:dc:81:93:5e:60:51:f1:ab:11:4e:fa:
         e2:0f:8b:60:22:83:d9:37:98:e6:88:ac:5d:55:95:15:98:dc:
         e4:ee:f4:ec:3d:e6:90:0f:9f:89:96:6a:60:c4:7c:6c:89:42:
         e9:2b:53:30:6c:bf:58:6d:94:9f:19:46:b9:d9:3f:bc:2d:00:
         4d:c0:80:a3:de:6b:c2:34:a6:2d:19:ec:33:93:a5:af:42:dd:
         be:22:58:c4:92:96:55:a0:9a:f8:bc:6e:29:01:b8:f4:62:ea:
         3c:20:8e:f1:fa:4a:4e:9e:f8:6b:a0:6f:65:6a:cc:ae:80:cc:
         fa:9b:91:e4:3e:c2:e7:29:48:c3:01:72:01:9e:62:be:fc:03:
         fa:70:e9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:23:35 2026 by rpki-client