Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
File:                     a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft (raw, json)
Hash identifier:          CdcT8odIm5xz6dfT7I7bfpLLstjHz/tgteXoEKSKVCM=
Subject key identifier:   8A:62:A5:CE:4C:BB:38:87:90:1A:F0:F5:C8:59:2A:0A:4C:CB:F5:64
Authority key identifier: 6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70
Certificate issuer:       /CN=A91D2F93/serialNumber=6BC263B51A56B51740777459796227ED00DF4D70
Certificate serial:       07DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
Manifest number:          07D5
Signing time:             Tue 22 Sep 2026 21:05:57 +0000
Manifest this update:     Tue 22 Sep 2026 21:05:56 +0000
Manifest next update:     Tue 29 Sep 2026 21:05:56 +0000
Files and hashes:         1: a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl (hash: LuYW6U02V0jbo43e1LKb0qO1N/of21p85VCYGaeaMnY=)
                          2: 715A7174F80411F099DDF14C6E6F56BC.roa (hash: vR+q/zKzwJ0cS0EI5NmaW8vlP008OwFN/8qpLRoeRrk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl
                          rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2013 (0x7dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2F93, serialNumber=6BC263B51A56B51740777459796227ED00DF4D70
        Validity
            Not Before: Sep 22 21:05:56 2026 GMT
            Not After : Sep 29 21:05:56 2026 GMT
        Subject: CN=6ab2edb5-743c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bf:6e:db:6e:6c:70:4c:a3:44:d5:de:3c:29:
                    96:f3:8c:25:7f:f0:41:2f:62:12:06:2e:05:c9:9e:
                    0d:51:d5:dc:66:49:6e:9f:b8:ef:92:00:10:8d:bd:
                    ec:cb:1f:97:66:a1:65:e8:67:d7:cd:b1:67:b1:cb:
                    2a:2d:34:eb:c7:91:41:21:68:18:6e:a7:b1:81:3c:
                    66:dc:da:aa:af:83:4e:b8:f8:f5:d3:76:90:3d:0e:
                    d4:35:c0:73:26:43:77:30:9c:bb:21:f4:b0:d8:83:
                    32:1e:15:06:60:66:0e:30:89:de:48:91:02:46:5b:
                    51:58:87:d3:1a:dd:f1:0b:8e:2a:db:81:7b:22:f3:
                    0e:20:22:fe:20:db:2e:dc:e3:a7:4f:98:41:0f:d8:
                    57:17:db:c5:fa:23:f2:09:c2:6f:2b:a1:70:e1:d2:
                    b7:6c:74:86:dc:8f:89:27:97:ba:55:28:0a:47:91:
                    a5:d3:ec:3b:d1:21:3e:a2:f9:dc:2a:9d:69:f0:f9:
                    d2:44:3c:95:d1:58:19:54:0b:6a:ab:89:2f:f1:96:
                    b9:42:eb:87:6a:1a:1f:03:cb:c4:b1:24:88:29:fa:
                    35:7e:58:9f:ae:0e:bb:3d:dd:99:34:a0:c4:3a:a2:
                    cb:50:c5:e9:f5:b1:ea:ff:3d:ff:ea:4d:4c:13:e7:
                    25:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:62:A5:CE:4C:BB:38:87:90:1A:F0:F5:C8:59:2A:0A:4C:CB:F5:64
            X509v3 Authority Key Identifier:
                keyid:6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:e5:bb:27:98:10:24:86:07:15:c7:ad:ae:85:3c:4e:74:84:
         57:f9:af:40:b9:9a:70:7a:24:d3:e7:4c:34:18:2c:83:39:5d:
         93:a9:8c:a2:eb:e4:68:1c:7b:a9:9c:a9:d9:2a:a4:bd:7e:29:
         ad:00:3a:85:61:a5:9d:ea:d3:da:49:70:e3:eb:7b:37:44:70:
         00:41:0e:3b:b9:e4:90:db:63:b8:59:e4:05:64:8a:57:1b:07:
         8b:09:46:4e:a9:39:9e:5d:a6:6a:dd:f2:35:d9:8a:cc:0b:29:
         7a:a6:9d:9f:51:a8:91:e6:8c:03:d1:77:2e:c8:4a:3e:f0:24:
         ef:d2:78:08:9e:bc:3c:e5:45:54:36:67:0d:dc:7e:37:99:34:
         7f:f3:ab:2e:e3:93:be:92:e6:fb:05:30:3c:49:06:f8:9e:70:
         ee:57:ff:11:26:79:46:47:a5:9f:cd:75:96:10:0a:b8:58:93:
         50:bf:ac:59:72:0a:2e:eb:b2:db:fc:71:0b:59:36:e6:99:2b:
         73:87:42:7d:9e:ee:4e:b0:3e:26:e6:1f:e6:86:f4:92:1a:d5:
         f5:12:c7:4a:76:e0:7f:80:52:52:64:a2:fd:45:b4:5d:7f:5e:
         c4:b3:91:80:50:f0:bf:69:1a:98:d3:08:ef:37:76:5d:06:62:
         c6:99:30:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:37:43 2026 by rpki-client