Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft
File:                     9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft (raw, json)
Hash identifier:          UpngSid5aJmQmpgRlVY5XJCMdZXqonA5D5ujDfrcOqg=
Subject key identifier:   C3:78:C3:06:AD:64:14:77:E4:F4:32:59:63:BB:27:E0:82:89:85:E3
Authority key identifier: F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32
Certificate issuer:       /CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32
Certificate serial:       0758
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft
Manifest number:          0731
Signing time:             Thu 24 Sep 2026 21:56:26 +0000
Manifest this update:     Thu 24 Sep 2026 21:56:26 +0000
Manifest next update:     Thu 01 Oct 2026 21:56:26 +0000
Files and hashes:         1: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl (hash: BIlpBIuUF4NNGHbv/Ihl7LPqjaIaV1xEhCngrU8ILHk=)
                          2: 0F6980C0830711ECB472CA0AC4F9AE02.roa (hash: ZiymFWnj3M1tXq26ZhLnNIDxD9Ed+EUoE2p91PflS5A=)
                          3: 105CB01A830711ECB472CA0AC4F9AE02.roa (hash: vlSukquMRVvRP714pQfSW9JCKpx/XhQZSDVUjHWXm3o=)
                          4: 0E2711E6830711ECB472CA0AC4F9AE02.roa (hash: WguzFNpnFOiKG7d1mZy9kPuySEP+TVOdHsdPXP/TGHU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl
                          rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 21:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1880 (0x758)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6D91, serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32
        Validity
            Not Before: Sep 24 21:56:26 2026 GMT
            Not After : Oct  1 21:56:26 2026 GMT
        Subject: CN=6ab59c8a-9f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bb:b9:3e:f9:af:7b:04:8a:d5:a0:67:09:e4:
                    8c:6a:7b:ac:67:3a:59:e8:9f:51:1f:32:46:49:29:
                    9d:66:a4:af:ed:f4:6f:22:7b:8d:ef:f5:ce:6f:fa:
                    60:bc:87:57:34:1e:c8:85:23:16:5c:54:32:d6:87:
                    07:70:c6:0d:6a:34:ca:33:66:5a:4e:17:4e:ca:18:
                    dc:fc:1f:e8:0a:7e:a8:ab:2b:1c:f7:32:95:7d:a4:
                    56:5d:25:4a:d7:9f:64:83:56:0e:2d:52:6d:63:37:
                    c3:11:8c:f7:a1:7f:f5:ce:25:04:0d:d3:f4:93:34:
                    a0:1a:92:cc:e7:9e:d8:af:ed:67:b9:9a:c8:2e:f0:
                    59:15:44:ea:3c:20:36:3b:8f:2b:d7:7e:34:85:19:
                    f0:c8:19:68:22:8e:3b:59:6c:d5:12:33:82:ce:28:
                    bf:bd:45:81:c2:c8:9f:ef:3d:0c:c5:13:70:02:62:
                    45:5d:66:32:a9:c0:11:ff:7a:0a:8a:af:91:39:79:
                    f7:f5:d9:e4:c6:ec:59:39:69:3d:de:d6:1d:b5:bf:
                    61:4c:ad:83:6c:a9:ad:ad:3c:24:e4:3f:15:4b:55:
                    83:b8:d6:f6:7b:c8:e7:0d:5e:bf:a3:bc:f5:d0:86:
                    65:5e:60:c3:7e:e8:90:ff:cf:d1:d3:25:5f:75:0c:
                    21:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:78:C3:06:AD:64:14:77:E4:F4:32:59:63:BB:27:E0:82:89:85:E3
            X509v3 Authority Key Identifier:
                keyid:F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:8d:73:cb:a3:24:12:86:2e:3a:6c:6d:a0:22:46:ae:3f:0b:
         7f:97:e7:f1:c9:95:f2:8d:1c:07:b9:58:7e:44:eb:82:85:53:
         c7:4b:41:de:86:e6:23:a7:e9:46:a8:ad:38:97:63:7c:42:bc:
         06:3b:45:44:1b:68:7e:e4:c2:bd:94:a8:6c:40:55:6d:e3:2e:
         7e:54:a0:52:41:2d:1c:4b:d6:6f:dc:95:60:d1:a7:8f:d0:ee:
         6e:ef:2b:26:2c:83:f6:8e:b7:4a:b1:33:d5:44:1c:4f:c6:78:
         35:ff:ea:fb:66:86:46:6f:c7:0d:11:0c:91:f7:d5:87:09:3b:
         8e:bf:00:a7:33:85:11:cf:ed:db:03:2d:cb:f0:f9:1f:0b:cf:
         a6:68:80:bc:92:4b:7b:3b:e3:16:7b:74:49:5d:a3:00:f8:64:
         fd:38:f9:ac:fc:75:91:4c:82:3f:30:f1:29:59:9a:e5:d7:08:
         ef:09:21:ff:14:73:2e:62:f6:99:dd:7f:c0:e9:c4:b0:49:63:
         c2:4c:f7:bf:90:6d:7a:56:4c:fc:c1:c1:18:90:fa:87:47:76:
         67:c3:f0:b6:c9:85:f3:f6:d2:77:7d:58:3c:34:31:ac:15:e3:
         dd:31:ed:8d:03:5d:a2:1a:0b:08:00:49:10:54:37:2e:cb:dc:
         90:a1:af:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:38:41 2026 by rpki-client