Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
File:                     n4mmBPRc629oBPtTTq3CQWa9Dyk.mft (raw, json)
Hash identifier:          3/Od5yWtQsEFDSSt5RWrJzQqmipNaj0VHepU+gLCAxs=
Subject key identifier:   81:B9:BF:C8:A4:D2:75:42:AE:07:18:55:B1:2A:F2:DD:CB:EE:48:1B
Authority key identifier: 9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
Certificate issuer:       /CN=A91FD3F6/serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Certificate serial:       0137
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
Manifest number:          0127
Signing time:             Wed 23 Sep 2026 05:33:41 +0000
Manifest this update:     Wed 23 Sep 2026 05:33:41 +0000
Manifest next update:     Wed 30 Sep 2026 05:33:41 +0000
Files and hashes:         1: n4mmBPRc629oBPtTTq3CQWa9Dyk.crl (hash: qR/SjS5iRuJfUPS0A17G+bQ+fGGNAomfzTYCuCzCOUc=)
                          2: 27B19A58F99911EFB6B7F427C4F9AE02.roa (hash: A9CzU8MDj6rLJSlF21HcobLlJ5jlCrKiSpiRirq4aHI=)
                          3: 88E11172F99A11EFA825D961C4F9AE02.roa (hash: bi6yZUP9Smkax+xVdkGT/x3hFrhWjvPzPQn2lGZjFLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
                          rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311 (0x137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD3F6, serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
        Validity
            Not Before: Sep 23 05:33:41 2026 GMT
            Not After : Sep 30 05:33:41 2026 GMT
        Subject: CN=6ab364b5-dc81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:2e:1c:c3:d2:8e:33:32:44:e6:99:6c:9b:02:
                    e7:eb:2b:23:f6:84:51:a1:ae:6e:d6:96:45:d1:d2:
                    a1:fa:e9:73:28:0c:ea:41:61:f9:81:c5:30:d1:51:
                    32:b0:2e:29:d3:9d:72:84:f6:6e:cf:1b:09:fb:ec:
                    4f:ca:36:62:71:a1:33:31:39:0b:37:16:42:ac:23:
                    e6:b0:bd:74:ec:e2:25:52:b0:ea:4f:b4:b9:90:03:
                    03:0e:c2:f3:55:0c:15:bb:4a:d2:0f:7b:40:f9:b8:
                    3b:51:53:5d:7e:d7:dd:76:f6:af:ed:7f:71:2b:a1:
                    f2:3b:ee:c1:69:56:f9:5c:7e:8f:76:f4:a2:64:93:
                    80:db:03:3b:a2:fa:3e:b8:5e:52:49:f5:ff:e9:72:
                    37:69:90:70:5f:77:da:46:b2:ab:c7:59:ae:ba:c7:
                    62:49:2a:42:82:9a:14:74:90:37:64:a6:df:14:03:
                    ee:07:30:aa:fa:e3:37:f8:4f:9f:a2:dc:d5:f6:59:
                    11:48:ef:f3:0c:82:3a:b0:b7:32:96:7c:0e:4a:be:
                    d3:84:1e:db:24:fe:73:72:b9:dc:fd:27:cf:5b:02:
                    03:8f:db:be:94:b0:ed:47:f6:35:e8:0d:25:af:f4:
                    ae:3a:68:df:82:81:59:59:66:22:db:22:a6:79:92:
                    b2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B9:BF:C8:A4:D2:75:42:AE:07:18:55:B1:2A:F2:DD:CB:EE:48:1B
            X509v3 Authority Key Identifier:
                keyid:9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:1b:97:7a:cb:13:a3:ee:50:47:e7:fb:06:ff:1d:d3:20:b0:
         1b:26:d7:26:ed:24:ef:68:70:d9:23:7f:d3:56:30:6d:e0:7d:
         4c:c9:e2:c6:d6:c3:7a:78:93:be:84:b3:bd:be:51:7f:23:db:
         ee:03:9c:6b:82:80:ec:dc:42:46:8f:bf:5e:de:cc:df:49:2b:
         e5:2f:00:1b:42:48:a3:dd:4d:d5:c0:d7:3b:7b:7d:5a:c5:57:
         0d:a6:74:46:9f:24:14:62:19:44:44:5f:1d:14:ee:de:2a:e7:
         3d:29:84:1b:58:68:af:36:70:05:e7:5a:3e:f4:8a:31:72:02:
         62:e8:b8:c8:cb:9e:12:62:81:6a:64:aa:9b:db:d2:04:0a:cc:
         dc:96:46:64:66:83:38:09:21:8e:6b:ac:ab:01:67:7e:62:9d:
         a0:cf:30:be:6f:b7:3a:c0:e9:26:5d:dc:a1:6f:b1:c5:bd:d7:
         47:38:32:d8:5b:45:c3:96:9c:d9:90:72:1f:e0:8a:96:48:e4:
         30:26:a4:db:43:1d:fe:3d:56:76:f0:e1:a7:7e:12:54:cd:9b:
         fc:e1:6d:6f:6d:96:fa:08:e6:48:7a:4b:e0:60:4c:0a:19:5d:
         91:80:b6:43:7e:10:7c:4c:db:b7:ee:17:e7:76:38:4b:b9:05:
         ff:3d:34:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:48:02 2026 by rpki-client