Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
File:                     dCWq4W3bRko-K0ecekDJkCODa6A.mft (raw, json)
Hash identifier:          erCH+lxrqzFI2hBp4fnTyn07eEgvLWj2g3dP141a9MU=
Subject key identifier:   DE:55:56:6B:E3:0F:24:F7:50:5A:D8:81:35:92:41:AC:B7:2D:28:CF
Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
Certificate issuer:       /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Certificate serial:       03C2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
Manifest number:          039C
Signing time:             Thu 03 Sep 2026 00:45:48 +0000
Manifest this update:     Thu 03 Sep 2026 00:45:47 +0000
Manifest next update:     Thu 10 Sep 2026 00:45:47 +0000
Files and hashes:         1: dCWq4W3bRko-K0ecekDJkCODa6A.crl (hash: BN2PgqQsq5xf3zNPUEqeZ7JLsU1kIi0HIEgfziXbCks=)
                          2: A3C1A64E020811EF900CC60CC4F9AE02.roa (hash: HpPZhZVSwGrzf4zGYjjyQ7ueOCim2ZvtK0gkwPhEOmI=)
                          3: 7F78A06E6BBD11F18D81D59C7947A888.roa (hash: eg0ecmCsbK5JnVphz+icPr5TGD+NYgXexf2SF0w1KKU=)
                          4: 1EA5984A0BE111ED9E3AA135C4F9AE02.roa (hash: PAqkmFF7NdZLc+WBtc68ZNEhsmCDHgoBRZN4pVqjKP8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl
                          rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 00:45:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 962 (0x3c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163998, serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
        Validity
            Not Before: Sep  3 00:45:47 2026 GMT
            Not After : Sep 10 00:45:47 2026 GMT
        Subject: CN=6a98c33b-9d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:31:71:cc:8a:00:16:a8:a5:5a:42:fa:75:78:
                    ba:47:12:56:4e:61:ac:9a:e5:24:47:b2:30:e8:08:
                    78:89:5f:34:c1:50:b2:18:50:23:05:26:97:f4:da:
                    e2:eb:84:05:e2:6d:85:19:d5:cd:fb:1a:60:62:4d:
                    98:a8:83:5d:db:9e:f7:a9:6b:db:2e:04:91:e6:7b:
                    54:5d:8f:75:2b:ab:95:27:ad:e8:f9:91:0d:24:78:
                    57:79:2b:f8:da:4a:ef:9a:10:e3:18:f7:3f:44:0e:
                    ce:24:cd:5b:a3:d4:23:5c:97:6c:5f:92:ff:8d:59:
                    e7:50:0c:44:0e:94:5b:4f:6c:1a:2d:42:81:a3:f1:
                    34:20:bb:3e:71:75:e1:4a:8c:48:ff:4c:eb:c8:3c:
                    65:f0:22:b9:5b:3d:db:f1:19:05:36:37:3b:10:64:
                    e1:ac:7e:c1:a5:06:6e:dc:75:2f:c8:b1:86:ac:33:
                    e1:cc:ee:32:dc:cb:ad:83:23:db:22:11:10:a2:bc:
                    3f:a1:83:8c:3c:a9:86:9b:57:32:b0:d4:a7:f4:50:
                    3d:b1:57:7f:f5:8e:04:d4:ff:3b:06:7e:e0:72:34:
                    cb:04:df:2a:87:a7:fb:cb:51:01:56:91:d1:cb:58:
                    02:55:e6:6d:f0:5e:d4:c1:53:e4:49:2d:48:7a:f4:
                    f6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:55:56:6B:E3:0F:24:F7:50:5A:D8:81:35:92:41:AC:B7:2D:28:CF
            X509v3 Authority Key Identifier:
                keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:63:69:0d:c5:00:74:51:fa:9c:4d:53:0d:80:93:e7:af:1e:
         51:89:7f:ab:76:67:c2:48:d4:e3:df:ee:6b:a6:6b:5a:87:9a:
         2a:c8:e8:1d:4a:29:2c:17:5e:27:68:02:cc:c7:25:18:75:e2:
         ca:bf:0d:5f:df:69:42:d1:d6:07:3f:32:78:71:90:55:10:0d:
         ff:5b:f6:9c:ff:1e:6f:11:98:6f:80:37:4d:23:0f:ac:44:39:
         6d:cb:55:81:c8:40:e8:0c:98:55:4f:9e:44:8e:81:94:12:39:
         a2:80:f9:cb:5c:56:45:f6:93:11:b3:ff:4b:c8:0e:1b:d8:5d:
         97:a1:84:de:5f:c6:96:39:e0:e7:bc:c7:b1:f7:4d:aa:f0:eb:
         89:84:b4:85:2c:d6:1a:1a:63:e8:b0:e0:fb:31:18:42:16:d4:
         26:2d:e2:37:41:c2:63:f6:b8:2e:48:ea:9e:e1:92:ba:db:4e:
         f7:32:cb:58:f8:78:09:6a:d1:5c:fd:37:80:a1:ba:e5:1a:9f:
         04:d3:b3:6f:91:e9:4a:46:46:e1:bc:b0:99:3e:08:5c:66:34:
         02:a8:e3:4b:6a:8a:a5:27:ef:ab:a8:8f:3e:0b:c4:e8:3f:c8:
         86:bb:9a:f7:7f:ba:06:df:4b:11:7b:82:44:30:cc:aa:e5:2c:
         f3:a8:41:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:09:50 2026 by rpki-client