Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
File:                     fvLsMxvWVD0y25gMUGJsBAfKiYI.mft (raw, json)
Hash identifier:          TUNuXFJcyLknIgMgfIR9DoapWlGMdllTnYNkd7x/wB4=
Subject key identifier:   A4:FF:A1:E0:08:62:64:07:6F:AC:AC:45:F5:87:4D:40:2A:B8:7E:DF
Authority key identifier: 7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82
Certificate issuer:       /CN=A91D5E23/serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
Certificate serial:       09CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
Manifest number:          09C6
Signing time:             Fri 04 Sep 2026 19:47:31 +0000
Manifest this update:     Fri 04 Sep 2026 19:47:30 +0000
Manifest next update:     Fri 11 Sep 2026 19:47:30 +0000
Files and hashes:         1: fvLsMxvWVD0y25gMUGJsBAfKiYI.crl (hash: NMvgqkkVgL/nYbmjq9/LkxU7QWaHjfHh0uyYPmxdgKQ=)
                          2: 70C35E88B07511EA8C0EC372C4F9AE02.roa (hash: nEw1J5nI/jYM2/PDdrlSv5FQkDbuSGPVtzOk8gJbumo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl
                          rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2511 (0x9cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5E23, serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
        Validity
            Not Before: Sep  4 19:47:30 2026 GMT
            Not After : Sep 11 19:47:30 2026 GMT
        Subject: CN=6a9b2052-51a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e5:52:ae:8a:ac:b1:f8:14:33:4a:98:b1:9d:
                    1f:a2:34:8b:b3:7b:cf:3e:29:fb:07:f0:22:67:3d:
                    9e:1a:89:35:cd:c6:f5:fb:97:d8:6d:e4:a3:3e:ce:
                    61:b1:09:90:1e:c1:cc:22:23:72:66:36:fe:be:91:
                    d2:9b:58:93:86:9b:c4:77:9b:a6:03:a2:f6:c0:15:
                    8a:00:54:e4:60:98:5a:a6:8f:ff:b5:f8:9b:be:16:
                    af:7e:53:87:77:b9:5b:a3:75:6b:05:23:37:26:32:
                    21:dd:12:10:d3:4b:1d:c3:e3:18:d2:d6:06:79:e0:
                    bb:0e:74:2e:64:dc:05:46:f5:05:14:fe:4a:53:f0:
                    e1:83:1c:6c:b3:a6:2d:d5:b1:18:dd:5d:54:20:2d:
                    80:cc:e0:f1:ed:82:8c:1a:f7:7a:56:05:23:f5:39:
                    66:23:cc:d8:e5:0b:b3:40:86:f2:43:01:d1:85:00:
                    41:7f:f8:57:0a:6b:5c:5c:b1:bc:66:88:03:96:b4:
                    a1:60:14:7f:67:3a:fc:c6:cd:d3:dc:64:3e:bd:00:
                    07:03:7b:8e:28:da:eb:63:f6:4f:ba:d6:d6:45:68:
                    f4:0d:4c:34:44:0f:52:5f:92:55:ad:e3:f3:13:71:
                    fd:2a:58:03:5b:72:6a:92:8a:dc:82:00:da:ec:21:
                    68:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FF:A1:E0:08:62:64:07:6F:AC:AC:45:F5:87:4D:40:2A:B8:7E:DF
            X509v3 Authority Key Identifier:
                keyid:7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:0b:f5:72:48:41:c4:bd:67:f7:c0:88:a7:d5:38:27:e2:70:
         b9:cb:5c:d1:e1:ed:f6:26:73:12:55:6a:83:1b:08:5e:1a:ce:
         db:eb:93:31:56:ea:47:f4:ce:5a:e0:f9:7e:48:df:08:26:e6:
         a3:fe:28:25:3d:ed:9c:72:b4:b3:9c:be:7d:21:24:9d:1a:0b:
         cd:55:47:99:f0:a0:22:9a:0f:b7:db:5b:8b:1b:52:c4:28:0c:
         7b:ec:3f:b2:08:d7:53:1e:ff:c2:02:4a:bf:01:be:41:7e:98:
         04:f8:aa:f6:19:5d:33:14:57:91:00:36:0b:4d:68:c1:f1:ea:
         7d:09:36:a4:68:1b:2f:80:a2:02:e4:54:d8:4c:2f:ec:e5:16:
         2a:fb:5f:57:bd:69:6a:4b:09:7a:7f:80:a3:e5:2f:d7:ca:84:
         44:43:16:7e:b1:ec:5d:66:ea:59:24:dd:cb:c2:d1:38:e1:76:
         ac:16:01:97:80:5b:5a:d5:fe:ec:3a:c3:38:b2:d0:aa:c4:f7:
         e3:1e:98:85:a9:9f:cd:69:f9:3a:f1:77:f0:68:ad:14:63:2d:
         a9:a4:34:fd:03:de:35:15:08:8a:82:cf:e5:ff:17:6a:18:a5:
         33:f7:24:5e:6c:8d:0c:3a:30:3c:03:1b:b5:23:5a:46:65:2c:
         12:ac:65:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:17:15 2026 by rpki-client