Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
File:                     47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft (raw, json)
Hash identifier:          lCZQu1M1a7eBMO1z1KOLBRSqWYXg4++9sA5fpsETvYc=
Subject key identifier:   DB:D5:9C:31:BB:0F:16:2B:56:1E:02:1C:15:2F:5A:8A:0F:D7:A8:CC
Authority key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
Certificate issuer:       /CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
Certificate serial:       08B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
Manifest number:          0891
Signing time:             Mon 31 Aug 2026 20:43:29 +0000
Manifest this update:     Mon 31 Aug 2026 20:43:28 +0000
Manifest next update:     Mon 07 Sep 2026 20:43:28 +0000
Files and hashes:         1: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl (hash: ioulCZeiCShnt/6JgIrnOAM4+cFRK1ElWE1StezpAsQ=)
                          2: E75B22220B5D11EBADED9667C4F9AE02.roa (hash: /NNxt2PRGKi4jINC1uMA6kp3kzBSWqOUAHvR4Zmm09U=)
                          3: E3BFC856DCB911F0A9D960E0496F56BC.roa (hash: hnYXXyG+HjpMZxqmpN5bsi+NSnbaTfeMqs5LW9a4ZFY=)
                          4: 11446DBE5B2711F099D02552C4F9AE02.roa (hash: 1MVde0/1uHuiUovcFZ77TlqLfJ5SZhmH3WyAneTv/Ng=)
                          5: 52B84266B3C411F0A952B10CC4F9AE02.roa (hash: 6zTCHG3uP3cK2rw/2Eul1AW03DSAhrWGcY7OdFAvbQs=)
                          6: 722022AEB3C411F0AB42E30CC4F9AE02.roa (hash: yhJxmZzQ2ZBaUh/TkISXu1owkmR7YDFhHEkIm62M8ls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl
                          rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 20:43:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2233 (0x8b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123072, serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
        Validity
            Not Before: Aug 31 20:43:28 2026 GMT
            Not After : Sep  7 20:43:28 2026 GMT
        Subject: CN=6a95e770-9b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8c:37:41:fe:38:84:75:ed:11:7a:4a:7b:90:
                    ff:77:4c:1e:bd:12:56:26:ba:f3:13:46:92:90:aa:
                    dc:db:b4:59:78:b5:c5:de:1f:8a:ff:ea:ab:3b:5a:
                    26:f6:66:61:e0:83:f8:af:40:bf:c9:5a:23:33:8f:
                    e6:7e:ad:78:0f:f5:02:63:a9:56:2d:83:16:05:f7:
                    e4:0a:96:28:43:48:2f:51:11:02:65:b6:70:61:fa:
                    28:ec:d8:17:89:e4:71:3e:f4:c9:72:0b:fa:77:80:
                    a1:93:7c:76:0b:e1:18:e9:b3:0b:86:4e:91:32:16:
                    34:49:4f:aa:2f:cb:6b:6d:13:f9:fa:c2:4f:26:0f:
                    42:65:ec:6b:d9:78:e9:ed:02:21:b6:ce:a9:55:80:
                    34:17:a3:1a:b7:f6:d5:b7:54:0b:80:b2:4f:3b:b7:
                    12:14:03:82:7e:99:68:fd:5b:61:9a:49:ef:6f:8d:
                    2a:a3:87:90:ed:de:66:a3:53:e3:94:21:14:72:87:
                    6b:47:57:73:78:7c:d9:0c:87:64:bf:47:2e:cf:15:
                    72:3d:96:31:a2:4a:50:04:da:27:9b:0a:aa:41:56:
                    5e:1c:c9:4e:ef:fa:b7:b8:98:21:92:6f:7e:9f:e3:
                    26:3d:48:4a:01:c0:81:71:40:e3:43:ab:24:f8:3b:
                    dc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D5:9C:31:BB:0F:16:2B:56:1E:02:1C:15:2F:5A:8A:0F:D7:A8:CC
            X509v3 Authority Key Identifier:
                keyid:E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:64:01:e7:2c:3d:05:b6:67:e6:1f:00:c1:89:75:ff:6b:1f:
         e2:f7:f9:32:29:78:d4:aa:96:8f:1d:65:d5:c4:5f:26:b4:06:
         db:c5:99:04:d1:3d:8b:9f:bc:33:6f:f9:ed:09:ac:57:40:5d:
         70:ea:b7:91:83:64:51:65:09:d4:a7:66:cc:5b:ae:8d:94:e9:
         63:fb:b3:ac:e1:da:8f:6a:76:f4:0e:41:fc:69:38:45:d8:f6:
         84:eb:f0:30:d5:73:8f:d1:87:b5:5c:3b:3f:22:0f:d6:81:fa:
         dd:24:b9:b3:89:cf:9e:4f:94:71:7c:c6:78:a9:4c:5e:44:43:
         24:aa:52:00:11:43:9b:05:6b:87:d5:54:a4:ec:5d:87:43:c6:
         4e:58:05:a3:4a:7d:37:f9:31:d0:6c:aa:e2:b8:03:8e:76:88:
         9c:73:30:15:50:8f:6b:6f:00:95:f0:41:c8:30:72:b2:e6:87:
         36:9a:68:4e:51:11:29:d4:49:e4:57:70:fb:13:da:9a:47:82:
         b0:e2:00:f1:36:40:35:47:79:62:8f:49:1b:26:1a:49:c7:ee:
         83:86:02:30:b8:60:e2:6f:51:1c:b6:15:85:a9:3f:96:51:55:
         c6:41:a8:d2:30:a0:6d:0d:97:b3:d8:ce:3a:c3:86:6c:57:e8:
         dd:3a:b5:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjMwNzIxMTAvBgNVBAUTKEUzQkNCQTg4QkVEQzJBNzY4QTk4NjVGNDE2RDY4QTdD
MzAzM0Y0NjkwHhcNMjYwODMxMjA0MzI4WhcNMjYwOTA3MjA0MzI4WjAYMRYwFAYD
VQQDEw02YTk1ZTc3MC05YjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArYw3Qf44hHXtEXpKe5D/d0wevRJWJrrzE0aSkKrc27RZeLXF3h+K/+qrO1om
9mZh4IP4r0C/yVojM4/mfq14D/UCY6lWLYMWBffkCpYoQ0gvURECZbZwYfoo7NgX
ieRxPvTJcgv6d4Chk3x2C+EY6bMLhk6RMhY0SU+qL8trbRP5+sJPJg9CZexr2Xjp
7QIhts6pVYA0F6Mat/bVt1QLgLJPO7cSFAOCfplo/Vthmknvb40qo4eQ7d5mo1Pj
lCEUcodrR1dzeHzZDIdkv0cuzxVyPZYxokpQBNonmwqqQVZeHMlO7/q3uJghkm9+
n+MmPUhKAcCBcUDjQ6sk+DvcJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNvVnDG7
DxYrVh4CHBUvWooP16jMMB8GA1UdIwQYMBaAFOO8uoi+3Cp2iphl9BbWinwwM/Rp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzA3Mi8wQ0VBNDk1QzBC
NUMxMUVCOTlBMTc1NjJDNEY5QUUwMi80N3k2aUw3Y0tuYUttR1gwRnRhS2ZEQXo5
R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQ3eTZpTDdjS25hS21HWDBGdGFLZkRBejlHay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzA3Mi8wQ0VBNDk1QzBCNUMxMUVCOTlBMTc1NjJDNEY5QUUwMi80N3k2aUw3Y0tu
YUttR1gwRnRhS2ZEQXo5R2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXWQB5yw9BbZn5h8AwYl1/2sf4vf5Mil41KqWjx1l1cRfJrQG28WZBNE9i5+8
M2/57QmsV0BdcOq3kYNkUWUJ1KdmzFuujZTpY/uzrOHaj2p29A5B/Gk4Rdj2hOvw
MNVzj9GHtVw7PyIP1oH63SS5s4nPnk+UcXzGeKlMXkRDJKpSABFDmwVrh9VUpOxd
h0PGTlgFo0p9N/kx0Gyq4rgDjnaInHMwFVCPa28AlfBByDBysuaHNppoTlERKdRJ
5Fdw+xPamkeCsOIA8TZANUd5Yo9JGyYaScfug4YCMLhg4m9RHLYVhak/llFVxkGo
0jCgbQ2Xs9jOOsOGbFfo3Tq12g==
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:51:52 2026 by rpki-client