Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
File:                     2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft (raw, json)
Hash identifier:          OOriDoMaf8jZFmPeEeXgdiOd+ouwpJ9J2UzV/42M/HU=
Subject key identifier:   E3:D5:CC:66:06:FE:EB:41:AF:19:AC:BE:92:90:3B:5A:DF:72:20:C1
Authority key identifier: D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80
Certificate issuer:       /CN=A9124D7C/serialNumber=D9240BE52723E517F1E5475A1BCF94B8F08C0380
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
Manifest number:          5B
Signing time:             Sat 19 Sep 2026 08:13:47 +0000
Manifest this update:     Sat 19 Sep 2026 08:13:47 +0000
Manifest next update:     Sat 26 Sep 2026 08:13:47 +0000
Files and hashes:         1: 2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl (hash: EPgpCtP/Cf/RmWl01E1CQG7ymTq8und/vTvhy7RaO1M=)
                          2: 8C138F502CCA11F1960EC6ED91833773.roa (hash: xJmZuhv9rNcM/Fsd3fmDp03WFv+ujmJvez9T7ai4exw=)
                          3: 7F2C6F04B0BA11F1BBB308266611F970.roa (hash: QuuI6x89fM2Me13ySpS2g80axscXabQ5MLnbeeYJ3Ko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl
                          rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124D7C, serialNumber=D9240BE52723E517F1E5475A1BCF94B8F08C0380
        Validity
            Not Before: Sep 19 08:13:47 2026 GMT
            Not After : Sep 26 08:13:47 2026 GMT
        Subject: CN=6aae443b-fd7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d1:ff:65:a3:ae:de:e9:b9:41:4e:c3:ff:22:
                    82:92:b9:7b:fd:4c:90:43:df:3b:52:fa:94:b3:f6:
                    9b:da:f6:05:1d:fc:28:8d:9a:0b:42:aa:60:d3:8a:
                    bf:3d:93:85:92:27:fc:65:ad:9e:66:d7:da:94:49:
                    2e:f2:0b:98:17:53:0d:bf:13:a4:4c:ee:17:98:aa:
                    2f:21:16:dd:78:38:59:fa:a4:56:02:f6:e6:70:29:
                    5d:c8:68:22:ba:05:fc:0b:a0:68:cc:c1:70:08:22:
                    33:10:db:b7:f9:2e:f0:60:a1:79:67:81:c5:5b:0a:
                    e3:91:46:7c:8a:79:6d:f7:2c:9a:e8:ae:81:19:6d:
                    89:5d:f6:5f:2c:da:29:86:2e:e7:90:b1:be:b1:05:
                    f0:5b:f1:b6:bd:cf:30:b2:71:c8:5f:d4:dc:84:13:
                    61:df:a9:a2:77:7d:03:58:f3:05:3e:ff:a6:1c:c2:
                    bb:f8:9f:49:db:a7:0e:f6:6f:54:11:b1:62:aa:5a:
                    6d:8a:06:0e:f5:05:3b:67:5d:fc:f9:68:09:3e:40:
                    40:b7:cc:f8:61:a9:fe:29:88:20:bc:8e:97:3b:15:
                    17:cd:f5:92:95:dc:46:c4:bc:18:47:3b:d6:37:b2:
                    7c:b0:d7:18:57:5c:65:b1:e9:32:3f:44:ef:d5:5c:
                    3c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D5:CC:66:06:FE:EB:41:AF:19:AC:BE:92:90:3B:5A:DF:72:20:C1
            X509v3 Authority Key Identifier:
                keyid:D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:12:cc:56:ff:a4:a0:7c:15:a7:c3:cf:f2:fd:12:3d:6b:c0:
         08:f9:04:d6:db:40:98:01:7f:5a:de:b4:7c:56:da:0a:bf:36:
         4c:b9:a9:2d:4c:17:4e:1f:b6:6d:77:28:a1:5d:89:de:5e:28:
         3c:dd:21:64:32:31:ee:57:df:28:21:46:c7:16:05:c4:c0:e4:
         5d:d9:6a:5a:af:06:7e:1c:71:8b:87:a6:a0:92:75:9f:9b:4d:
         cd:3d:bd:3d:8e:37:97:f9:f4:d7:2c:94:d3:6c:b4:76:8c:f4:
         ec:d5:ef:ea:93:e5:1b:86:48:04:ad:d0:08:67:53:c4:21:31:
         f9:28:38:bf:3d:8e:ae:b6:24:7f:90:7c:1d:9e:44:1d:8c:f9:
         f4:4f:1b:3a:bb:dc:50:97:89:f8:9b:e1:04:33:16:fc:33:3a:
         74:ec:b2:d7:27:67:59:64:2c:57:a6:3e:52:88:3a:7b:0a:28:
         be:59:31:2b:d9:e8:a1:e0:9e:fc:68:fb:13:4f:79:19:24:eb:
         54:11:29:5f:68:2f:a5:dd:f4:ae:8c:8d:3d:b5:48:c8:61:bf:
         cf:60:2f:0b:62:7b:23:b3:af:a6:c5:80:b5:e5:7a:d6:02:e8:
         e6:67:d0:b9:96:58:42:80:c8:bb:c5:6f:23:1d:17:45:dd:77:
         64:64:44:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 21:29:15 2026 by rpki-client