Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
File:                     23zlI-hAt3_J4Zb1jxSXas5BVL4.mft (raw, json)
Hash identifier:          CQF7j+t+mOW6uhNYKDPIJpxICG414pcO+Q9WEz6hg6s=
Subject key identifier:   0C:D7:E8:4E:39:CB:36:7C:0C:26:0D:8D:C0:B2:9E:0F:D4:92:6A:C8
Authority key identifier: DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE
Certificate issuer:       /CN=A912542C/serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
Certificate serial:       077F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
Manifest number:          075C
Signing time:             Fri 02 Oct 2026 22:09:45 +0000
Manifest this update:     Fri 02 Oct 2026 22:09:44 +0000
Manifest next update:     Fri 09 Oct 2026 22:09:44 +0000
Files and hashes:         1: 23zlI-hAt3_J4Zb1jxSXas5BVL4.crl (hash: nF3Z69vo9/SlUdSaD53PyYEqnccUQQrD+1FEZ89DOR8=)
                          2: 36A82D708CAA11EB9ED48C70C4F9AE02.roa (hash: Yp5vZ4wNCCpx+gdrt1JNNzRzB8+x9ZIjyyfZWtoHuOw=)
                          3: 1E9D1268B3E011ED98356A75C4F9AE02.roa (hash: 5lB4KJ1dE9BAQX/uKgJe1+lnx+W9PJrFHNnppiXGz5M=)
                          4: F0FFCBCCF9C911EDAF704E7FC4F9AE02.roa (hash: y3IxwzZcVIyvXDTK0dR4pibIdUtU+ExL4IB+J5qtwjE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl
                          rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 22:09:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1919 (0x77f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912542C, serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
        Validity
            Not Before: Oct  2 22:09:44 2026 GMT
            Not After : Oct  9 22:09:44 2026 GMT
        Subject: CN=6ac02ba9-4fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:36:ce:a0:37:89:ea:4e:73:c4:a2:02:93:31:
                    57:ea:96:9a:ca:46:fb:9c:78:f6:0c:87:4c:d3:20:
                    f6:c0:d1:3c:c3:f1:e8:a0:b6:9f:ad:70:76:de:71:
                    c2:89:8b:90:3d:35:ef:6b:5a:aa:44:87:cb:46:1c:
                    cf:38:2a:94:2e:56:c3:fd:f6:6a:04:b9:d1:3a:16:
                    67:33:56:e0:c3:ec:5e:28:55:1a:a5:0a:33:7e:43:
                    29:a6:1a:38:38:7b:64:7e:cb:e7:42:13:0a:fe:a2:
                    10:07:08:75:48:6b:ec:09:71:b1:2d:d9:de:39:fa:
                    a2:9c:30:dd:e8:fe:38:ab:68:89:b1:28:49:e5:3f:
                    bd:5e:f2:91:38:89:e9:ce:e8:f8:28:c7:58:33:0b:
                    26:1f:d1:dd:66:6f:a9:ab:91:f6:b7:76:20:4f:07:
                    79:5d:b2:9e:1a:d3:8e:85:09:ca:6e:81:bc:6e:b8:
                    04:65:d2:88:7f:23:86:6e:f4:3d:97:66:c3:f6:11:
                    d1:d1:cf:e0:fd:c7:fd:e6:7f:2e:77:81:fc:a7:c8:
                    d4:9d:f4:76:4f:5a:f2:b9:7e:7c:37:db:bd:d3:c5:
                    50:ee:ff:9a:d3:d9:1e:d0:c0:48:1f:d1:0d:33:ee:
                    f2:a6:c0:4e:21:d7:10:da:81:16:3b:e9:96:71:f7:
                    34:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D7:E8:4E:39:CB:36:7C:0C:26:0D:8D:C0:B2:9E:0F:D4:92:6A:C8
            X509v3 Authority Key Identifier:
                keyid:DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:bb:d2:6d:a9:7d:be:f2:8a:26:d3:aa:54:5a:4f:07:f1:df:
         01:33:9f:2e:c2:8d:51:d7:22:2f:33:13:29:9d:c8:78:74:18:
         55:b2:7b:47:1f:2e:60:c5:19:d4:e7:18:09:fa:1a:7b:5c:dd:
         58:e7:ef:b0:3a:42:bd:22:79:03:02:e0:fc:4f:aa:b5:84:ea:
         ed:a1:18:80:58:b3:5c:1c:0b:71:fc:e9:16:f0:8a:17:87:2a:
         c6:b9:f0:8f:cc:a5:6c:65:9d:e9:2d:e6:92:52:b0:ee:32:04:
         66:f2:5b:bb:58:77:dd:68:3f:a3:ed:f0:f9:9d:d8:4a:81:3c:
         71:c6:84:cb:25:bf:c8:1a:44:73:ef:9d:7b:d5:9b:09:02:50:
         79:63:72:7d:ff:85:4a:91:de:eb:1e:0e:95:7c:ed:26:e6:2e:
         73:a6:fa:3b:4c:3e:0c:81:c4:bc:18:0a:a6:f5:20:dd:af:d4:
         08:c9:13:e1:15:e2:79:d6:58:23:f6:0d:ad:24:c3:3a:37:b4:
         f8:42:ac:29:5f:a4:3a:d4:f5:f2:a5:22:87:9e:cc:78:a4:48:
         3f:67:ba:c9:65:20:ed:43:20:d7:34:8b:e1:f0:19:9e:82:df:
         7b:37:84:88:f9:9e:54:29:02:87:5a:53:20:13:ac:ad:3c:6c:
         08:29:64:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:17:49 2026 by rpki-client