Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft
File:                     2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft (raw, json)
Hash identifier:          NdxTSsNnDIagSyDgzJZa2XmMAt36LK6ZhynaWGk/B28=
Subject key identifier:   5A:6A:09:95:3C:CC:A0:2E:DF:B9:3E:01:80:0F:62:9E:38:D5:09:4F
Authority key identifier: DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6
Certificate issuer:       /CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6
Certificate serial:       028B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft
Manifest number:          0281
Signing time:             Mon 07 Sep 2026 01:46:18 +0000
Manifest this update:     Mon 07 Sep 2026 01:46:18 +0000
Manifest next update:     Mon 14 Sep 2026 01:46:18 +0000
Files and hashes:         1: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl (hash: wwxNtDpUoV95ePHht2RnSILU3xjcqTaDccEI9kIA9Ik=)
                          2: 45F398E6EA6C11EE9C6A0650C4F9AE02.roa (hash: 2uRHbuQZyvJLJo7BIY+LG/5h7fEj3/MdPnTnEg8uVjg=)
                          3: C9E93DD2266E11F187DDE8D8AB833773.roa (hash: D8WTG4tbDTeoMZlkxpx4f43f9ls73L2XMbZYJ85TZSo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl
                          rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Sep 2026 01:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 651 (0x28b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912764F, serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6
        Validity
            Not Before: Sep  7 01:46:18 2026 GMT
            Not After : Sep 14 01:46:18 2026 GMT
        Subject: CN=6a9e176a-165d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:37:3a:7c:45:6b:ea:36:57:81:7a:0f:43:43:
                    2f:b8:4c:96:a1:d0:1f:81:01:3f:a4:58:11:79:47:
                    b4:3c:c8:9d:bc:f2:02:e2:d2:bf:69:96:3e:71:87:
                    63:7c:c0:62:bb:d3:ba:24:78:f5:48:71:69:ae:93:
                    8b:7f:fd:00:6f:8c:9d:bb:23:7d:37:be:b7:70:63:
                    d5:8b:50:68:2d:e0:6c:c7:ae:67:e2:23:4f:c7:85:
                    ff:ea:9b:63:f7:6a:33:e9:1f:31:26:39:da:1c:e0:
                    53:94:53:56:92:80:a3:5f:da:7f:3d:24:c3:3f:43:
                    09:24:40:08:6a:2e:38:4a:6b:65:61:ef:d4:eb:5c:
                    1f:a7:92:3b:56:9a:7a:5c:c8:3d:24:43:81:cd:a5:
                    07:6d:fd:06:fc:af:d0:ca:b1:90:49:15:66:5c:07:
                    9d:41:3a:72:22:2d:ae:02:f9:29:34:b5:d8:8d:49:
                    f2:24:0a:a5:12:36:11:8b:39:72:bc:7e:68:0c:53:
                    d5:e1:ea:c0:a3:f1:ea:1f:93:6a:49:cb:1b:65:ee:
                    cb:0d:9f:bb:18:60:4f:10:7a:c0:1d:c9:d0:8b:c0:
                    41:f5:5e:65:94:2a:92:6d:3d:16:eb:3a:50:66:89:
                    d6:e2:68:70:37:b6:7a:6a:f6:92:7f:9d:05:18:25:
                    9a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6A:09:95:3C:CC:A0:2E:DF:B9:3E:01:80:0F:62:9E:38:D5:09:4F
            X509v3 Authority Key Identifier:
                keyid:DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:40:81:4f:0b:be:17:1d:f8:56:79:83:fb:5a:18:69:96:88:
         c3:cf:be:3c:84:eb:e7:79:9a:6d:4e:c9:c2:01:08:04:e1:40:
         30:fc:74:1a:1a:9f:8b:98:e5:b4:d9:8a:8c:fd:46:49:17:54:
         a3:72:30:e7:4f:83:25:ff:76:36:19:07:5a:3c:2f:d5:88:47:
         af:b3:f4:26:98:fc:76:5f:96:c7:1b:ab:91:59:b3:ce:ac:02:
         56:e9:c3:36:f9:c7:d0:58:0d:03:98:7c:53:1a:9d:78:01:55:
         1f:09:e4:e4:e2:6f:7e:ce:18:0a:af:d3:dc:fd:e6:8f:64:ce:
         61:00:c4:c6:f7:b4:b3:da:8b:51:1f:7e:87:c1:a6:cb:55:b2:
         3a:9f:60:7d:f4:b7:57:be:47:49:ee:f9:64:ed:0a:88:95:47:
         74:b1:ac:43:f6:f8:95:f5:36:05:cb:96:90:46:c0:43:14:12:
         61:40:e9:3f:8f:f7:19:7e:6b:90:c6:0f:95:a1:f8:0e:8f:79:
         d9:e5:16:8d:a0:e9:22:5e:01:a0:f2:bd:07:5d:f3:5d:08:97:
         0f:5d:0f:7b:99:97:79:41:b9:26:e2:e4:01:dc:7e:52:82:c5:
         62:ae:30:50:78:54:50:d5:83:04:91:b6:32:b6:af:53:f3:5a:
         19:5c:a9:0d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc2NEYxMTAvBgNVBAUTKERBQTEzRkIxNUEwNDU2NkM0QjM1OTM2Mzg2QThCMjVD
MDE1NDhDQzYwHhcNMjYwOTA3MDE0NjE4WhcNMjYwOTE0MDE0NjE4WjAYMRYwFAYD
VQQDEw02YTllMTc2YS0xNjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyTc6fEVr6jZXgXoPQ0MvuEyWodAfgQE/pFgReUe0PMidvPIC4tK/aZY+cYdj
fMBiu9O6JHj1SHFprpOLf/0Ab4yduyN9N763cGPVi1BoLeBsx65n4iNPx4X/6ptj
92oz6R8xJjnaHOBTlFNWkoCjX9p/PSTDP0MJJEAIai44SmtlYe/U61wfp5I7Vpp6
XMg9JEOBzaUHbf0G/K/QyrGQSRVmXAedQTpyIi2uAvkpNLXYjUnyJAqlEjYRizly
vH5oDFPV4erAo/HqH5NqScsbZe7LDZ+7GGBPEHrAHcnQi8BB9V5llCqSbT0W6zpQ
ZonW4mhwN7Z6avaSf50FGCWaoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFpqCZU8
zKAu37k+AYAPYp441QlPMB8GA1UdIwQYMBaAFNqhP7FaBFZsSzWTY4aoslwBVIzG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY0Ri9DRUQwRjg3RURE
MTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZteExOWk5qaHFpeVhBRlVq
TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJxRV9zVm9FVm14TE5aTmpocWl5WEFGVWpNWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzY0Ri9DRUQwRjg3RUREMTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZt
eExOWk5qaHFpeVhBRlVqTVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbUCBTwu+Fx34VnmD+1oYaZaIw8++PITr53mabU7JwgEIBOFAMPx0Ghqfi5jl
tNmKjP1GSRdUo3Iw50+DJf92NhkHWjwv1YhHr7P0Jpj8dl+WxxurkVmzzqwCVunD
NvnH0FgNA5h8UxqdeAFVHwnk5OJvfs4YCq/T3P3mj2TOYQDExve0s9qLUR9+h8Gm
y1WyOp9gffS3V75HSe75ZO0KiJVHdLGsQ/b4lfU2BcuWkEbAQxQSYUDpP4/3GX5r
kMYPlaH4Do952eUWjaDpIl4BoPK9B13zXQiXD10Pe5mXeUG5JuLkAdx+UoLFYq4w
UHhUUNWDBJG2MravU/NaGVypDQ==
-----END CERTIFICATE-----
Generated at Wed Sep 9 02:11:12 2026 by rpki-client