Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
File:                     CcSauZoFYD1stgicc9N2kJhCHgA.mft (raw, json)
Hash identifier:          Mek6DXXhBNRg2OT8MR2SHjdOEpNxELEF99WEkwBn/ZY=
Subject key identifier:   FA:28:11:75:C7:4F:47:2A:4E:0E:DA:D2:47:2A:BE:08:D3:5F:29:B2
Authority key identifier: 09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
Certificate issuer:       /CN=A912D109/serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Certificate serial:       021B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
Manifest number:          0209
Signing time:             Sat 05 Sep 2026 02:56:24 +0000
Manifest this update:     Sat 05 Sep 2026 02:56:24 +0000
Manifest next update:     Sat 12 Sep 2026 02:56:24 +0000
Files and hashes:         1: CcSauZoFYD1stgicc9N2kJhCHgA.crl (hash: QIPHaaaFzsLjrxr946ha3ILZSQPFB6lyCzegHXlNxCY=)
                          2: 8415F4AA928511EE8AE43D75C4F9AE02.roa (hash: YMH/2sGF2Gp98kUhlKPwS2v2VuTCl17HNRsaxRsG690=)
                          3: 7BFABFDE928611EE9B72027FC4F9AE02.roa (hash: e5s4Spxd3J8HwN8uF5Z006jLhe1iCuKDPedtYRd/C2Q=)
                          4: 7C76E4F6928611EE9B72027FC4F9AE02.roa (hash: YMhcpDTPJA2DPU9fu/BIg3xJ4TvxjpEOcB1pf1tlj+k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
                          rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 02:56:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 539 (0x21b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D109, serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
        Validity
            Not Before: Sep  5 02:56:24 2026 GMT
            Not After : Sep 12 02:56:24 2026 GMT
        Subject: CN=6a9b84d8-0d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:34:8e:90:14:32:74:d8:87:10:05:d9:1d:d5:
                    65:36:be:bc:65:1c:40:ce:88:6f:80:1e:03:33:34:
                    62:2d:fd:da:39:5a:c2:1e:2f:58:72:7e:31:c8:5e:
                    02:6f:02:48:06:4a:92:4f:06:7a:b5:b4:2c:3b:f8:
                    f9:44:cb:23:58:b0:e7:19:a0:f8:9b:6e:4d:4c:d7:
                    a2:2e:64:5d:8d:72:5c:12:b0:e2:e1:b7:8c:0f:26:
                    54:09:53:74:7a:62:82:ec:62:36:e3:3c:16:fe:b8:
                    11:f3:77:21:8c:c0:66:6c:25:5c:e0:db:c3:6d:82:
                    fd:64:13:dc:5e:b9:cc:97:ea:30:21:19:0a:56:36:
                    c5:ab:50:e9:ac:97:ce:66:e9:fe:80:c2:85:e9:20:
                    47:f5:88:c3:17:49:b2:e8:2c:a7:1f:4a:f0:b5:dd:
                    55:ea:8e:37:67:48:ae:82:cb:68:09:77:10:21:e6:
                    ce:d3:a6:3f:ff:18:0e:c2:26:86:1f:60:ba:d0:b9:
                    f0:98:45:49:18:97:0c:38:b0:89:71:42:29:39:06:
                    ee:97:f2:b6:0d:99:d1:f8:da:17:a5:48:4c:d2:74:
                    eb:6a:08:45:df:64:2a:da:93:4d:e9:c8:93:3f:b6:
                    30:71:e2:99:e0:d6:b5:a4:de:39:03:d8:6c:35:21:
                    04:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:28:11:75:C7:4F:47:2A:4E:0E:DA:D2:47:2A:BE:08:D3:5F:29:B2
            X509v3 Authority Key Identifier:
                keyid:09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ec:ce:01:35:f6:2f:fb:02:ee:a4:9c:d1:e5:b5:05:c8:5c:
         a3:28:cf:0b:0a:60:fc:cf:93:a8:59:3f:54:f3:59:17:da:c3:
         93:f2:2c:e9:23:ff:77:7f:b8:68:6e:65:a5:dd:f0:ad:00:29:
         ba:22:be:33:db:63:2a:55:b0:22:20:82:39:a6:4b:bc:e1:21:
         1c:4e:68:4b:47:9a:c2:c4:42:c8:3d:ed:dd:37:42:13:a4:c9:
         96:5b:96:61:11:8b:17:6d:40:a7:c6:69:15:16:f1:03:60:90:
         64:4d:c9:71:9b:0c:fe:cf:82:c0:88:06:5a:cb:81:59:b0:7d:
         a6:59:39:8a:90:d4:20:83:d3:23:e3:7e:cb:12:c8:0b:67:f7:
         c7:d8:a0:73:2f:ee:01:ac:6c:23:4a:04:63:5e:fe:c0:94:4a:
         9b:02:81:3b:06:98:da:93:3b:45:7f:08:c2:8d:3f:ad:ce:4a:
         e1:66:66:05:fc:ad:bb:a2:38:6b:65:a3:8e:c3:81:b9:75:2b:
         ce:7b:89:c5:1e:db:d6:09:51:14:3e:10:d8:56:a4:69:21:b8:
         1b:8d:5c:76:bd:fb:23:07:1a:b2:0e:46:7f:2e:23:00:a2:6d:
         75:2e:79:46:18:84:4d:d5:a7:c0:e4:b8:45:74:da:ef:b5:c4:
         0b:c1:99:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:13:18 2026 by rpki-client