Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.mft
File:                     _-gfY04l5olzmJndVfFB_kR8cAs.mft (raw, json)
Hash identifier:          EJ3+MxObm1TUIaV1HyLYPOxCyJszkToMN/CaF2TMB1M=
Subject key identifier:   41:7C:A9:B7:C9:A7:E2:00:0C:F4:08:D7:A8:6E:48:D6:9A:CF:CC:32
Authority key identifier: FF:E8:1F:63:4E:25:E6:89:73:98:99:DD:55:F1:41:FE:44:7C:70:0B
Certificate issuer:       /CN=A913AC62/serialNumber=FFE81F634E25E689739899DD55F141FE447C700B
Certificate serial:       02
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-gfY04l5olzmJndVfFB_kR8cAs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.mft
Manifest number:          02
Signing time:             Mon 31 Aug 2026 06:19:35 +0000
Manifest this update:     Mon 31 Aug 2026 06:19:34 +0000
Manifest next update:     Mon 07 Sep 2026 06:19:34 +0000
Files and hashes:         1: _-gfY04l5olzmJndVfFB_kR8cAs.crl (hash: A30fFosGjdvxZKx95Ac2PNQ1KNh+P/GD8xDOj42iS5s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.crl
                          rsync://rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-gfY04l5olzmJndVfFB_kR8cAs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 06:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AC62, serialNumber=FFE81F634E25E689739899DD55F141FE447C700B
        Validity
            Not Before: Aug 31 06:19:34 2026 GMT
            Not After : Sep  7 06:19:34 2026 GMT
        Subject: CN=6a951cf7-3212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:84:e9:eb:4d:86:a7:cd:6a:3a:b0:55:ee:08:
                    90:82:23:76:0e:14:69:d8:95:14:c2:44:80:87:54:
                    a4:79:0e:80:ad:6e:2d:3c:ac:29:3f:ce:71:e3:da:
                    bc:29:a3:e5:23:ab:f0:00:69:7b:fc:58:e6:97:51:
                    be:50:3b:a1:93:5b:7c:89:65:7f:3e:e2:45:06:1b:
                    bb:26:2d:0b:f9:b6:85:03:f7:93:b5:53:4b:42:62:
                    f8:1f:23:32:b5:71:9c:89:dd:42:ed:5b:ea:3c:95:
                    24:f5:0f:34:65:ad:5a:95:58:13:9a:47:a2:50:20:
                    33:60:42:ef:46:e4:21:fd:c4:c4:f1:a8:ff:81:b6:
                    18:1c:66:71:04:3e:c5:b1:3e:fc:4b:2b:0d:6d:ff:
                    dc:9f:78:4c:dd:92:f6:82:aa:3b:32:11:64:a9:e8:
                    08:77:4f:79:6e:2e:e4:fd:bc:eb:51:f0:27:af:f8:
                    e0:d2:1b:3f:67:2e:86:4f:5f:aa:d9:5a:9d:c8:c2:
                    c4:ac:a5:46:45:c2:6a:d0:cb:94:76:61:cf:16:7c:
                    cd:5f:58:ab:5f:25:19:6c:fc:41:f1:40:29:f8:a9:
                    9e:0f:d8:ca:fa:3b:9e:49:06:45:b5:ea:e3:b4:7d:
                    22:8c:64:68:30:12:0b:fa:59:56:77:a4:a8:14:c8:
                    9f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7C:A9:B7:C9:A7:E2:00:0C:F4:08:D7:A8:6E:48:D6:9A:CF:CC:32
            X509v3 Authority Key Identifier:
                keyid:FF:E8:1F:63:4E:25:E6:89:73:98:99:DD:55:F1:41:FE:44:7C:70:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-gfY04l5olzmJndVfFB_kR8cAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:b8:af:8c:04:36:bd:71:e1:bc:9d:24:5d:23:dd:17:24:54:
         de:5d:9c:04:c9:c8:01:71:12:c3:f9:ca:4c:84:2f:1a:f8:4c:
         13:46:33:50:8d:4b:26:9e:63:b1:39:5c:c5:22:d3:dd:06:ec:
         ba:e5:ed:4d:0d:60:93:d8:6a:46:91:f9:19:94:a7:78:77:50:
         39:dd:0c:cf:eb:21:24:14:ab:22:1c:aa:9e:e5:36:e6:c3:85:
         2b:0e:43:77:11:7d:41:c6:2b:a3:42:38:85:41:d2:51:49:f5:
         76:7f:aa:cc:37:d1:05:a8:0b:e4:5d:92:03:b2:c9:56:fd:03:
         b1:9d:74:c2:5f:d5:15:4a:c3:ec:8c:53:fd:91:91:78:ce:37:
         fa:27:d3:15:6d:a5:11:dd:ce:1f:c9:72:e8:bb:84:c5:6c:fc:
         8e:ab:d6:9d:bf:76:65:72:87:50:bf:84:75:d6:1d:3d:8f:42:
         98:cc:f4:4d:ac:52:3c:c8:92:8c:26:75:44:45:8e:f0:df:88:
         36:c2:79:63:24:ef:b0:ca:a4:64:9e:b5:0d:0a:f0:52:a8:fc:
         0c:fa:35:40:8f:a0:5d:46:e1:d6:31:ca:0a:3a:4e:f6:57:e5:
         c4:07:12:e1:72:34:14:3d:8b:92:61:6b:f1:7a:9f:8b:c2:d1:
         78:e5:75:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:29:37 2026 by rpki-client