Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
File:                     R1JQ5qBVR49Kwerx7TLVZyw80bM.mft (raw, json)
Hash identifier:          FVTvmU8vGNofGzA7NiVzIkEE2C8MZPnC/pBLGQqv78I=
Subject key identifier:   E6:A2:E1:DB:78:3A:1B:8F:13:99:7C:6E:9D:45:27:B5:C5:7B:F7:C1
Authority key identifier: 47:52:50:E6:A0:55:47:8F:4A:C1:EA:F1:ED:32:D5:67:2C:3C:D1:B3
Certificate issuer:       /CN=A9140EE2/serialNumber=475250E6A055478F4AC1EAF1ED32D5672C3CD1B3
Certificate serial:       0E0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
Manifest number:          0DF9
Signing time:             Tue 18 Aug 2026 18:05:23 +0000
Manifest this update:     Tue 18 Aug 2026 18:05:23 +0000
Manifest next update:     Tue 25 Aug 2026 18:05:23 +0000
Files and hashes:         1: R1JQ5qBVR49Kwerx7TLVZyw80bM.crl (hash: 3Mpldhc9Xa/WLnoAXoM4T6qai+pLNLeTDieDAeu0/oM=)
                          2: B523DAE68C9211EABC682867C4F9AE02.roa (hash: DzBm/4YOy2Ud9WznE6B9DI03ozT3npO/B3S5GNicR1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.crl
                          rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3597 (0xe0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140EE2, serialNumber=475250E6A055478F4AC1EAF1ED32D5672C3CD1B3
        Validity
            Not Before: Aug 18 18:05:23 2026 GMT
            Not After : Aug 25 18:05:23 2026 GMT
        Subject: CN=6a849ee3-4236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3d:06:e7:36:f3:c3:9e:5d:34:89:e7:61:9a:
                    fe:9e:9d:2b:6f:18:81:c5:a4:02:41:ed:e1:d9:e2:
                    8c:c6:cb:14:f7:82:56:86:d9:2b:60:20:de:3c:e2:
                    cc:af:cb:30:d0:71:85:6d:de:4f:e6:79:ba:25:00:
                    79:a7:cc:56:88:13:1c:10:db:c3:e2:8f:8f:43:15:
                    88:92:f2:e2:db:65:5c:ef:08:eb:d5:09:be:54:21:
                    a6:ff:89:69:9c:7d:bc:a7:d4:7b:7e:f0:2c:ae:1b:
                    6c:43:ef:91:25:05:ac:ee:7c:ba:f1:07:9c:2e:5b:
                    a1:22:7a:2d:15:80:00:1e:23:83:9b:9b:ad:b5:ca:
                    71:40:9f:8a:a4:df:3f:dc:57:75:2b:cf:d5:a4:f2:
                    c0:a5:60:97:02:d0:15:ff:0c:93:97:4e:4a:ae:1e:
                    2d:87:15:07:64:ae:02:bb:2a:f2:c8:36:4b:de:28:
                    7c:4e:6c:f8:ed:df:26:15:b3:b5:38:61:db:da:9f:
                    f3:db:11:77:cd:5e:f3:a2:43:c7:30:6b:bc:4f:a2:
                    bd:f4:fa:92:12:c0:b8:6f:b0:cf:cf:b8:3b:30:d0:
                    93:16:f3:b6:82:3d:8b:be:b6:3d:e1:97:68:8d:cf:
                    ef:3b:27:18:09:2a:31:84:1e:8d:3b:48:2b:ca:be:
                    14:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A2:E1:DB:78:3A:1B:8F:13:99:7C:6E:9D:45:27:B5:C5:7B:F7:C1
            X509v3 Authority Key Identifier:
                keyid:47:52:50:E6:A0:55:47:8F:4A:C1:EA:F1:ED:32:D5:67:2C:3C:D1:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c8:9d:65:7e:c6:b0:0d:11:86:f8:33:08:3e:01:30:bb:c0:
         41:c5:e6:3c:40:6a:0f:a3:f3:67:a2:8f:aa:8b:66:78:ae:85:
         5c:d3:f7:b6:4a:69:0d:9a:5a:50:88:9c:84:39:c6:bf:7b:80:
         14:62:c8:47:87:91:13:1f:19:a3:9f:c8:57:71:a9:14:71:1e:
         d8:3f:b6:95:3f:1a:ea:6b:10:04:d3:33:c8:38:3d:b2:8d:fc:
         9a:98:12:80:b6:03:c3:5b:bc:e4:73:72:05:ae:d2:72:7b:67:
         70:90:75:18:c2:65:bb:aa:9a:8d:73:7e:91:1b:fd:ee:54:22:
         ea:22:27:a6:f3:d2:f2:df:c8:2b:82:f1:2a:6c:44:06:25:5e:
         32:45:7c:e2:54:57:94:d9:19:43:f8:ba:8a:47:92:6f:5c:83:
         7f:f0:7f:7f:2f:42:1c:f2:a8:c9:d4:59:ff:ef:f7:81:aa:e2:
         e1:db:31:97:71:14:02:81:ff:b2:ec:54:03:99:bc:da:88:66:
         40:a1:ac:19:34:b1:0f:56:e9:91:51:81:00:85:d0:78:8c:0f:
         3d:24:ad:df:e2:0f:d1:1d:62:da:57:29:67:9d:f2:f7:2a:d2:
         4b:d8:2b:a1:6f:e1:1f:6f:6e:94:76:02:d4:0a:4a:b8:51:1f:
         62:17:7e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:19 2026 by rpki-client