Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft
File:                     5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft (raw, json)
Hash identifier:          PJgcw6sKdoWDqiq+IL1BV3WbGi8xVSGnvJY+R1cq1Sk=
Subject key identifier:   DD:C2:F2:A7:B2:41:FA:92:F0:5F:04:12:48:1B:5F:10:F9:27:2F:89
Authority key identifier: E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1
Certificate issuer:       /CN=A914C7F8/serialNumber=E50963D70468727356B78B7FC4380974429B64E1
Certificate serial:       0281
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft
Manifest number:          026E
Signing time:             Fri 11 Sep 2026 02:16:09 +0000
Manifest this update:     Fri 11 Sep 2026 02:16:08 +0000
Manifest next update:     Fri 18 Sep 2026 02:16:08 +0000
Files and hashes:         1: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl (hash: RNavdXUyRXopzdiWzvRLm+uQInLSHFxgWb48UzyIyps=)
                          2: 960C9032C72711F0BD856955C4F9AE02.roa (hash: qtYHDF7MGXV3CNn5trlAgoV0imEdai1To/X8YfcEDdc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl
                          rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 02:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 641 (0x281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C7F8, serialNumber=E50963D70468727356B78B7FC4380974429B64E1
        Validity
            Not Before: Sep 11 02:16:08 2026 GMT
            Not After : Sep 18 02:16:08 2026 GMT
        Subject: CN=6aa36469-0bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b4:b9:0b:67:4d:d2:12:97:44:3b:fe:83:59:
                    33:d6:59:9a:41:78:c3:53:3b:07:38:7d:4c:c9:a9:
                    4b:da:96:14:ef:31:3a:7e:1a:6b:ce:88:8a:c6:4d:
                    85:ab:18:73:3f:7b:7f:09:2e:9f:a2:a8:d7:a4:f2:
                    1a:8b:45:f1:bd:08:7c:d4:a2:59:bd:21:9e:eb:30:
                    c1:4c:b9:e5:5b:55:7d:9a:03:e3:53:6a:d9:b9:d0:
                    d0:de:1c:a5:22:a3:a8:d8:4d:5d:da:e0:59:96:9d:
                    7e:83:b7:23:9f:99:9d:21:a5:b2:e7:87:f4:de:c0:
                    53:1f:2d:d4:29:c0:5a:e0:99:c7:9e:07:4c:d3:3f:
                    f5:66:1d:f0:63:8b:da:1d:a1:6b:af:60:b7:a2:b7:
                    3a:43:3f:90:ef:43:29:2e:c4:83:54:cc:31:94:5a:
                    26:f8:99:4b:59:0d:29:b5:fe:57:bb:f1:ba:9e:2b:
                    bd:71:4b:f1:ce:4c:8a:bd:93:33:99:17:32:c5:68:
                    b5:9f:48:1c:3b:36:24:40:ce:ca:ea:0c:fd:77:6c:
                    9e:ce:1e:0e:c6:f2:5e:5d:b7:0c:2e:7c:65:ce:61:
                    65:7f:9e:62:06:7c:95:ff:91:f4:16:b8:2b:92:10:
                    e3:bf:e9:7e:f7:3a:fb:4d:19:2b:7b:c5:4f:8f:f9:
                    cd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C2:F2:A7:B2:41:FA:92:F0:5F:04:12:48:1B:5F:10:F9:27:2F:89
            X509v3 Authority Key Identifier:
                keyid:E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f6:da:0e:dd:3d:7b:6c:86:f5:d5:9a:e0:09:70:fd:a4:b6:
         14:57:82:f7:56:af:76:20:2c:93:7f:34:0b:34:ec:90:77:fe:
         09:8b:23:20:eb:f7:cd:07:e5:e3:9e:26:ea:8f:83:d0:36:dd:
         b5:f2:09:eb:f8:86:d1:68:86:ce:01:0b:a8:1f:97:63:7a:5f:
         d1:d9:9a:64:69:00:5d:6a:33:61:13:2d:66:4c:3c:8d:40:d4:
         73:64:b6:ef:14:e9:d5:62:e8:7d:67:85:bb:47:44:1f:f3:c8:
         0d:cd:aa:78:f6:bb:a7:a2:16:50:f9:07:1f:9d:fc:13:fb:fe:
         16:1a:3a:5b:98:3b:34:f7:1c:11:70:ad:0b:fc:d7:08:45:88:
         e9:60:81:bf:d9:aa:5a:8d:62:28:6c:31:25:ab:97:c0:27:b7:
         16:5c:7d:c5:4d:67:18:78:c2:c8:4b:84:f8:a5:e5:d9:c5:b9:
         eb:2a:e0:2a:3d:71:8f:0f:88:ca:fa:0c:d7:c7:18:07:36:37:
         23:61:50:a0:41:7f:6c:93:0f:c0:3e:b0:26:00:3c:44:da:8a:
         3c:4a:56:1c:0b:4e:76:80:39:15:b3:2c:c3:ca:bd:ea:f5:bd:
         54:b9:29:b0:d0:5d:82:5c:25:89:a2:e9:d2:df:a2:14:7c:62:
         13:60:3d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:20:58 2026 by rpki-client