Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft
File:                     S18cktxo2UEqrDB3GD-jbdA9zRU.mft (raw, json)
Hash identifier:          /C1ekhzHcay30TcrFQ7wzzGjQA7GGpma430vCIt0aeo=
Subject key identifier:   00:7E:E1:9A:1F:CF:73:95:61:34:23:CD:E7:53:F4:18:43:8B:A5:61
Authority key identifier: 4B:5F:1C:92:DC:68:D9:41:2A:AC:30:77:18:3F:A3:6D:D0:3D:CD:15
Certificate issuer:       /CN=A914D29B/serialNumber=4B5F1C92DC68D9412AAC3077183FA36DD03DCD15
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft
Manifest number:          48
Signing time:             Fri 11 Sep 2026 08:38:49 +0000
Manifest this update:     Fri 11 Sep 2026 08:38:48 +0000
Manifest next update:     Fri 18 Sep 2026 08:38:48 +0000
Files and hashes:         1: S18cktxo2UEqrDB3GD-jbdA9zRU.crl (hash: QcPBxxbnQ+PF5cSoTvf5l19Y+N5/g+1N/EHefPsQjRg=)
                          2: D10BC2D6AC0D11F1A921711A7011F970.roa (hash: 9LbT55FCc16CNUy2s7bNTZP1oBsFf0RchQv0XwtmSYA=)
                          3: 56A844E8AC1611F1AA5AD2963211F970.roa (hash: v980uvWuLQy9lKYhi9+4L/P7xT5fQQvKPW40O/eoMus=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.crl
                          rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 08:38:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D29B, serialNumber=4B5F1C92DC68D9412AAC3077183FA36DD03DCD15
        Validity
            Not Before: Sep 11 08:38:48 2026 GMT
            Not After : Sep 18 08:38:48 2026 GMT
        Subject: CN=6aa3be18-048d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:1f:4a:18:2f:cf:82:a5:6d:a5:64:5b:73:
                    17:08:36:71:b1:3e:9d:f4:28:74:bb:d1:68:b8:a6:
                    24:61:6d:e4:d0:42:c0:08:4c:82:af:b0:e9:13:37:
                    94:40:e6:83:94:62:19:4a:d2:f1:a5:8f:82:85:79:
                    25:0d:ad:b5:12:a1:4c:13:23:fe:d1:66:03:e1:1c:
                    1c:65:37:a0:1c:52:2b:61:34:b8:f0:45:61:48:f7:
                    90:e6:25:7f:2b:1d:20:b5:bb:19:84:8b:19:01:85:
                    f4:d1:82:7d:9d:85:88:f0:30:ba:6f:2b:51:9c:52:
                    5d:57:b1:e0:76:3e:85:15:c1:c5:a8:23:06:26:f7:
                    f1:ce:74:08:56:95:bf:b1:33:6d:af:18:18:f2:73:
                    db:3d:44:7a:29:e5:db:b6:4d:bc:3e:e2:b0:cc:0c:
                    52:c0:c9:a2:48:97:8a:e1:c1:46:51:05:26:30:f7:
                    33:3d:50:51:92:6a:c3:12:7b:ab:b4:5e:e6:8f:a9:
                    c1:2d:57:b8:0d:1c:02:65:72:dc:52:b0:3b:9a:b4:
                    7a:93:a7:7f:a7:f1:75:ec:46:2e:4d:15:05:49:4b:
                    01:c7:39:4e:27:ad:47:69:84:73:fd:d5:5e:5a:d9:
                    d6:eb:01:88:1b:b2:7f:93:d1:47:3e:cb:8a:bf:ad:
                    a1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7E:E1:9A:1F:CF:73:95:61:34:23:CD:E7:53:F4:18:43:8B:A5:61
            X509v3 Authority Key Identifier:
                keyid:4B:5F:1C:92:DC:68:D9:41:2A:AC:30:77:18:3F:A3:6D:D0:3D:CD:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:9d:18:7d:63:2b:16:6f:a1:fc:19:66:81:9f:1f:37:3c:42:
         dc:eb:7f:65:58:c5:b1:c7:f0:bd:ae:47:30:79:dd:eb:33:b9:
         03:c3:b5:00:e3:d3:db:95:d7:08:fd:f1:4f:b2:77:5f:83:d8:
         7c:83:19:52:1e:f7:f5:45:f4:bb:56:97:d8:3f:8d:eb:f7:a8:
         b0:ff:81:c6:a9:9d:76:e1:4f:f4:f1:92:71:25:19:b6:7b:b4:
         14:f1:4b:63:bf:72:71:d1:58:45:8c:6c:2e:79:7a:1f:36:95:
         5d:57:cc:0c:a4:88:e6:c7:d5:46:61:a6:7a:98:bb:c6:46:5c:
         05:a3:d6:6c:44:1b:54:99:82:a0:51:ac:10:92:c7:16:f0:ea:
         c8:4a:7f:f5:7b:7e:7c:9f:02:d9:b1:70:69:27:22:c9:6e:ab:
         af:9d:1b:b6:39:08:b9:a6:cd:6b:0f:2d:9d:81:d2:b4:7e:27:
         e4:05:ed:18:96:1d:fa:95:f9:d0:ae:db:a3:e1:7c:e9:98:52:
         b7:b2:2f:fe:5c:1d:a0:e0:41:9d:8c:57:9a:83:34:05:c4:b2:
         7d:93:95:8f:49:f0:c7:ab:3f:f8:0f:aa:42:0e:85:c4:e7:36:
         5c:13:2b:ca:04:b6:6a:03:9e:e7:c7:48:0f:cf:e9:fc:8f:93:
         7e:46:b6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:56:27 2026 by rpki-client