Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
File:                     usyV7haoNg4u685zU3tvmszfLq0.mft (raw, json)
Hash identifier:          DEDMPTaSauiqmFcTQ1HttzrHmfdTEEMtKz5ugKrBU+Q=
Subject key identifier:   40:C5:A3:C0:1D:79:15:3F:86:67:13:4E:09:48:B9:19:3A:4C:6B:83
Authority key identifier: BA:CC:95:EE:16:A8:36:0E:2E:EB:CE:73:53:7B:6F:9A:CC:DF:2E:AD
Certificate issuer:       /CN=A914D3B0/serialNumber=BACC95EE16A8360E2EEBCE73537B6F9ACCDF2EAD
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
Manifest number:          87
Signing time:             Fri 11 Sep 2026 07:41:15 +0000
Manifest this update:     Fri 11 Sep 2026 07:41:14 +0000
Manifest next update:     Fri 18 Sep 2026 07:41:14 +0000
Files and hashes:         1: usyV7haoNg4u685zU3tvmszfLq0.crl (hash: nYU33DveYljC6XjAkpRa1Qo7WEW0TDAQ6jb68N0xMtU=)
                          2: 9D379516E54D11F092458985756F56BC.roa (hash: Hhwlbhyj8xIcBqU3mSebItjPxuaiWJe6Fv2dlfosEMw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.crl
                          rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 07:41:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D3B0, serialNumber=BACC95EE16A8360E2EEBCE73537B6F9ACCDF2EAD
        Validity
            Not Before: Sep 11 07:41:14 2026 GMT
            Not After : Sep 18 07:41:14 2026 GMT
        Subject: CN=6aa3b09b-48dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:39:27:65:ae:74:ef:3a:17:db:08:e8:0e:e3:
                    83:89:3a:57:d0:4a:61:c1:49:63:51:c8:0f:0a:d8:
                    43:82:b2:12:08:fa:cc:43:06:19:34:51:25:59:96:
                    71:14:4d:e6:a3:1c:33:76:38:8f:1e:d1:08:59:ea:
                    33:13:15:dd:55:5a:7a:67:fe:30:2b:4f:c8:c5:3c:
                    21:43:b7:72:5f:88:66:1f:49:72:28:ba:51:aa:86:
                    48:4f:18:7f:2a:4a:37:ee:94:7f:76:07:4c:e0:2e:
                    ce:b6:09:cf:ee:42:39:4e:ea:a6:de:44:59:07:65:
                    98:aa:59:7c:d9:a8:c4:87:68:04:b8:e0:e2:e1:73:
                    ab:81:7f:73:a0:91:68:de:ea:73:a9:ea:d4:86:e9:
                    54:cb:1c:85:cb:c1:a8:d0:07:d5:87:31:1f:95:17:
                    18:ec:42:4a:eb:c6:e0:e2:e4:db:91:12:a2:44:ce:
                    df:98:86:68:e6:e7:cf:29:09:37:3f:57:71:95:3d:
                    fb:60:a4:f2:d9:e7:f1:cd:a1:7b:d5:4d:0d:61:36:
                    8f:32:50:95:06:9f:8e:58:32:c5:40:94:71:e0:f1:
                    68:fd:f9:df:d6:dc:2c:1c:54:97:fb:aa:db:29:ad:
                    28:bc:61:81:f8:5d:54:db:97:4f:22:22:3b:9c:81:
                    2c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C5:A3:C0:1D:79:15:3F:86:67:13:4E:09:48:B9:19:3A:4C:6B:83
            X509v3 Authority Key Identifier:
                keyid:BA:CC:95:EE:16:A8:36:0E:2E:EB:CE:73:53:7B:6F:9A:CC:DF:2E:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:be:19:cd:cd:fe:70:cf:a7:93:77:bd:c5:00:17:7e:42:5d:
         70:36:1e:72:dd:63:a0:37:8e:e3:05:51:a1:66:e4:2e:af:80:
         cf:16:49:7e:4f:bc:6e:0b:aa:b3:57:5f:86:26:cb:ec:69:ca:
         d1:49:87:6b:e9:f0:9b:63:a0:68:6b:8a:25:45:d6:54:19:4a:
         3e:7c:84:96:33:45:99:27:50:3d:3f:d7:76:6c:5c:cd:9b:a7:
         6f:63:7a:00:5b:83:a8:8f:98:92:fa:ae:89:bd:e4:9e:28:64:
         e6:27:80:8b:a6:a4:3e:eb:f8:48:e4:65:82:07:21:a0:ab:5a:
         bb:60:40:61:b2:43:cf:a3:ab:1f:b6:5c:7e:de:2a:c9:9c:8c:
         55:42:20:26:de:04:6b:4d:55:40:1c:c5:24:41:60:6c:04:77:
         b6:b4:d2:df:ec:4c:d0:c2:9a:a0:bc:9a:17:24:2d:8e:80:d9:
         0f:2a:05:f6:7f:26:20:1a:d9:75:b4:8a:d6:09:09:86:f0:64:
         a5:9c:92:0c:c6:81:59:6c:93:61:3c:5e:92:5a:cd:02:82:84:
         ae:01:06:45:58:4d:3c:fc:ff:76:a3:27:94:e0:63:4a:64:12:
         d3:f8:9f:6b:ba:ac:d5:e6:e6:d7:73:ed:4d:f7:84:a4:3a:bd:
         52:9c:a5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 17:22:19 2026 by rpki-client