Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
File:                     AryISFcqsaDRBj5XuCIPK1LWvec.mft (raw, json)
Hash identifier:          VXBVu0mpE7sdJ+a5ZmGC2jDs6CwEjzGL4PN0tdEQf9g=
Subject key identifier:   14:D5:1F:5F:02:F3:40:8D:53:8A:26:45:C3:42:EF:06:53:0E:34:99
Authority key identifier: 02:BC:88:48:57:2A:B1:A0:D1:06:3E:57:B8:22:0F:2B:52:D6:BD:E7
Certificate issuer:       /CN=A9153B58/serialNumber=02BC8848572AB1A0D1063E57B8220F2B52D6BDE7
Certificate serial:       9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
Manifest number:          9C
Signing time:             Mon 05 Oct 2026 07:48:54 +0000
Manifest this update:     Mon 05 Oct 2026 07:48:53 +0000
Manifest next update:     Mon 12 Oct 2026 07:48:53 +0000
Files and hashes:         1: AryISFcqsaDRBj5XuCIPK1LWvec.crl (hash: uwc1zZlhqzDN5W7/D2lT5+Yp33Z+FyCoAofx1x9T5YA=)
                          2: 36256C16D96011F0BB00DFAC96D3641D.roa (hash: Zt3RoYdx+ktUym4g6P4kPcAqBTvxRnzxSch53ynh8OM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.crl
                          rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 07:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153B58, serialNumber=02BC8848572AB1A0D1063E57B8220F2B52D6BDE7
        Validity
            Not Before: Oct  5 07:48:53 2026 GMT
            Not After : Oct 12 07:48:53 2026 GMT
        Subject: CN=6ac35665-b14c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:85:aa:95:32:9a:a9:2a:50:02:94:12:5e:ba:
                    15:28:63:04:6d:a8:b3:22:51:25:3f:40:b4:47:0c:
                    e8:bb:82:e4:fa:b9:03:e7:20:2e:f1:73:66:8f:b4:
                    e5:f5:23:16:a5:22:93:e1:e7:9c:6c:8d:8e:86:fe:
                    dd:f4:2a:82:9e:fa:8b:a8:62:f1:37:b7:24:df:2e:
                    af:74:35:73:65:c2:41:77:6f:06:7e:69:b3:12:6a:
                    9d:c2:f3:75:d6:d5:47:7d:0a:59:98:31:65:9d:50:
                    70:8c:44:72:cf:55:2f:02:53:ed:e2:c6:29:c0:7b:
                    bd:75:2c:27:59:5d:1e:9d:61:e6:1c:a0:8b:c3:94:
                    fd:8f:e2:c3:4a:2f:92:2c:3f:6e:ba:5e:53:ad:ba:
                    97:db:c7:63:66:df:d9:05:45:c6:09:ca:93:82:61:
                    23:ff:5e:71:86:96:9e:51:c6:20:f5:10:cd:67:68:
                    07:39:29:cd:c8:c3:3a:b7:48:c2:c7:2f:49:cf:aa:
                    3d:b5:40:b1:1e:0d:8a:5f:73:1e:61:2e:d3:a0:bd:
                    b4:9d:a2:02:09:0b:eb:7f:b6:3f:24:88:79:9d:a3:
                    e7:45:f0:fd:91:e3:b7:00:59:69:cc:7a:f7:ee:b6:
                    32:f5:63:1f:a0:92:ae:c4:08:97:91:40:16:81:ad:
                    41:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D5:1F:5F:02:F3:40:8D:53:8A:26:45:C3:42:EF:06:53:0E:34:99
            X509v3 Authority Key Identifier:
                keyid:02:BC:88:48:57:2A:B1:A0:D1:06:3E:57:B8:22:0F:2B:52:D6:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:a0:70:eb:d3:1e:ef:08:ae:1d:f5:40:46:f5:ba:dc:53:a3:
         57:45:79:ef:47:ec:35:35:59:90:48:f1:e8:00:03:65:3e:10:
         8c:de:89:50:c6:18:cd:f3:7f:d0:6a:5b:e7:ec:ee:2b:f1:84:
         d7:6a:c7:c4:04:fb:b6:25:8a:ba:8d:95:e4:ea:ea:3c:ec:ad:
         db:b9:3b:7b:9d:8f:48:d8:97:af:37:01:f8:0c:35:b6:76:18:
         b6:5e:e2:e3:76:56:47:91:19:ac:07:e0:39:b6:61:fa:56:23:
         04:26:5b:4c:13:93:23:62:cf:2f:e6:47:3c:ed:71:de:93:fe:
         ee:54:d4:39:18:29:4c:ac:40:b4:89:57:5e:e1:a3:29:ed:d3:
         0c:ea:e9:83:76:76:90:c6:af:09:28:58:ab:c1:65:c4:a5:b2:
         ee:0a:eb:12:52:79:bb:48:1e:11:71:9c:02:fa:f5:87:31:36:
         63:3f:ad:2c:e7:da:3b:23:d0:23:d6:21:4b:ce:79:f0:89:c4:
         7e:43:1b:b1:d3:ae:fa:b3:40:49:b4:37:ec:cc:c8:51:33:ed:
         27:41:00:7a:32:e2:79:25:04:8e:ae:54:f1:16:34:5a:4c:a2:
         bc:3a:59:ac:b2:4c:82:7b:d6:4e:60:95:ad:db:1e:96:09:c8:
         06:98:d8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:53:46 2026 by rpki-client