Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
File:                     u5dqWY5eywXjf6wApbeIjlf1HFI.mft (raw, json)
Hash identifier:          ZJoCeVrfbjl7DssDu5Je+ZJPdGefJH3cWgS8Lu8AMdo=
Subject key identifier:   7D:C1:80:85:3C:19:90:1F:CB:8F:01:CD:73:9A:41:2C:DE:CE:94:0D
Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52
Certificate issuer:       /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
Certificate serial:       19F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
Manifest number:          19B8
Signing time:             Fri 04 Sep 2026 16:23:03 +0000
Manifest this update:     Fri 04 Sep 2026 16:23:02 +0000
Manifest next update:     Fri 11 Sep 2026 16:23:02 +0000
Files and hashes:         1: u5dqWY5eywXjf6wApbeIjlf1HFI.crl (hash: 9dZjXyHQg765zTZn3ye3ZP9HwpBYfaQr2DGHx9PJvIU=)
                          2: 1295ACC8511811F0BC16C641C4F9AE02.roa (hash: sxrPqnbF6T43GAzl7GDJj3PzJSHlDC7K4T4ROo3CtKo=)
                          3: 3BC16A0C5B4811F182614DE994833773.roa (hash: j1ZHgprZt5D6ye8dPtuzBjBeTD9Ha7NH8jbgaxgrm7s=)
                          4: 4D12993446CC11F08EB9471AC4F9AE02.roa (hash: kZ0uphZPyCd+wbYNkHA1SsHf26EQjAMAFcs0tjZEC/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl
                          rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 16:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6646 (0x19f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91590E3, serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
        Validity
            Not Before: Sep  4 16:23:02 2026 GMT
            Not After : Sep 11 16:23:02 2026 GMT
        Subject: CN=6a9af067-ad06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ca:bf:5f:56:87:a0:b4:27:4c:27:d1:8d:6c:
                    9a:79:63:df:8d:c0:0d:15:2e:b5:36:9d:06:12:ac:
                    28:de:56:b5:51:bd:f6:61:34:b8:88:de:73:f5:e0:
                    b7:98:34:1f:d4:3e:16:df:95:7b:bd:71:cd:d0:4f:
                    d0:9c:ce:ca:73:7c:5e:52:92:bb:d5:9e:78:4b:e9:
                    fc:a0:11:3a:7d:d3:7d:6a:7c:df:21:1f:37:1a:0a:
                    96:eb:cf:b6:4a:d2:7f:d1:73:89:e1:20:12:ee:bf:
                    b0:da:cd:74:86:ab:2a:c2:61:f0:b2:78:8b:61:e9:
                    cc:df:36:b6:08:8f:ca:51:8a:33:99:ba:f7:05:62:
                    f1:7b:50:aa:4c:a0:d2:78:54:e3:48:fd:aa:6d:7e:
                    22:8b:73:0f:c4:77:56:ac:ad:8a:e4:22:10:7b:9a:
                    d6:f8:79:e1:2b:8d:76:35:14:00:08:5c:b9:61:dc:
                    fc:e5:5b:4d:ba:42:e6:5b:c7:96:15:8e:b4:da:9e:
                    ff:2b:91:8f:19:8f:1d:28:6d:f2:07:80:ff:ba:11:
                    81:80:01:34:82:60:f9:84:85:40:b2:a5:71:9f:28:
                    7f:c6:2b:96:e0:b9:1f:1d:bb:08:63:40:78:27:25:
                    41:86:5b:c3:4b:73:71:b9:b7:dd:04:fc:70:b4:75:
                    58:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C1:80:85:3C:19:90:1F:CB:8F:01:CD:73:9A:41:2C:DE:CE:94:0D
            X509v3 Authority Key Identifier:
                keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ef:f6:b5:d0:d9:d3:71:dc:b6:cd:f0:c9:e6:d2:22:b7:dd:
         dd:bf:14:75:64:7b:9f:f1:84:b8:6e:d9:61:ce:12:c9:f7:fb:
         7b:3d:bd:34:eb:34:b6:30:0d:4a:63:d4:a3:89:62:14:e0:0a:
         3f:4e:e6:c2:65:16:18:25:64:12:79:93:b5:22:74:d2:8a:d0:
         59:0b:7c:0b:4b:7f:71:a4:f0:83:3a:27:ed:af:21:18:26:d4:
         eb:bf:47:76:d0:a8:73:c7:31:a6:85:5f:83:b1:6d:69:1f:6f:
         11:90:37:16:29:56:94:aa:48:28:03:48:86:50:87:b3:a8:52:
         01:33:b5:29:f8:9a:15:d2:1b:7f:01:99:66:74:a1:f1:3e:06:
         11:55:1d:d9:2c:1a:87:5f:b1:67:e3:5f:24:e6:88:17:46:ec:
         aa:af:95:1c:ef:87:30:0e:62:ae:de:92:58:4d:50:f1:e1:ab:
         b2:f3:cc:7c:31:42:19:b4:1e:ab:82:f1:f1:31:4e:ed:76:ab:
         37:48:72:e4:e8:38:27:8b:ec:01:a4:4d:dc:04:8c:02:93:42:
         d4:84:10:9f:c4:94:7f:12:1d:be:f0:3a:ba:3d:1d:39:e2:82:
         5c:39:65:80:cc:de:ac:fc:ea:95:fd:ca:68:47:1c:e2:c1:cd:
         75:c4:82:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:13:30 2026 by rpki-client