Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft
File:                     r-cn5CCdzfgnYldLXjPICDeHoY8.mft (raw, json)
Hash identifier:          dRnnPgAHcY9iP4RWeH59m6dIgJQ77n2xgaORshwZJeI=
Subject key identifier:   7A:A6:4A:CC:EA:FA:25:D1:3F:C9:47:A2:21:2C:54:1A:95:AC:91:1A
Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F
Certificate issuer:       /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F
Certificate serial:       1FAD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft
Manifest number:          1F3C
Signing time:             Fri 04 Sep 2026 15:59:37 +0000
Manifest this update:     Fri 04 Sep 2026 15:59:36 +0000
Manifest next update:     Fri 11 Sep 2026 15:59:36 +0000
Files and hashes:         1: r-cn5CCdzfgnYldLXjPICDeHoY8.crl (hash: ohL4REm0z4WLJUDaEEa9WsmWzu1O4leYIOH+wDmdjKY=)
                          2: 7EFB8A6E885311E6BDE50A80C4F9AE02.roa (hash: yrw/Wliea2v/nhT95C1H6CHn+Y9xHNL1DsyB2AthFt4=)
                          3: 5C6A7BE6E1F511EEA08A5519C4F9AE02.roa (hash: orzccmiNSicAop/OpjFFJ2tGr1eSdfKFi4jU7YLYc30=)
                          4: 882AC358E1F511EE9188A919C4F9AE02.roa (hash: 8+HVn+1aDWLHtIQalu+KT6alxAIGWOxLQB3VgePG+TU=)
                          5: CF946690E5E711EE89AF4E5AC4F9AE02.roa (hash: R0F5zzc+BpzP1/ZU/NVRkNdsAgNiR161974QmuBaZJM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl
                          rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8109 (0x1fad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AE5F, serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F
        Validity
            Not Before: Sep  4 15:59:36 2026 GMT
            Not After : Sep 11 15:59:36 2026 GMT
        Subject: CN=6a9aeae9-22df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b8:51:7f:b9:ac:07:d8:4a:29:83:72:ac:ca:
                    b8:d1:f1:a2:81:c5:49:0f:66:da:54:49:76:f7:75:
                    86:b6:59:e1:8b:75:58:94:91:2b:fe:00:a7:9b:c0:
                    98:f1:53:9f:87:22:46:de:d9:32:82:d2:36:70:16:
                    58:50:56:ba:15:ef:80:79:ec:2a:09:57:38:df:23:
                    2b:4c:ce:b9:90:8d:ae:ad:56:f0:e4:ff:a5:a7:fa:
                    9d:eb:31:05:69:91:6c:85:2b:ea:31:0a:cd:1d:7a:
                    57:d8:89:6f:81:16:c8:57:af:8f:bd:a4:82:65:a9:
                    e1:a7:0c:05:06:8c:8f:6e:c6:38:cf:95:b9:dd:10:
                    af:4a:d3:fb:9c:79:d2:57:9f:44:67:df:5e:35:0d:
                    76:9e:ce:1e:d7:ae:22:da:54:41:27:63:ea:b8:a9:
                    15:a0:21:75:6d:b2:65:52:24:62:d4:5e:ac:9d:cd:
                    1f:89:ed:87:73:d8:71:36:56:be:ec:f8:0e:14:0e:
                    ad:9c:60:32:ac:35:3c:69:cb:2c:b5:0e:16:0a:1e:
                    11:0a:65:75:63:db:cc:bc:48:1a:ea:33:65:65:19:
                    a3:70:ba:a8:b2:88:01:a6:5d:3d:cd:92:19:55:82:
                    be:52:50:23:3b:e5:51:f1:30:dd:91:53:13:b3:4e:
                    56:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A6:4A:CC:EA:FA:25:D1:3F:C9:47:A2:21:2C:54:1A:95:AC:91:1A
            X509v3 Authority Key Identifier:
                keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ad:ee:00:2d:c7:46:42:ef:4a:09:23:d5:e3:68:f6:f4:a0:
         05:c1:fc:5a:5a:17:b4:af:3b:7a:d3:0e:40:bb:2f:35:09:16:
         b6:1b:f0:d0:3a:eb:b8:94:9e:f3:81:d9:37:5c:f6:a2:a5:45:
         2a:69:ed:2e:72:4e:a5:bb:80:6e:e7:a3:e1:6f:5f:a6:e0:c4:
         0c:7b:fe:d1:81:c3:d6:d4:17:81:e1:62:71:75:c9:53:8b:d7:
         c5:e9:02:9b:84:03:6b:12:f6:79:11:c9:b3:02:68:76:97:cb:
         22:50:79:70:36:ba:64:35:5c:e3:1d:3d:58:7f:9b:f8:ae:c5:
         84:57:ee:f8:6e:6c:75:b3:6a:da:eb:db:88:f4:9c:37:e1:4f:
         ec:de:15:29:70:da:b3:c5:40:a4:74:66:ab:2d:27:f7:73:06:
         74:c1:c5:61:ec:b1:0c:b6:0e:de:fa:37:01:44:00:a2:54:4d:
         51:c5:57:12:65:af:bc:57:a1:7b:d5:9c:d9:d4:2f:d1:90:18:
         c9:03:24:f0:a5:ca:72:26:f3:ba:2b:94:45:0a:3b:e4:b2:2b:
         9a:7a:be:7b:9b:47:4b:6c:bd:6c:f3:e8:7e:ef:86:ce:ea:48:
         02:24:79:b6:7f:13:14:04:68:0c:2a:0c:72:e3:ee:f7:9e:a6:
         ef:37:ec:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:18:36 2026 by rpki-client