Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft
File:                     dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft (raw, json)
Hash identifier:          VXbZIGUltlXizgRjUom2F7fyxjhB9D9BElYOtLBkWsw=
Subject key identifier:   C7:21:EC:89:AE:4D:43:91:6A:3A:70:9A:07:98:ED:AB:0C:36:B9:4F
Authority key identifier: 74:22:78:9E:8E:D0:BF:C2:0C:34:D7:BF:68:F5:19:EE:65:EF:F4:BC
Certificate issuer:       /CN=A915B0D2/serialNumber=7422789E8ED0BFC20C34D7BF68F519EE65EFF4BC
Certificate serial:       0224
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft
Manifest number:          021E
Signing time:             Mon 05 Oct 2026 03:10:08 +0000
Manifest this update:     Mon 05 Oct 2026 03:10:07 +0000
Manifest next update:     Mon 12 Oct 2026 03:10:07 +0000
Files and hashes:         1: dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl (hash: LFMQijZQdFiLGcSM8TIvrL1/PxWsx+W37LUxwuUfYMM=)
                          2: FA0FC12E869E11EE9FAC6784C4F9AE02.roa (hash: H+RrU+ZPqJuxRlrjQS4NUzBdPG3qKib/lM9dVIH4hoA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl
                          rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 03:10:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B0D2, serialNumber=7422789E8ED0BFC20C34D7BF68F519EE65EFF4BC
        Validity
            Not Before: Oct  5 03:10:07 2026 GMT
            Not After : Oct 12 03:10:07 2026 GMT
        Subject: CN=6ac31510-87f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9a:05:28:32:4c:92:c2:d7:a6:8d:73:6b:56:
                    fc:ba:c0:f5:d8:f2:bc:89:b1:32:10:a2:ff:54:00:
                    84:40:50:2f:45:5e:64:ae:db:b1:14:14:40:4c:86:
                    71:3b:1b:71:16:78:f6:dc:a3:b2:8f:a0:ed:ba:04:
                    4c:99:23:58:eb:cc:fb:d0:2a:a9:ba:9a:99:ab:7a:
                    a3:d2:6a:97:77:14:43:9d:35:05:41:40:c8:5f:27:
                    ee:78:d1:58:a1:0f:ef:18:f3:62:fe:86:40:8b:06:
                    6d:99:8f:68:a4:3a:18:33:2d:56:e5:30:ae:d6:0d:
                    b9:a6:36:12:92:3a:42:26:25:43:e2:40:3d:22:e2:
                    97:10:5a:d7:6f:60:55:39:35:9b:3a:3e:9a:28:5f:
                    4f:2d:ba:94:0e:ff:1d:1d:3b:2e:3e:68:2f:79:be:
                    a0:f0:d9:74:ae:f7:31:58:5c:73:02:60:bf:a1:a9:
                    d2:8c:d5:24:05:b9:ee:91:63:63:8f:a1:60:10:7b:
                    38:15:20:a0:7c:52:08:72:dd:37:a3:c6:ff:dd:37:
                    f7:cf:1a:2d:d4:fb:cb:14:aa:f8:71:74:5d:5e:23:
                    fc:9f:ce:68:71:4c:9e:43:a3:a2:e7:22:63:7c:7e:
                    a7:07:b5:04:d2:26:2e:67:a1:93:be:d5:66:65:ae:
                    7b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:21:EC:89:AE:4D:43:91:6A:3A:70:9A:07:98:ED:AB:0C:36:B9:4F
            X509v3 Authority Key Identifier:
                keyid:74:22:78:9E:8E:D0:BF:C2:0C:34:D7:BF:68:F5:19:EE:65:EF:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:7c:39:15:10:50:c1:d6:cc:26:7b:87:9c:f7:28:f0:6a:c9:
         96:6b:52:84:19:d0:c3:68:f0:e5:c1:7d:a7:5f:98:85:78:aa:
         46:c7:7c:b1:55:c3:84:d2:78:c3:9c:a0:aa:df:06:ba:05:1b:
         56:c1:2f:db:75:73:1e:fa:2f:92:02:9c:c8:2b:f3:0c:4c:9a:
         d2:fc:56:2c:e0:a7:e4:b0:ce:76:47:16:80:8a:fb:c9:19:01:
         f0:ea:3c:0b:9e:65:5c:d4:19:e2:66:b2:1e:db:60:85:3d:50:
         d6:ef:53:fe:36:1e:7b:62:4c:e6:fa:b8:ca:d1:dc:39:ba:97:
         fe:a2:9e:e2:02:51:bf:a2:7e:a5:ec:34:8e:b9:1e:e5:15:0c:
         7e:63:c0:86:86:5a:00:ea:97:07:41:3d:58:ee:df:41:3e:9c:
         05:a4:31:54:c3:b5:20:82:82:6c:32:c1:4d:ba:6d:69:ea:f4:
         4d:1e:0c:e0:a4:3e:e2:2b:93:5f:c5:b1:34:a8:39:d2:50:6a:
         68:d3:96:06:18:e1:bb:bb:d8:01:a1:83:ba:b9:dd:a2:64:c4:
         2d:13:fb:f3:d6:79:73:31:69:45:6d:58:fa:6a:f4:c5:1f:23:
         90:4d:de:aa:94:e1:c6:8f:6f:09:0d:b7:d5:a1:55:87:01:be:
         06:11:16:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:10:53 2026 by rpki-client