Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
File:                     e-IwFTz_kAFkLbybJPhdDMKCNk4.mft (raw, json)
Hash identifier:          mzczuxVXDUnVlHc29EkMNm0egD17HdjtJ5RkwkKE98w=
Subject key identifier:   16:04:D1:4C:22:B2:5B:AA:72:47:AF:48:FE:BA:2A:7D:FF:AF:BE:2C
Authority key identifier: 7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E
Certificate issuer:       /CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E
Certificate serial:       0227
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
Manifest number:          0213
Signing time:             Thu 03 Sep 2026 03:15:57 +0000
Manifest this update:     Thu 03 Sep 2026 03:15:56 +0000
Manifest next update:     Thu 10 Sep 2026 03:15:56 +0000
Files and hashes:         1: e-IwFTz_kAFkLbybJPhdDMKCNk4.crl (hash: exgdSr2yGG6ruEaYo1E5Pz2MvqPC2qo1WO2pABNzbH0=)
                          2: C00D9A3C71EE11EFA7DD021EC4F9AE02.roa (hash: 5n/vT2aN9VzYjANmFIq1/DcSFVdlgCzkvZzjJSAeg2Q=)
                          3: 9D3EBEF4921111EE9AD1150CC4F9AE02.roa (hash: W9lanvtL2q9XwYCNQGMdXKdQrewpCRyS44URbarRexc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl
                          rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 03:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 551 (0x227)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91625DB, serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E
        Validity
            Not Before: Sep  3 03:15:56 2026 GMT
            Not After : Sep 10 03:15:56 2026 GMT
        Subject: CN=6a98e66d-eb25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:69:95:22:e3:ed:f9:1e:bd:90:ca:01:ac:a1:
                    fc:0c:cd:9d:05:4e:cd:54:f7:d7:95:51:25:4e:29:
                    ec:74:d8:f8:0b:8c:a5:60:06:0c:fb:37:71:ef:b5:
                    8b:64:67:66:76:c4:f8:c9:8d:e9:a5:32:c7:c0:7e:
                    91:92:d5:c5:51:c9:a2:2a:72:a6:2e:eb:e9:05:5e:
                    23:15:98:85:d2:46:5c:05:e8:5c:bf:cc:50:ec:1a:
                    86:33:0a:ff:d0:63:ea:5d:94:f6:fd:f3:5d:a2:58:
                    28:75:fe:a2:30:ba:85:50:09:00:78:f2:18:ce:ca:
                    ed:77:f4:ba:34:8c:9c:5e:03:a9:7d:f5:90:04:c1:
                    f7:11:45:c2:27:52:15:7e:56:d9:e9:d5:32:03:f3:
                    93:07:44:48:a5:76:a8:30:ee:53:2e:eb:d8:e6:2a:
                    cd:ad:ca:e1:0a:00:e7:1c:d1:ad:4a:3b:08:5e:eb:
                    49:f3:9a:47:b9:e7:53:a5:d4:10:bb:bd:0d:6a:47:
                    a3:66:00:71:07:f0:e5:11:b4:81:82:ff:c7:bd:fb:
                    43:2c:a1:71:25:83:cc:36:2f:c0:73:1f:f6:e0:60:
                    26:c6:5c:ba:fd:bf:56:96:40:01:01:76:90:51:0e:
                    03:68:9d:3a:c3:2c:48:0e:d6:62:9e:46:03:ea:f5:
                    72:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:04:D1:4C:22:B2:5B:AA:72:47:AF:48:FE:BA:2A:7D:FF:AF:BE:2C
            X509v3 Authority Key Identifier:
                keyid:7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ac:9d:d5:ea:92:cb:08:f3:8e:d7:24:56:4d:54:5a:29:fc:
         f9:85:9d:e2:fe:a8:76:89:61:d4:04:f7:ad:0d:ee:c5:fe:56:
         75:02:e4:3b:d6:25:31:e0:19:35:3c:a7:fb:f8:8a:c6:f1:32:
         9c:a7:f1:90:7a:0c:c1:59:17:90:aa:3a:1a:51:49:0d:16:b0:
         e5:67:8e:a5:de:73:82:a2:bb:6d:fe:17:8c:e6:03:b2:e9:4b:
         a3:87:13:38:ae:79:77:a4:de:ac:7d:48:c0:82:18:88:44:ad:
         b8:cb:57:d6:a0:3d:4a:2f:c7:78:97:47:2a:48:e7:3c:80:c9:
         0d:8c:78:86:9f:47:6c:8a:b5:bc:c6:ae:a6:2b:95:95:fc:88:
         48:07:40:6e:19:03:e5:b1:f7:12:b2:ff:be:98:25:ab:1c:2f:
         31:18:e1:e1:d7:d0:75:22:3c:f1:40:b7:a2:ce:f1:55:2f:71:
         18:c9:5f:fe:80:86:03:d8:c7:79:f0:fc:bc:b2:55:a8:67:7d:
         0b:c0:d8:af:29:76:86:12:30:d2:7b:f3:8d:65:c8:6e:6a:be:
         8f:9c:bf:52:10:db:3f:97:81:d8:9c:0c:dc:28:ce:68:99:27:
         0d:f2:6b:12:fc:bb:da:25:6f:62:1c:23:b2:e7:84:6e:86:9a:
         b5:0c:a0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:17:40 2026 by rpki-client