Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
File:                     CVjwl8rkKX3ycoLkGD468UJMj34.mft (raw, json)
Hash identifier:          zs8qV80T/cnA2p4n+SJATaMYUeSnv4hVLayaidMU1gs=
Subject key identifier:   67:2C:11:40:10:2A:8F:DE:E1:F1:21:C8:8A:38:A7:39:C2:C9:5F:9A
Authority key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E
Certificate issuer:       /CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E
Certificate serial:       1734
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
Manifest number:          171C
Signing time:             Tue 22 Sep 2026 16:34:14 +0000
Manifest this update:     Tue 22 Sep 2026 16:34:14 +0000
Manifest next update:     Tue 29 Sep 2026 16:34:14 +0000
Files and hashes:         1: CVjwl8rkKX3ycoLkGD468UJMj34.crl (hash: 6bduEVQ8XmZ+2O2Hsvi51IbuSjord9wWFKkLhEHW8rE=)
                          2: B4450EF68E5311EBB81E6C70C4F9AE02.roa (hash: Z9RyBMJrxYuZfbZLQ7+nLreuRbVepYn0j7NfRrq4SKU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl
                          rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 16:34:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5940 (0x1734)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916814B, serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E
        Validity
            Not Before: Sep 22 16:34:14 2026 GMT
            Not After : Sep 29 16:34:14 2026 GMT
        Subject: CN=6ab2ae06-3c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:51:83:51:b7:02:fb:57:2f:22:07:cb:d8:1f:
                    13:d0:44:eb:03:c0:a2:94:81:20:3e:81:53:c3:36:
                    3c:1a:d4:ab:b2:76:bc:52:f6:19:08:02:23:a7:20:
                    b0:49:98:4a:7a:eb:96:12:22:f1:57:f5:73:1a:d6:
                    7f:19:b0:b6:e1:ec:45:92:d4:b0:82:ce:04:37:a1:
                    d7:b0:d2:94:28:78:3f:86:a0:ed:82:79:cf:3c:61:
                    9a:23:68:1c:d5:5a:d0:54:18:e3:0d:f7:96:cf:28:
                    9d:0e:ae:0c:f5:dd:0d:5c:c5:71:e5:ee:34:1b:da:
                    0d:86:d2:d0:91:93:89:49:26:82:87:1d:05:67:58:
                    80:6c:bb:70:d7:a8:8e:f9:3d:4a:12:ac:c3:e8:13:
                    6b:35:4b:35:6c:34:19:60:5b:83:48:67:39:91:dc:
                    5b:2c:61:e7:48:c5:3b:90:f2:cc:1e:d5:e6:f2:48:
                    3f:65:78:73:cc:8c:e2:09:1b:25:43:5e:65:9a:6f:
                    a6:eb:eb:8c:92:95:d0:08:79:de:af:b4:6a:4d:50:
                    53:5a:8b:53:7c:1a:f3:8c:9a:f7:89:db:49:96:c1:
                    cc:9a:50:0d:6e:bc:fd:31:53:cb:42:86:4e:52:e3:
                    5b:e0:48:cd:a8:f6:f3:92:95:c4:38:8c:b8:6e:95:
                    1a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2C:11:40:10:2A:8F:DE:E1:F1:21:C8:8A:38:A7:39:C2:C9:5F:9A
            X509v3 Authority Key Identifier:
                keyid:09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:3d:a9:d7:fc:6c:65:47:cb:01:0a:ec:88:b0:f1:28:f1:ce:
         6a:a9:dc:a8:72:cb:79:bf:43:cf:c3:a5:2b:e8:93:67:d1:8d:
         af:03:75:4d:fe:d4:88:18:11:e3:c5:f9:55:33:9b:d1:0c:4a:
         82:a5:45:89:be:e8:6a:79:1d:03:1d:b0:34:b3:97:77:76:d6:
         99:b6:c7:8d:ec:a8:d2:3d:fb:47:2c:20:f8:63:e0:a1:ad:18:
         28:75:6e:e4:9c:6a:e3:90:51:44:eb:2e:65:45:74:e1:02:fc:
         b3:07:3b:4b:c6:ff:48:b3:00:9c:7d:59:fa:dd:55:a5:2e:ad:
         38:de:44:8d:7f:29:13:9c:dd:5e:58:cc:97:5d:86:62:da:f5:
         4e:b9:09:fc:98:ed:5c:92:2e:e6:6d:08:3d:07:9f:71:30:c1:
         69:f5:bd:fb:bb:09:0e:75:5f:0f:fc:1f:c4:3f:6f:2a:66:cb:
         6d:66:12:98:c8:43:83:56:42:21:17:6d:33:bd:5d:e6:be:ac:
         33:01:71:ba:5b:4c:af:e5:a9:e2:e6:15:6a:d3:8c:a8:47:b6:
         b7:26:9e:9a:9e:a5:dc:6c:cf:7d:32:53:35:4c:b2:01:8b:f6:
         27:16:51:9d:69:1a:33:25:00:f4:24:a2:36:77:2e:76:fe:69:
         0c:81:27:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:36:31 2026 by rpki-client