Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft
File:                     D5qo3lPwhe6GWh490qI0TiEwrxQ.mft (raw, json)
Hash identifier:          2UxPFAdWF9xkoH7nip6NIT7YRoEtEoVaGtiQ4qn3Tac=
Subject key identifier:   CC:3D:AC:F4:79:01:D2:1B:ED:7B:42:DA:E8:1A:6E:CE:A5:23:36:55
Authority key identifier: 0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14
Certificate issuer:       /CN=A916F7BE/serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14
Certificate serial:       0162
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft
Manifest number:          0158
Signing time:             Thu 03 Sep 2026 05:18:23 +0000
Manifest this update:     Thu 03 Sep 2026 05:18:22 +0000
Manifest next update:     Thu 10 Sep 2026 05:18:22 +0000
Files and hashes:         1: D5qo3lPwhe6GWh490qI0TiEwrxQ.crl (hash: Pr/4cQlTQIgu125sd3VayDYCSpn795ru3YjAHlD5oTE=)
                          2: 9AEE04EAA30C11EFB8323D14C4F9AE02.roa (hash: iPK+TPwB+YsNmbSno8QK/8aEGZdVfS6O1fIUEsLY2Vk=)
                          3: 310E8C36A30A11EFB999C96CC4F9AE02.roa (hash: m8laUDI9Zve1KrkarzeEr1E6AJ5CS17om1cAY5y7GWU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl
                          rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 05:18:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916F7BE, serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14
        Validity
            Not Before: Sep  3 05:18:22 2026 GMT
            Not After : Sep 10 05:18:22 2026 GMT
        Subject: CN=6a99031e-5c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9f:38:8e:01:be:93:47:fb:c6:10:b4:19:6f:
                    14:01:50:c6:4a:62:8d:14:38:14:e7:24:d0:e6:5f:
                    ae:7e:41:5e:50:3d:e9:7f:56:c7:ec:a9:f3:85:db:
                    bd:53:54:13:5a:09:77:5b:c6:1a:97:9a:e5:99:ca:
                    b4:c4:83:23:01:ee:0c:e9:19:46:7d:ff:e4:19:d5:
                    7d:19:9c:c1:b0:25:5e:80:a5:dc:56:2b:80:8d:15:
                    f7:e2:45:83:09:6a:fa:7a:fa:35:f3:d2:45:49:ac:
                    90:2f:b4:56:72:63:c4:e4:b2:c8:3f:25:be:7e:ac:
                    93:35:fc:ba:08:e6:58:4d:2f:77:3d:1b:68:30:3e:
                    58:5b:e9:c0:f7:59:53:f6:c6:30:ee:6c:a0:45:7b:
                    0c:bd:92:a7:19:3f:aa:48:62:fb:9b:4f:e1:a9:bc:
                    96:20:ed:0c:cd:74:13:9a:e5:00:45:88:49:8c:14:
                    4e:5c:35:64:dc:11:c2:ca:39:71:a1:f9:52:3c:4c:
                    2d:31:7c:c0:bb:35:ee:cd:41:f6:1c:14:4f:2f:5c:
                    88:da:34:96:27:a6:54:33:c4:7b:10:89:42:56:c2:
                    aa:59:34:16:bc:d5:a7:7b:dc:2c:1b:18:f0:53:a0:
                    37:73:9c:f0:33:d3:a6:c9:3c:17:5b:4d:64:09:ad:
                    25:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3D:AC:F4:79:01:D2:1B:ED:7B:42:DA:E8:1A:6E:CE:A5:23:36:55
            X509v3 Authority Key Identifier:
                keyid:0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:5a:2e:55:f6:d1:bd:12:43:44:eb:95:4b:0f:5e:af:99:51:
         1d:b4:04:13:e5:24:93:8f:ab:21:45:25:0c:ea:fe:c6:2a:f7:
         52:e8:78:b5:9d:00:3e:52:a9:32:ec:61:6e:ec:6c:32:2b:61:
         b2:40:1e:34:c7:22:62:56:e5:77:6d:68:5a:ba:68:8f:31:63:
         20:05:3e:bb:50:a7:c7:ec:40:2b:11:0d:dc:32:be:ed:79:71:
         c4:e2:0c:30:d9:33:71:f0:45:1b:72:e2:c8:fd:3c:cc:53:d0:
         0d:20:be:5f:3d:4b:8c:78:8a:ed:5d:63:4c:47:04:36:0f:fc:
         e6:40:45:96:39:a8:79:1d:82:e3:04:21:16:dd:ad:7f:f1:95:
         48:d2:1e:a8:11:d4:f1:ad:ad:ae:5f:c8:7c:cd:56:cd:2d:e0:
         9b:d9:d1:2b:45:01:24:69:04:46:10:7a:7d:91:58:83:e2:e6:
         2c:37:8c:96:1e:11:7e:df:b9:65:e5:09:c1:e0:51:41:29:1b:
         32:8f:fd:35:ea:a8:b7:e3:80:e1:96:26:17:3c:f3:8c:12:9a:
         5d:9e:9c:87:7c:3a:79:0a:8e:c5:d6:e0:78:0f:be:62:c7:1a:
         47:a3:10:fa:73:f5:bf:54:e5:33:b7:65:62:de:50:13:d4:84:
         06:18:4c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:45:09 2026 by rpki-client