Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft
File:                     kY5yieKMGkkiojy1Zb2CG34gphE.mft (raw, json)
Hash identifier:          dwhZCxEF/Gou0UOulDcMD0jwk5/ZnQbYvdcIr/2Gcqc=
Subject key identifier:   5E:54:31:9D:DC:25:5C:7C:49:21:E1:3E:EE:57:03:F1:F5:8B:66:52
Authority key identifier: 91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11
Certificate issuer:       /CN=A9171B1A/serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611
Certificate serial:       0D91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft
Manifest number:          0D7F
Signing time:             Tue 18 Aug 2026 18:11:14 +0000
Manifest this update:     Tue 18 Aug 2026 18:11:14 +0000
Manifest next update:     Tue 25 Aug 2026 18:11:14 +0000
Files and hashes:         1: kY5yieKMGkkiojy1Zb2CG34gphE.crl (hash: t3UnUWY1qTU0nTm9a71LDRWji1yTvvCQ9+FPA0CDa6c=)
                          2: 6E3B1338F41211E9AAF5924EC4F9AE02.roa (hash: X8sSkThLSb4fvyIS1pC23KDUjsj3Bu29OZPUHsBaV1A=)
                          3: 6D9433B0F41211E9AAF5924EC4F9AE02.roa (hash: Aw64/YmY/GSEcpV9lRNLIVB3nggqqcAVaMWqQLrAoig=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl
                          rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3473 (0xd91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171B1A, serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611
        Validity
            Not Before: Aug 18 18:11:14 2026 GMT
            Not After : Aug 25 18:11:14 2026 GMT
        Subject: CN=6a84a042-002b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:4b:24:c0:2f:7f:fc:ce:c3:c7:6f:5b:98:
                    1a:7b:f6:46:17:da:f8:9d:59:0c:0d:e9:cf:17:29:
                    7e:ce:60:de:05:9b:13:34:de:8d:bc:79:6b:25:66:
                    e7:e6:b0:06:7f:cc:55:23:5c:75:e3:b5:76:25:f2:
                    99:aa:0f:54:7b:1c:fb:eb:1c:7b:55:b7:3f:0f:cc:
                    81:fa:be:e4:b3:48:1e:02:45:1f:ed:45:f6:96:57:
                    83:6f:04:e4:c1:4e:15:fe:46:0b:c9:c5:c7:08:6d:
                    f7:f4:7b:10:e8:c1:e3:e6:b2:69:84:b6:f1:61:87:
                    de:ab:05:a1:e4:c7:48:2e:42:80:6f:4c:5c:17:ca:
                    77:81:0f:1c:11:8a:f8:ac:4e:01:30:4e:68:c2:35:
                    73:d3:17:b9:43:24:09:1b:ff:f1:a6:37:6d:f8:9f:
                    ed:9d:95:4f:10:45:b8:f7:9f:05:f9:b4:48:1b:09:
                    79:ea:aa:07:47:6c:5c:41:e5:54:15:1d:80:6a:e3:
                    01:ea:7e:2b:ae:30:24:64:2c:cd:ae:25:b7:34:db:
                    62:a0:5e:a5:c8:ab:e1:77:23:10:7c:b7:8f:ec:f1:
                    59:c9:db:59:8a:6c:18:7c:bc:dc:ad:dc:c5:a0:f3:
                    01:0d:d5:8c:8b:ce:20:9a:d7:e4:dd:14:8b:0f:44:
                    58:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:54:31:9D:DC:25:5C:7C:49:21:E1:3E:EE:57:03:F1:F5:8B:66:52
            X509v3 Authority Key Identifier:
                keyid:91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:b2:f5:e6:8f:61:46:fc:c7:e7:18:06:eb:45:4b:a4:3d:94:
         76:af:0d:0a:e0:71:56:08:aa:d4:36:c9:45:e0:c6:70:52:52:
         05:1f:2f:1b:2a:ad:72:5a:d8:04:9e:f7:24:20:dd:25:44:8c:
         61:41:ff:7d:a3:e3:13:17:58:d5:18:03:92:08:87:d4:49:bd:
         93:e5:19:46:f7:6d:29:67:9b:d2:15:c2:34:88:38:4b:19:f0:
         fa:27:da:bc:d4:c8:f2:3d:97:bd:3e:07:20:c9:6b:0b:8e:99:
         f4:b6:25:50:7a:64:bd:e1:c2:2e:ca:99:5c:8a:87:85:dc:a7:
         a4:96:8a:51:91:48:c4:f1:75:eb:c4:5f:e6:fa:bb:20:fa:e1:
         89:c1:b1:e6:ec:99:02:02:19:f9:3c:69:4f:c8:35:64:ff:cf:
         14:cc:5c:7f:b1:de:0a:90:22:24:c4:91:34:7b:c3:05:1d:57:
         e4:1b:b8:c7:f1:69:76:ff:da:54:21:2c:17:48:49:4b:ee:1d:
         67:b6:10:15:e4:86:b1:7e:ba:57:7d:e3:d6:45:0a:81:35:c3:
         de:da:2d:9d:be:2a:c2:62:c2:86:81:1b:19:8d:f1:9b:e5:a5:
         db:1a:85:5d:76:36:28:76:8b:10:81:e2:af:30:85:33:4d:db:
         2c:84:37:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:03 2026 by rpki-client