Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
File:                     cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft (raw, json)
Hash identifier:          oNeCGfz0XD8LyVTRcWR5l0Mv/vMYOtpFFzJB2kvqq3s=
Subject key identifier:   7E:AE:5C:1F:18:4B:59:68:E3:63:92:F0:EB:48:37:FC:27:ED:DE:77
Authority key identifier: 70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E
Certificate issuer:       /CN=A918B936/serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E
Certificate serial:       220D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
Manifest number:          2209
Signing time:             Tue 06 Oct 2026 15:54:17 +0000
Manifest this update:     Tue 06 Oct 2026 15:54:16 +0000
Manifest next update:     Tue 13 Oct 2026 15:54:16 +0000
Files and hashes:         1: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl (hash: w8KBYfq/139uw+sn/YcuPrRM6agVWODFpnrf4rbEQSs=)
                          2: 84C953D2688011F1B19CA9CF6847A888.roa (hash: fgzTloFvPEEAD/Z6TV0oH5S1jdOAkNOT7FUcowuC3Qo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl
                          rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 15:54:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8717 (0x220d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B936, serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E
        Validity
            Not Before: Oct  6 15:54:16 2026 GMT
            Not After : Oct 13 15:54:16 2026 GMT
        Subject: CN=6ac519a9-ace8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4a:e7:47:ce:c2:f4:43:5b:89:d4:b4:a8:28:
                    1f:ae:63:a3:af:ac:a4:01:9a:8a:22:09:fe:62:dd:
                    e3:3b:f2:c6:b2:81:2b:c1:78:03:90:b4:a1:06:e7:
                    5e:ce:03:48:57:cc:2d:7a:87:ea:55:ee:02:3a:56:
                    de:36:9c:29:e4:6d:ba:13:c6:7c:f1:17:5f:26:0a:
                    1c:46:0e:a3:bd:cc:e9:1b:17:97:72:34:6a:bc:d7:
                    95:0e:11:38:3c:01:4f:ed:c8:8d:01:92:d8:0b:cd:
                    7b:14:c7:a3:05:c9:f6:c1:6a:a8:bd:72:45:5c:bd:
                    f3:e1:ee:d7:b1:36:88:7a:ad:04:e4:7d:7c:8c:f0:
                    68:24:c2:19:83:60:bf:e9:db:d3:ef:d8:bf:3e:d6:
                    65:27:32:2a:fd:42:c9:b9:ca:5b:15:36:6b:76:44:
                    8e:24:ae:c9:e8:60:a7:ec:84:1b:07:ea:1f:9c:98:
                    02:4b:92:24:9f:24:1d:f3:0e:30:2c:73:97:8d:ca:
                    79:cf:b1:b2:c0:bd:5c:f2:03:16:7c:fa:33:d7:e3:
                    14:71:74:18:7d:b6:66:53:83:f2:f9:1e:c4:3c:db:
                    3b:d3:57:49:be:8a:fe:82:74:8d:2a:58:6f:f4:e5:
                    3c:b0:90:25:25:91:20:1f:44:83:a2:f0:f6:4b:ec:
                    f1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AE:5C:1F:18:4B:59:68:E3:63:92:F0:EB:48:37:FC:27:ED:DE:77
            X509v3 Authority Key Identifier:
                keyid:70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:dc:ea:1d:e1:b9:82:e6:9d:09:18:e9:96:0c:56:a4:33:07:
         20:09:7b:61:6b:e9:46:e6:54:ea:23:97:ac:62:65:9d:0b:d0:
         eb:eb:97:03:b3:29:af:ec:b2:7b:fd:3d:84:37:d1:d6:a0:5d:
         ca:0f:c0:ea:ae:b3:bc:ee:e9:cc:19:52:89:32:0f:9a:45:89:
         f0:7d:bb:cd:3d:99:fb:e0:31:e2:07:5e:98:3e:43:f5:59:64:
         49:88:01:fd:98:ce:a1:d8:a9:da:0e:db:4c:aa:39:0c:ed:3e:
         bc:52:2f:9d:5e:09:18:7c:f2:ac:98:9d:a6:3f:97:85:93:06:
         ec:f8:64:65:ca:c4:a8:1c:33:59:84:fa:05:44:e7:d0:a0:e5:
         ad:25:76:b3:17:c5:92:71:a6:41:9c:bb:29:bb:09:13:d9:ad:
         b5:1c:aa:38:ea:62:3d:03:74:1f:05:60:04:e2:7f:5e:0f:e7:
         e9:64:19:e0:b6:cc:bb:35:9e:8b:13:14:fb:fd:8e:b4:3e:1a:
         43:de:bc:40:3e:00:a2:18:61:2c:ce:90:ec:09:20:8e:4a:68:
         d4:7e:ea:ce:2b:f5:c5:d3:c0:9e:7f:68:36:5f:c5:d5:09:06:
         3a:91:79:db:1e:18:03:e3:d2:56:0f:1c:d6:63:37:45:5f:21:
         9a:42:f9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 02:28:51 2026 by rpki-client