Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
File:                     V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft (raw, json)
Hash identifier:          GncwKv1rNktR7ZfiYK0nGS0J13nRxfFkUaeKbyxS6lg=
Subject key identifier:   15:BF:0C:9E:73:0C:3C:81:4F:BF:72:12:96:1D:A7:88:D0:95:96:BC
Authority key identifier: 57:58:D3:83:1E:92:FA:E8:24:75:F6:B3:32:12:79:4A:1F:F0:7E:5F
Certificate issuer:       /CN=A919536D/serialNumber=5758D3831E92FAE82475F6B33212794A1FF07E5F
Certificate serial:       1562
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
Manifest number:          1558
Signing time:             Fri 02 Oct 2026 16:56:22 +0000
Manifest this update:     Fri 02 Oct 2026 16:56:21 +0000
Manifest next update:     Fri 09 Oct 2026 16:56:21 +0000
Files and hashes:         1: V1jTgx6S-ugkdfazMhJ5Sh_wfl8.crl (hash: E+jaFhql9ogDFaCAiGqPBhWLCIgsS1yl3J+wzvK2U8E=)
                          2: 36295E5A6E2611E8A01E307EC4F9AE02.roa (hash: NeaIt40bfR7Th/5va2a7uu28HT3fwwohhMdVR9FiFv8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.crl
                          rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 16:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5474 (0x1562)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536D, serialNumber=5758D3831E92FAE82475F6B33212794A1FF07E5F
        Validity
            Not Before: Oct  2 16:56:21 2026 GMT
            Not After : Oct  9 16:56:21 2026 GMT
        Subject: CN=6abfe236-a81d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c3:e8:3b:90:67:55:d3:61:83:9f:11:1c:c7:
                    07:2d:61:86:0c:f3:22:c7:1b:48:eb:b6:42:05:dc:
                    a2:ec:c7:44:25:f0:ed:f1:31:93:b3:b9:ab:91:21:
                    7e:f7:0b:d2:07:08:9c:92:77:4c:c4:e2:7e:1b:55:
                    8d:21:30:0d:09:31:bd:df:da:1d:1a:a4:c0:4d:88:
                    78:4c:9e:35:9e:f5:8f:71:b9:26:7f:db:02:72:59:
                    fe:3b:db:7d:b2:02:30:84:6c:9a:48:9b:5a:c5:67:
                    e0:af:d1:44:d6:15:c8:45:f2:cc:09:68:2e:dd:0c:
                    0a:60:ac:02:fc:79:11:e4:24:3d:60:f9:12:48:72:
                    12:90:53:07:a2:b1:2c:85:6a:c6:56:dd:3f:65:bb:
                    da:94:3f:40:84:65:c9:5c:b9:e4:2f:c8:0f:41:54:
                    9e:32:ed:fa:84:76:b2:e7:78:b7:0e:01:45:85:a7:
                    79:06:40:d1:bf:bc:c8:cc:85:fc:1a:b4:7f:ca:03:
                    1f:a0:9d:c9:ef:3a:80:f1:97:25:df:20:00:6d:04:
                    d0:7c:4c:9a:2f:0e:16:b6:a7:c2:ea:34:16:81:15:
                    44:5e:ec:fe:53:d1:cf:62:41:e6:fb:81:48:d1:00:
                    a5:e8:bf:5f:2d:7c:c5:12:16:cd:d7:32:d9:8d:1b:
                    df:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BF:0C:9E:73:0C:3C:81:4F:BF:72:12:96:1D:A7:88:D0:95:96:BC
            X509v3 Authority Key Identifier:
                keyid:57:58:D3:83:1E:92:FA:E8:24:75:F6:B3:32:12:79:4A:1F:F0:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:fb:97:5d:eb:27:c9:1b:a5:7d:87:6f:b9:97:6e:86:1c:6a:
         b8:3e:fc:0f:99:ea:cd:36:87:98:12:ca:6a:2b:eb:30:49:be:
         97:eb:d0:58:7e:fc:ad:af:77:c2:99:4e:d6:d5:a5:f8:ef:4b:
         93:a7:67:ab:b8:ce:6b:72:b6:94:e4:6a:69:f8:ab:b8:d0:d6:
         fd:72:cd:a2:a4:89:fb:f2:c9:44:91:44:ac:30:e9:9b:5c:ce:
         07:5a:31:57:4d:f1:f1:78:f2:80:29:ad:9b:0e:32:04:3f:66:
         f0:e1:34:73:7c:4a:7e:b7:a4:f0:0a:18:4a:b7:f5:c4:da:6f:
         3b:ff:fc:77:cd:ba:fe:f3:4d:2a:ac:f0:63:53:02:38:64:d7:
         ee:28:6d:c2:bd:03:8a:87:ab:b8:b2:5f:7e:29:14:9f:d1:3c:
         c0:c8:bf:73:70:c3:8b:5e:2d:5c:6f:eb:f1:b1:1a:b2:61:2f:
         98:ff:e9:a3:72:eb:4e:a5:cf:4e:84:8b:38:02:70:2c:9e:92:
         68:e6:77:7f:86:2f:1a:ad:cf:c0:86:6d:58:6a:66:fa:aa:6c:
         b6:00:33:5c:24:e7:be:df:3f:e4:7e:cd:7f:3e:62:20:ca:7f:
         7f:c6:b4:ad:d3:86:f2:53:74:a4:02:3c:1b:5e:e2:cf:97:d2:
         74:a1:92:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:54:14 2026 by rpki-client