Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft
File:                     489F-AUQY7vbMX_dFREyqUAE_Vs.mft (raw, json)
Hash identifier:          uY+PdEA8AGcd6GVyKXwxJH3wFYv/Ya644zcyVyffsBc=
Subject key identifier:   E7:90:C7:D7:20:53:77:FE:5F:9C:E3:6A:A6:9E:FC:8C:98:0B:DB:FC
Authority key identifier: E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B
Certificate issuer:       /CN=A9197202/serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B
Certificate serial:       03D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft
Manifest number:          03B8
Signing time:             Sat 05 Sep 2026 00:21:42 +0000
Manifest this update:     Sat 05 Sep 2026 00:21:42 +0000
Manifest next update:     Sat 12 Sep 2026 00:21:41 +0000
Files and hashes:         1: 489F-AUQY7vbMX_dFREyqUAE_Vs.crl (hash: /v178oIGzFxfTPhzPUVa4rrQluNUxnWsnT6490tJKP4=)
                          2: 920E981CCAAA11ED8371524CC4F9AE02.roa (hash: WIB+DaMR2Ho4TV5ghi0y5dK6Bf7NomVsRIG38qN6/F0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl
                          rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 00:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 978 (0x3d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197202, serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B
        Validity
            Not Before: Sep  5 00:21:42 2026 GMT
            Not After : Sep 12 00:21:41 2026 GMT
        Subject: CN=6a9b6096-4c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:22:9c:f3:c1:04:66:eb:a8:24:66:f1:9c:70:
                    49:4f:59:0b:ed:88:9a:ce:32:13:48:32:c9:ab:cb:
                    10:ac:d9:40:3b:d8:2d:fd:a1:ec:50:e1:e0:a3:f9:
                    5b:37:1c:dd:4e:d1:2b:c9:6e:15:b2:fe:03:66:3a:
                    7a:b5:8b:92:72:d1:fd:8a:8e:fd:f8:f3:5e:b4:36:
                    97:06:75:9f:38:81:0b:fa:f2:0c:2b:fe:95:6c:e6:
                    ba:7c:19:3b:ea:c2:98:06:a7:84:2c:c3:4a:8a:7c:
                    4e:5a:7c:9e:94:65:e7:be:ed:a3:fe:30:14:6f:f3:
                    2d:8a:05:97:cc:ab:69:0b:c6:10:bc:83:6f:29:cd:
                    a0:67:dc:00:e3:8f:54:e7:41:00:e9:9c:bb:e7:fd:
                    c0:69:b1:fe:a0:37:fc:69:28:5d:4f:9c:14:40:47:
                    91:3e:b5:79:5c:a9:3d:10:8d:a4:dc:6f:97:40:5a:
                    89:71:6a:b7:4d:5c:b1:62:82:9c:cf:2d:7a:d2:c8:
                    e2:98:21:16:29:23:0e:19:0c:4c:80:f7:17:41:04:
                    71:89:33:76:8d:e6:e6:4a:43:60:53:5a:c0:47:3e:
                    da:b1:4f:9a:a6:f2:3e:20:b2:5f:d9:03:55:02:79:
                    fe:9c:08:72:35:87:45:c3:08:b4:66:d9:b6:7f:99:
                    ff:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:90:C7:D7:20:53:77:FE:5F:9C:E3:6A:A6:9E:FC:8C:98:0B:DB:FC
            X509v3 Authority Key Identifier:
                keyid:E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:78:bf:c9:2d:1a:62:17:ad:65:56:34:5a:d8:ae:41:f1:00:
         e3:f5:70:7a:ee:b2:bb:43:86:e4:97:66:89:ce:50:66:bb:d9:
         1c:f5:4b:8a:b2:d2:db:2e:6b:5a:54:a1:c5:d5:db:c0:01:0d:
         8e:0f:0b:07:67:3d:89:04:fd:ea:ce:2b:fe:29:70:b9:13:61:
         ef:1c:23:ce:ff:12:03:5e:63:4f:a1:3a:fa:a3:cf:1b:8a:1f:
         9f:20:50:db:fb:12:f5:08:ea:0d:d4:4f:90:0d:5e:c2:ed:cd:
         f0:58:dc:84:a9:b6:cd:33:c8:2f:0b:2b:36:8c:a9:9f:49:07:
         b7:41:bb:55:fe:37:d9:ee:41:28:76:ae:43:f4:8f:71:14:f1:
         bc:1b:41:a3:55:1b:cd:34:65:a7:8d:d2:6c:c9:4e:2f:86:5f:
         83:6a:5b:61:88:c9:49:90:c7:ef:5d:cb:64:f0:ad:92:7b:66:
         36:02:25:29:e9:f5:e0:a1:38:53:aa:c5:12:10:46:9c:34:a6:
         82:d2:24:8a:e2:9e:82:55:bb:ca:91:52:18:de:0c:c6:74:a2:
         85:0f:c5:2d:4f:8f:67:d4:74:d9:c9:93:25:fa:e0:81:c2:3a:
         80:7a:0b:b7:96:80:18:b4:74:ca:cc:4a:5b:f0:f4:0e:3b:24:
         81:ae:fb:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTcyMDIxMTAvBgNVBAUTKEUzQ0Y0NUY4MDUxMDYzQkJEQjMxN0ZERDE1MTEzMkE5
NDAwNEZENUIwHhcNMjYwOTA1MDAyMTQyWhcNMjYwOTEyMDAyMTQxWjAYMRYwFAYD
VQQDEw02YTliNjA5Ni00YzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmSKc88EEZuuoJGbxnHBJT1kL7YiazjITSDLJq8sQrNlAO9gt/aHsUOHgo/lb
NxzdTtEryW4Vsv4DZjp6tYuSctH9io79+PNetDaXBnWfOIEL+vIMK/6VbOa6fBk7
6sKYBqeELMNKinxOWnyelGXnvu2j/jAUb/MtigWXzKtpC8YQvINvKc2gZ9wA449U
50EA6Zy75/3AabH+oDf8aShdT5wUQEeRPrV5XKk9EI2k3G+XQFqJcWq3TVyxYoKc
zy160sjimCEWKSMOGQxMgPcXQQRxiTN2jebmSkNgU1rARz7asU+apvI+ILJf2QNV
Ann+nAhyNYdFwwi0Ztm2f5n/pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOeQx9cg
U3f+X5zjaqae/IyYC9v8MB8GA1UdIwQYMBaAFOPPRfgFEGO72zF/3RURMqlABP1b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzIwMi8wQUZFQ0E3MEY3
MDgxMUVDOTg0OUYzNUVDNEY5QUUwMi80ODlGLUFVUVk3dmJNWF9kRlJFeXFVQUVf
VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQ4OUYtQVVRWTd2Yk1YX2RGUkV5cVVBRV9Wcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzIwMi8wQUZFQ0E3MEY3MDgxMUVDOTg0OUYzNUVDNEY5QUUwMi80ODlGLUFVUVk3
dmJNWF9kRlJFeXFVQUVfVnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGHi/yS0aYhetZVY0WtiuQfEA4/Vweu6yu0OG5Jdmic5QZrvZHPVLirLS2y5r
WlShxdXbwAENjg8LB2c9iQT96s4r/ilwuRNh7xwjzv8SA15jT6E6+qPPG4ofnyBQ
2/sS9QjqDdRPkA1ewu3N8FjchKm2zTPILwsrNoypn0kHt0G7Vf432e5BKHauQ/SP
cRTxvBtBo1UbzTRlp43SbMlOL4Zfg2pbYYjJSZDH713LZPCtkntmNgIlKen14KE4
U6rFEhBGnDSmgtIkiuKeglW7ypFSGN4MxnSihQ/FLU+PZ9R02cmTJfrggcI6gHoL
t5aAGLR0ysxKW/D0Djskga77vA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:52:27 2026 by rpki-client