Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft
File:                     cNpFkZHpBoa9sKxHq9owqcPhdPo.mft (raw, json)
Hash identifier:          0Gp1g6Ssi2lcqj1+s+NV/n9KPXfGlidXBZZr5dEHrqI=
Subject key identifier:   9D:42:A9:28:A6:E9:87:D8:01:5E:46:B2:12:B4:DD:25:A9:52:09:57
Authority key identifier: 70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA
Certificate issuer:       /CN=A91AF145/serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA
Certificate serial:       025A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft
Manifest number:          024E
Signing time:             Fri 11 Sep 2026 02:30:44 +0000
Manifest this update:     Fri 11 Sep 2026 02:30:44 +0000
Manifest next update:     Fri 18 Sep 2026 02:30:44 +0000
Files and hashes:         1: cNpFkZHpBoa9sKxHq9owqcPhdPo.crl (hash: MJxJ8ifWcOxGNjkLU6zyTUfL++QCgm0Gr6S0h9NWFUM=)
                          2: 971B23D236EA11EE802E9246C4F9AE02.roa (hash: I+nMBsoAOQUiZCzFaQB/KvumSoVrGOcDZwsmBZeS6yw=)
                          3: 43E9CB90DFF511EF8E4E3982C4F9AE02.roa (hash: zTVOLFIEBPDpPfLXlenxlDqoCu7oEt/TG+aQAHRnkO8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl
                          rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 02:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF145, serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA
        Validity
            Not Before: Sep 11 02:30:44 2026 GMT
            Not After : Sep 18 02:30:44 2026 GMT
        Subject: CN=6aa367d4-798f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:73:ba:ab:88:3b:a7:a9:e9:e5:2e:aa:d3:af:
                    80:05:8a:85:6a:ae:35:6c:d3:82:44:b1:69:35:86:
                    39:8c:7f:85:9a:0d:01:e9:bd:d7:d2:33:ee:eb:62:
                    f7:5e:61:f4:c6:c6:fc:66:cb:17:35:1f:7e:4d:9e:
                    45:22:30:55:0a:19:ad:08:a5:88:cc:72:69:7f:16:
                    af:15:ae:14:59:d6:ce:72:b6:21:32:ee:d7:f7:b5:
                    a8:55:36:dc:c4:53:a3:51:0e:de:0c:dd:34:c0:db:
                    f4:98:b8:7b:d9:8c:55:a2:5b:29:a3:18:b3:bf:14:
                    5f:72:59:27:2d:5a:bc:01:39:04:f4:59:99:e9:4a:
                    53:43:f0:b5:ae:de:61:91:be:70:27:37:02:14:a3:
                    d3:22:6e:c9:1b:9b:18:0f:1d:79:89:e7:51:60:df:
                    07:97:16:8f:44:45:26:24:e5:16:0b:3a:dc:77:69:
                    78:5e:bf:76:34:4e:a7:c9:9e:b9:df:9c:b2:a8:07:
                    da:eb:22:87:9f:08:06:4a:9a:2a:a7:8e:b0:2a:ef:
                    72:8e:cb:45:ae:27:a8:8e:d2:de:0f:b7:4c:17:6c:
                    ef:8f:a5:22:f3:da:11:ec:0d:63:e8:1e:16:00:c2:
                    40:d2:80:b4:20:a1:2d:10:17:3f:37:35:09:22:5a:
                    db:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:42:A9:28:A6:E9:87:D8:01:5E:46:B2:12:B4:DD:25:A9:52:09:57
            X509v3 Authority Key Identifier:
                keyid:70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:91:52:27:d1:30:fb:c6:e0:a2:bc:78:7e:a0:dc:77:59:fd:
         74:0a:7a:b7:c4:00:8e:46:85:fc:20:6d:16:48:f6:28:85:f6:
         40:9d:c2:fd:82:6b:b9:68:1e:e4:7c:a9:ff:02:ec:c9:c6:c8:
         a0:ed:61:bc:09:cb:87:d1:a4:0d:8b:74:03:47:84:12:fc:14:
         28:a6:56:df:91:2b:07:33:62:b1:67:3c:27:df:42:e6:22:ce:
         5d:17:39:28:7c:1d:76:91:e1:1d:54:86:f1:0a:54:60:a6:b3:
         d8:f3:2c:28:52:0f:49:ab:c9:bf:dd:00:37:53:2e:ed:58:7d:
         b4:53:55:0a:c9:91:07:5b:23:88:26:d6:b6:32:da:c9:ba:55:
         30:a4:38:05:69:02:a3:6b:4d:f6:4e:0f:f0:3e:19:9f:61:35:
         ee:8a:b0:a0:ea:37:2d:fa:62:bb:04:84:98:85:9f:e9:65:04:
         70:73:2c:42:dd:bf:97:0f:58:cf:7b:2b:37:f4:79:21:d5:1c:
         d5:10:e2:91:04:f7:db:51:64:7d:c6:57:81:4d:58:5f:06:2a:
         e7:ab:ce:f6:d0:19:27:c8:35:ca:70:bb:db:b0:88:53:56:2d:
         b4:12:1c:b9:bd:41:54:d2:3c:6f:39:1b:71:3a:e7:4a:69:a5:
         d1:25:21:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:08:30 2026 by rpki-client