Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
File:                     N-rtpCQtUJYrh7SiB6xMNEszBgw.mft (raw, json)
Hash identifier:          YqRX7rXzlKmfJnliyfYSvPx/rTyeibXLbJfxRLGp0os=
Subject key identifier:   10:0D:1D:9F:4C:EF:CF:60:78:DE:5C:D5:B4:05:69:AA:C3:27:71:83
Authority key identifier: 37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
Certificate issuer:       /CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Certificate serial:       0F15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
Manifest number:          0ED1
Signing time:             Fri 04 Sep 2026 17:39:58 +0000
Manifest this update:     Fri 04 Sep 2026 17:39:58 +0000
Manifest next update:     Fri 11 Sep 2026 17:39:58 +0000
Files and hashes:         1: N-rtpCQtUJYrh7SiB6xMNEszBgw.crl (hash: XAneG1xTpqVzGwwqNRT4y6Ub1OLSn1E7WgJoRaExc8c=)
                          2: 4B058994B18D11EC886B063CC4F9AE02.roa (hash: Fqueet+ndFYhrCwbTP27Ycb9WerbdnToSLajJOuPvMA=)
                          3: 571B65E63DB411EEAA68F342C4F9AE02.roa (hash: OesppDhUnoiJ2S/fvZH2VYA9rOlCiKhEiOUHt/iQgs4=)
                          4: C65A7B2E2DA511EDABDD0D5AC4F9AE02.roa (hash: aVXIUJfK9FK08WHFOHOccPnDr/uBpaJzWm5gZ9bFvys=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl
                          rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 17:39:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3861 (0xf15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0741, serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
        Validity
            Not Before: Sep  4 17:39:58 2026 GMT
            Not After : Sep 11 17:39:58 2026 GMT
        Subject: CN=6a9b026e-a67d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e3:f0:70:c8:c3:37:73:39:1f:d4:64:cf:2e:
                    d5:9d:c3:2d:87:14:40:56:25:26:00:77:be:6f:15:
                    d8:75:3f:73:aa:2a:11:b8:67:99:54:ed:25:66:28:
                    0b:d2:b4:0b:3a:80:70:c0:a2:a8:45:31:3b:9b:0c:
                    61:9c:25:93:85:6f:b7:02:7e:7b:b2:fe:16:91:7f:
                    7d:79:75:9d:79:07:f5:af:b3:0b:9e:f8:53:0e:78:
                    7a:55:89:28:4c:fb:87:eb:71:1b:53:0b:bd:8b:76:
                    a5:eb:85:8f:b6:d4:8d:63:db:8e:41:b2:51:09:d2:
                    dc:8e:fa:3a:80:8d:f5:e8:94:e5:5c:37:55:d7:00:
                    6a:dc:42:d1:77:3a:88:af:5d:c3:33:18:ca:ab:7a:
                    91:8e:18:41:36:e9:0f:c9:68:de:cb:a5:78:dc:ff:
                    e8:17:5f:4b:f6:32:c1:a8:c0:6f:a1:9c:46:db:67:
                    e1:3e:c3:dc:a6:65:11:70:b1:86:d5:3a:99:c0:1b:
                    99:77:64:d7:36:a1:2f:48:4d:a8:b9:8c:77:36:28:
                    ae:74:d5:10:04:bb:ce:88:a6:90:1b:ef:4a:91:7f:
                    00:c5:3d:cb:b4:70:4b:a0:b9:5e:1b:52:ed:52:8e:
                    67:d3:ba:d2:76:69:f9:d3:50:df:3a:4f:f5:1a:13:
                    2b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0D:1D:9F:4C:EF:CF:60:78:DE:5C:D5:B4:05:69:AA:C3:27:71:83
            X509v3 Authority Key Identifier:
                keyid:37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:a1:d7:71:0b:82:21:ff:17:83:11:20:52:4f:cb:ce:7c:14:
         0a:92:92:49:70:fd:62:a1:d9:c1:63:96:bd:e4:2c:92:ed:c1:
         d6:de:10:34:3b:a4:5b:6e:90:72:86:ca:a2:15:31:7e:0d:e3:
         61:6f:c2:75:65:4f:9b:2f:55:0a:bc:fa:ba:14:fd:db:05:01:
         ab:1d:9c:0f:f4:ff:ff:a5:0f:2a:19:49:9e:6e:aa:fb:08:16:
         d0:7f:23:60:90:dc:8f:f9:e4:50:cd:06:40:67:3c:fb:fd:24:
         3a:b8:8f:1d:76:7f:6d:b9:7c:3c:6d:cc:f2:fb:a2:99:74:01:
         b0:1e:49:43:db:16:ef:ed:b9:03:4c:43:82:76:9a:c7:89:0c:
         bb:5d:86:73:bd:2a:81:56:e6:cf:a3:ce:38:f9:a4:ca:3a:4d:
         d8:e1:a0:16:9e:c6:31:bb:aa:b2:06:f0:72:bb:28:ab:5e:20:
         4e:89:05:d9:b9:a1:36:29:e9:9a:63:cc:66:dc:64:f6:ab:10:
         76:fb:0c:10:0f:58:c4:e8:f4:50:1a:67:00:19:13:1d:0d:04:
         87:fa:e2:78:3f:5b:29:05:46:f8:18:77:b1:11:22:ca:17:a6:
         7b:e1:c8:1c:f4:ef:a0:fe:3c:da:58:c0:9d:8e:89:36:ae:47:
         b5:7d:d1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:40:32 2026 by rpki-client