Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
File:                     whEvRNRFjxhc25rZqRr4KQZInMY.mft (raw, json)
Hash identifier:          ZETzUn6LVGOUMdvg3eJL+lPpFhNj4zwNzymzuxTsMtE=
Subject key identifier:   3F:3A:91:C5:D7:CA:6F:7C:50:84:86:80:00:71:89:7D:62:8E:23:6A
Authority key identifier: C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6
Certificate issuer:       /CN=A91C167F/serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6
Certificate serial:       01EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
Manifest number:          01EA
Signing time:             Fri 11 Sep 2026 03:29:41 +0000
Manifest this update:     Fri 11 Sep 2026 03:29:41 +0000
Manifest next update:     Fri 18 Sep 2026 03:29:41 +0000
Files and hashes:         1: whEvRNRFjxhc25rZqRr4KQZInMY.crl (hash: zEt05lnKifbDBsq4EFCYhjNnxPhRjkCr6PhrlbGIaG0=)
                          2: 7FC75E34C4B211EEB684BF7FC4F9AE02.roa (hash: wCp+IlbpvYciIPFriRIjYQ57dN5tnAhIJFx/hlE1UvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl
                          rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 03:29:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C167F, serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6
        Validity
            Not Before: Sep 11 03:29:41 2026 GMT
            Not After : Sep 18 03:29:41 2026 GMT
        Subject: CN=6aa375a5-11a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bf:35:3e:5d:bb:05:43:fa:09:ba:0d:0d:f6:
                    77:a9:73:e4:3f:2b:54:e3:c8:03:26:6f:e5:e0:a4:
                    b9:06:05:0f:1b:ab:51:14:2e:51:3b:0e:98:0c:c9:
                    22:a6:b0:2c:e4:ec:8e:ce:64:cc:3b:c2:55:28:d5:
                    f8:fe:b4:31:17:e9:f0:1a:30:48:5d:9a:87:5a:69:
                    f7:75:39:11:6d:fb:e5:fa:3a:c2:7b:27:ef:9c:81:
                    df:02:2d:a7:fc:bf:52:4f:36:a4:2f:57:bb:33:4e:
                    f5:2f:ab:42:83:d4:2a:e0:9d:72:bc:34:e5:ac:38:
                    24:fd:75:5e:08:fa:fe:35:fc:3a:a1:b6:38:15:51:
                    be:3c:d3:a6:34:4d:d6:2c:de:0b:2b:25:c3:54:1a:
                    73:ef:48:c6:de:f2:32:2a:7c:29:d7:c0:5d:7e:33:
                    74:49:e2:93:f2:d8:5e:00:42:0d:e6:57:0a:36:9f:
                    d8:d3:62:c5:c6:34:73:54:26:c9:09:aa:6f:ec:6c:
                    42:98:68:86:98:a4:3d:cd:a5:6b:b9:f0:c7:10:94:
                    bc:1b:9d:7a:ef:36:e8:2f:f6:a7:80:65:0e:0e:8c:
                    00:c9:fe:35:5f:1d:9d:ff:3f:6a:4d:e1:b0:66:f3:
                    eb:53:a8:63:06:4d:83:28:ba:61:3b:dd:92:de:af:
                    4a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3A:91:C5:D7:CA:6F:7C:50:84:86:80:00:71:89:7D:62:8E:23:6A
            X509v3 Authority Key Identifier:
                keyid:C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d2:ba:c5:9f:11:fa:58:f2:56:79:66:1a:d5:db:1d:68:8a:
         e4:0e:e8:ff:14:4f:7a:9c:b3:d9:3a:53:3f:ab:fb:1f:da:b6:
         43:aa:34:d1:65:33:2a:d0:52:85:ac:70:c8:3f:dc:d9:da:2c:
         22:1f:42:23:6f:dd:f0:9e:84:a2:9e:40:7c:ae:3d:d6:05:45:
         3c:4d:9d:2e:29:64:cf:07:ce:33:44:93:63:28:76:a7:b7:94:
         b0:37:ef:67:98:16:0b:c1:df:3f:61:8b:1f:5f:ad:b3:97:33:
         bc:a0:aa:ee:1c:6a:68:e9:be:c3:6c:ff:aa:d6:60:dd:0c:7f:
         31:4e:a9:2d:b3:3c:13:e3:cf:52:e3:28:ac:0a:94:93:7a:74:
         b4:e9:97:7d:f0:b0:4f:cc:75:4f:26:1d:a7:ff:f8:25:b7:8e:
         a9:27:75:e7:34:55:e0:79:04:c4:60:bb:17:4d:1d:03:85:83:
         fc:40:f8:d4:bb:e0:17:40:b1:f4:c9:7d:99:19:62:92:31:05:
         d7:29:27:98:64:41:ef:7d:a5:f9:84:28:db:de:45:df:31:a4:
         45:00:9e:bb:e1:ef:e7:86:09:3f:46:5e:44:2a:d0:98:9e:8d:
         b7:0f:c8:c3:c0:fa:0e:dd:12:6b:47:d8:e4:b7:83:57:46:4e:
         7d:a9:33:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:29:20 2026 by rpki-client