Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
File:                     G1Zt71944xm_wNFADedV4mSoK7w.mft (raw, json)
Hash identifier:          uh43Cjlkd8Zt03Xj+tWZBecpuYWAjPhX3fn3fky4CRg=
Subject key identifier:   A9:F0:29:E2:CE:7E:7A:C7:4B:84:32:4F:0F:B4:F4:61:B8:14:EC:A2
Authority key identifier: 1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
Certificate issuer:       /CN=A91C20AB/serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Certificate serial:       09E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
Manifest number:          09C5
Signing time:             Fri 04 Sep 2026 19:47:50 +0000
Manifest this update:     Fri 04 Sep 2026 19:47:49 +0000
Manifest next update:     Fri 11 Sep 2026 19:47:49 +0000
Files and hashes:         1: G1Zt71944xm_wNFADedV4mSoK7w.crl (hash: p6mvHT7ffjd9d2DCiAdhSInYIbD2e5420IY1BHC4q1w=)
                          2: 28D36892B09411EAA964465EC4F9AE02.roa (hash: uB90XoJd0h+ZsfjSZb2jo0kKEK2zlo/T12QD2KhR6to=)
                          3: 2979BC38B09411EAA964465EC4F9AE02.roa (hash: 3TgfJcKtVv25yE8b/IOKhDazNbjHxuANTNvhbFUhyMk=)
                          4: AB659244056211EBAE3DBC4CC4F9AE02.roa (hash: 6SFxnAYtEmDY0FSpqWSl0msvr8nqW/ZhQvTYvJBPZWo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl
                          rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2528 (0x9e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C20AB, serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
        Validity
            Not Before: Sep  4 19:47:49 2026 GMT
            Not After : Sep 11 19:47:49 2026 GMT
        Subject: CN=6a9b2066-2e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:9c:4d:20:fb:53:76:ce:99:d4:8e:6e:85:
                    70:4c:ae:c6:3e:e1:f0:ab:24:32:e2:ef:e9:89:46:
                    7f:6a:d0:09:5a:54:1f:c9:17:25:b3:d7:f8:6a:c7:
                    07:b3:73:7a:7b:7c:4b:7c:38:20:93:58:5d:d4:b6:
                    86:d6:5d:d2:f0:87:db:11:5e:3d:b0:8c:ed:c6:73:
                    f2:65:21:7d:71:f7:3f:c0:46:a6:9c:b3:b4:11:a4:
                    54:a0:4c:60:4b:f6:a2:06:ee:51:3d:b5:a3:f9:20:
                    73:e4:0b:87:4f:af:4c:c7:ca:4d:64:f9:06:43:c7:
                    f9:03:a6:d8:ef:0a:89:35:42:d9:49:d0:23:4d:a3:
                    30:d6:df:87:23:a1:fd:a2:a0:49:f4:6b:36:66:bb:
                    4b:85:c8:92:5c:44:fa:0a:67:91:d1:a4:8e:e3:96:
                    70:43:54:86:41:cc:28:96:35:a0:61:cb:34:0b:a1:
                    21:c6:a2:cc:3d:ee:ef:c3:18:9c:52:ea:e9:fc:27:
                    79:ed:5d:4a:9c:72:f5:b6:9a:c0:0e:96:79:d0:e7:
                    45:00:cd:86:40:e5:61:88:59:d5:78:d0:56:bb:46:
                    8e:c8:aa:20:17:3d:0e:bd:4e:b6:cc:3e:21:09:76:
                    2b:5b:c0:e9:95:3d:8c:4d:7e:46:83:4b:87:87:40:
                    f7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F0:29:E2:CE:7E:7A:C7:4B:84:32:4F:0F:B4:F4:61:B8:14:EC:A2
            X509v3 Authority Key Identifier:
                keyid:1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b8:be:63:cc:78:ea:64:66:61:f6:1d:bc:d6:12:84:64:57:
         ab:9a:98:ac:b0:ff:17:3b:d1:da:6e:67:fd:68:c3:55:18:23:
         85:e3:9a:bf:b1:58:74:95:4b:c1:44:2b:8c:96:b9:8b:44:4b:
         ef:94:03:35:b7:31:17:5b:19:e8:4f:32:72:9e:d3:a9:59:13:
         fc:f2:c2:21:34:20:b3:9a:fc:0f:b6:31:bf:63:e8:d9:77:21:
         84:1c:17:5b:48:72:dc:77:c0:96:85:b1:e5:5e:08:51:f9:7f:
         48:98:9b:c5:3a:9b:c8:43:45:1f:73:f2:3f:fe:2a:87:8b:fc:
         36:ed:89:20:86:86:ea:02:67:48:6d:f6:5f:da:77:17:58:93:
         8f:33:67:f0:43:e0:4b:79:00:bf:8c:b8:c1:c8:09:f3:a8:87:
         e7:01:80:52:e6:ee:0a:b8:b1:5a:50:18:c4:6e:e8:90:e4:e1:
         99:43:38:c7:81:07:54:47:32:6e:af:1d:73:b0:bc:03:ed:b6:
         1d:12:e4:27:00:cd:12:a0:87:61:ff:8b:67:ef:99:8a:3a:6d:
         49:bd:b7:d4:ec:0c:ca:e5:5b:a7:7d:e5:d4:7a:4e:16:a2:5f:
         73:01:5f:f2:93:c9:61:7a:68:b2:7e:72:64:4c:d8:f3:cc:72:
         89:a5:1a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:48:12 2026 by rpki-client