Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
File:                     Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft (raw, json)
Hash identifier:          XgJ2lNSAai0Ihzn0y78pPC2UZFwpbkeuGWMIeP4Xj/Q=
Subject key identifier:   64:13:ED:C8:0B:82:66:E2:DB:13:57:36:95:05:FF:FA:B5:7E:AA:87
Authority key identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58
Certificate issuer:       /CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58
Certificate serial:       0D24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
Manifest number:          0D19
Signing time:             Thu 10 Sep 2026 18:15:23 +0000
Manifest this update:     Thu 10 Sep 2026 18:15:22 +0000
Manifest next update:     Thu 17 Sep 2026 18:15:22 +0000
Files and hashes:         1: Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl (hash: lTI3TzpOATd7eMXp+1dCNDiDSqqTUbXUMpCyZ07Gq90=)
                          2: A0E062260A8C11EAB25FD253C4F9AE02.roa (hash: 5Ti6m1LIl0TQP6ix0VQfMwgNVX0N4OYoM9ENVwcx4C0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl
                          rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 18:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3364 (0xd24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9D5D, serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58
        Validity
            Not Before: Sep 10 18:15:22 2026 GMT
            Not After : Sep 17 18:15:22 2026 GMT
        Subject: CN=6aa2f3bb-f4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fe:92:21:dc:28:e4:0c:ae:40:84:61:6f:1e:
                    3b:64:44:07:c6:92:b3:00:73:f5:24:76:eb:df:ad:
                    a7:5d:f6:09:be:d1:1e:3c:4e:3f:5a:d1:d0:f1:08:
                    16:b2:71:0a:be:e4:77:8a:fc:fe:31:b4:51:c7:dd:
                    8c:12:09:b2:2d:c3:e1:57:e7:e9:e9:16:e9:be:1b:
                    1e:8e:a9:fc:94:ed:f6:95:92:53:0b:d8:61:cb:62:
                    45:37:9b:0c:b0:2a:73:b3:a5:e3:86:23:7b:91:3c:
                    72:b3:50:d9:db:19:f9:5b:8e:58:4d:e7:9b:ad:3c:
                    35:26:fc:b8:cb:4d:65:3e:a0:44:85:41:03:c0:a1:
                    e4:5c:83:da:fd:a9:58:84:b9:38:a1:25:a9:d4:f2:
                    c5:6b:f7:35:da:53:13:a2:82:7f:55:16:6c:63:d4:
                    67:15:4d:02:6e:09:41:f5:d3:8c:d4:11:51:94:a3:
                    15:15:d7:97:4d:b4:58:bb:f2:f8:e2:97:60:e0:41:
                    02:b3:33:45:29:05:d4:c2:59:50:5a:f5:17:f3:c7:
                    d9:92:11:a1:55:58:aa:7e:74:b2:a3:f4:45:78:b4:
                    55:bc:b4:d0:44:df:1b:0c:60:8e:b9:6f:91:ab:3b:
                    58:38:29:83:cf:37:38:bd:8b:e3:86:5e:59:8e:39:
                    1a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:13:ED:C8:0B:82:66:E2:DB:13:57:36:95:05:FF:FA:B5:7E:AA:87
            X509v3 Authority Key Identifier:
                keyid:37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:d8:de:48:df:90:e8:9b:eb:93:c9:68:0f:f3:87:9c:46:06:
         13:1a:ee:2b:94:4a:0b:70:5c:2e:06:d9:49:63:16:b4:dc:47:
         16:fd:6f:7a:f8:bd:8b:b5:af:c5:ea:94:b5:1a:b9:6c:d3:e0:
         28:3f:79:12:cb:12:28:cb:bf:a0:1d:a9:d0:e6:fa:e7:88:7d:
         a5:e8:84:c9:93:73:d4:c9:15:8d:b2:97:7a:85:a0:6a:cd:32:
         d5:f0:10:49:bb:02:91:28:8a:83:33:43:15:42:27:27:dc:a6:
         59:5e:c3:e6:44:75:1e:2d:23:f7:2e:6f:13:69:4f:d7:b3:7c:
         2d:97:b7:fe:ba:8c:6e:29:fe:9f:b3:34:8d:b3:94:bd:c8:af:
         62:d5:73:88:f0:01:c3:f3:d7:b3:8a:aa:63:48:d2:b2:9f:00:
         bc:25:1a:92:20:3b:32:4a:ca:d3:62:f2:29:47:09:52:25:bf:
         cb:a4:ec:e4:2a:ab:16:32:cd:c9:50:12:c5:0f:04:26:29:08:
         4d:9c:24:e0:22:40:78:dd:39:7b:e6:f8:26:06:7f:19:da:0b:
         f4:2b:80:d8:ae:08:21:76:a4:c6:72:b4:ca:cc:12:95:88:7c:
         eb:b7:62:5f:82:76:8e:ea:a3:4c:28:72:78:32:db:69:ab:8e:
         6e:f5:f3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:55:43 2026 by rpki-client