Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
File:                     u-Sfy0H1Amo1v2yTuR_f88iMc24.mft (raw, json)
Hash identifier:          M4zcD+xtKZ8Cw4I2bBd6xaemU7afhb14XHKwL+5alMI=
Subject key identifier:   D5:B8:34:CB:81:39:F0:E3:24:E0:B8:3B:EA:EC:D3:30:79:13:CC:79
Authority key identifier: BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
Certificate issuer:       /CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Certificate serial:       0999
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
Manifest number:          097B
Signing time:             Fri 04 Sep 2026 19:56:34 +0000
Manifest this update:     Fri 04 Sep 2026 19:56:33 +0000
Manifest next update:     Fri 11 Sep 2026 19:56:33 +0000
Files and hashes:         1: u-Sfy0H1Amo1v2yTuR_f88iMc24.crl (hash: Ch6qZ5y6zEZFcku9o6IgM1yac6GlQDeTauGLHW8lGLc=)
                          2: 6B8789A63FA011F1B60E4CC5BB833773.roa (hash: eUeT9MfyQplwOYsEvB1DK9Ul4fMRh4BuNuH+20Gy/0Q=)
                          3: 65051AB6BF3C11EAAF328582C4F9AE02.roa (hash: J5TlVE9TaJMgIGEY3wJEZY2JAbPuoZdGlfLWjr6sNVQ=)
                          4: 65877060BF3C11EAAF328582C4F9AE02.roa (hash: S1YQDpfRZfYWxWzS0yYZYUtJLVH3RsmKcbHcWJLLIjw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
                          rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:56:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2457 (0x999)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEA56, serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
        Validity
            Not Before: Sep  4 19:56:33 2026 GMT
            Not After : Sep 11 19:56:33 2026 GMT
        Subject: CN=6a9b2272-a281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ef:67:d7:80:e9:88:af:b9:5a:8f:35:32:a5:
                    b8:6d:27:53:1d:d8:ff:42:df:be:d8:53:37:86:53:
                    bb:24:5b:07:28:75:5c:da:b9:c9:7d:07:17:5b:4a:
                    69:53:e0:82:57:12:c3:62:02:f8:30:30:b6:46:2c:
                    21:0b:58:aa:5f:2d:36:3d:c6:79:86:41:89:72:0c:
                    5c:6e:7a:a7:32:e0:29:d9:c1:45:2c:9d:63:c6:07:
                    ae:6f:92:c6:8a:9b:55:63:03:96:3c:f4:e3:80:ec:
                    16:b7:66:46:f3:fe:c5:c4:fc:71:aa:3b:cc:12:7f:
                    4c:be:32:a0:18:e0:0e:50:e5:c8:64:1d:3f:ef:8d:
                    91:00:19:77:50:30:31:4b:ff:aa:f0:a6:ca:e7:50:
                    81:24:40:bc:f0:d5:2a:4e:a1:68:9c:d3:3c:ea:88:
                    59:49:39:83:2c:a5:86:a0:2d:eb:e7:58:19:99:25:
                    a0:f0:89:4c:6b:8f:60:49:56:e3:37:80:7e:34:9e:
                    c9:b5:67:f5:6c:25:b6:7d:c6:6a:40:16:86:84:6a:
                    2b:78:1a:cb:23:b3:9a:3f:a6:51:f1:3a:5b:3e:0f:
                    0f:87:1a:a9:02:85:23:f0:73:53:fd:2c:57:e5:92:
                    69:70:22:0d:a4:78:fd:aa:ef:81:94:75:5f:fa:c1:
                    96:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B8:34:CB:81:39:F0:E3:24:E0:B8:3B:EA:EC:D3:30:79:13:CC:79
            X509v3 Authority Key Identifier:
                keyid:BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:90:68:f8:11:30:d3:50:ec:6c:0c:b5:74:cc:bb:92:ae:ed:
         79:a6:c1:31:2d:17:a8:c5:16:d2:9d:81:fa:28:79:79:bd:af:
         a8:4a:ae:96:74:6d:38:d7:90:f8:80:83:06:95:4d:68:fc:09:
         46:54:e2:62:82:92:6d:20:73:a8:e2:11:c3:d4:31:c8:4b:bf:
         7f:23:00:91:4b:76:59:01:64:de:26:5c:bc:fe:52:14:f5:b0:
         6c:76:20:f0:77:48:54:b9:d0:53:65:90:b3:2d:5c:d7:6c:35:
         99:45:89:c3:dd:17:d9:99:73:e6:be:c8:01:36:f1:c7:b8:fd:
         bc:2f:64:10:ed:77:44:66:4a:14:b0:fc:73:1d:4e:e3:9e:6f:
         c7:26:c6:a3:3b:eb:4d:c7:66:39:68:a2:b2:84:3f:28:1a:de:
         08:2d:5d:fc:d4:e6:3d:62:aa:de:d8:1a:31:c3:1a:d2:6b:8f:
         6e:b8:47:69:57:10:cc:f3:09:d2:19:bc:18:6e:c5:be:2e:7b:
         b3:5d:d3:e9:73:0a:6a:c2:41:cd:f8:ab:e7:8b:af:fc:b1:62:
         d2:16:8b:67:9f:bd:a8:e7:e2:6a:21:24:2f:96:95:d4:4c:33:
         e3:83:ab:66:e7:ab:ae:bc:89:9f:b0:6e:02:87:9a:d8:a5:c0:
         b7:8b:db:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:59:04 2026 by rpki-client