Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft
File:                     PN9D1xf8WEnyOpTimncrKKXXAeM.mft (raw, json)
Hash identifier:          1emJEsHp3e/ZZMAsCpZi5BSzKZkbKspljS0ChbfCCzQ=
Subject key identifier:   F4:52:A0:41:6C:46:90:7E:52:14:83:02:D0:5C:8C:8B:68:AD:58:43
Authority key identifier: 3C:DF:43:D7:17:FC:58:49:F2:3A:94:E2:9A:77:2B:28:A5:D7:01:E3
Certificate issuer:       /CN=A91E3BB3/serialNumber=3CDF43D717FC5849F23A94E29A772B28A5D701E3
Certificate serial:       0938
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft
Manifest number:          092C
Signing time:             Wed 12 Aug 2026 19:57:55 +0000
Manifest this update:     Wed 12 Aug 2026 19:57:54 +0000
Manifest next update:     Wed 19 Aug 2026 19:57:54 +0000
Files and hashes:         1: PN9D1xf8WEnyOpTimncrKKXXAeM.crl (hash: 6IwTSW5NPQMznqaeMC1e4Mxlu7+BT1RaH5fP0HEJY18=)
                          2: D0CF108ED85111EF9DC0826CC4F9AE02.roa (hash: wbC8vyImx6v6ewZMr1D8zOdi43W+XjTwWRTdg25wKL8=)
                          3: 4HgjSuBlPABaHgROvDD8HEMkcvQ.asa (hash: R3jFLK1KPKNoasUTSWi6tG8j11b8DnXxyWlLxaUSpHE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.crl
                          rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Aug 2026 19:57:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2360 (0x938)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3BB3, serialNumber=3CDF43D717FC5849F23A94E29A772B28A5D701E3
        Validity
            Not Before: Aug 12 19:57:54 2026 GMT
            Not After : Aug 19 19:57:54 2026 GMT
        Subject: CN=6a7cd042-d148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0c:46:aa:5d:55:4b:e2:81:e6:d5:24:e2:ff:
                    aa:29:9c:6d:b6:69:03:33:e8:f7:4d:7f:12:76:00:
                    3f:e4:a9:04:ba:84:68:51:0e:aa:38:f3:2d:aa:a6:
                    24:50:b4:b7:2e:8c:8c:9a:2b:8f:4c:39:71:b5:7e:
                    4d:99:54:08:9a:2f:90:c8:bc:0f:2b:c0:82:8a:e5:
                    09:a8:ac:36:43:bb:d5:80:9c:7c:54:7e:a7:ed:3c:
                    cc:04:63:ac:19:16:fe:15:e2:64:0f:45:61:ac:af:
                    a9:51:e3:d9:77:98:a6:46:ed:f8:36:35:da:61:d2:
                    b6:e9:b3:46:15:b5:f8:33:5a:4e:e7:69:e6:cd:50:
                    03:4b:27:96:8e:58:9a:00:de:91:f9:2e:07:a4:ca:
                    93:8f:41:dc:ca:44:e5:fa:48:7a:fe:45:59:c1:8d:
                    d2:3b:16:e7:36:1d:b3:36:18:bf:02:33:5b:fd:35:
                    a9:68:54:c0:14:4b:53:fc:18:58:bf:4c:1c:39:bc:
                    f4:f8:d0:32:95:8a:07:14:aa:d5:35:4c:03:06:ce:
                    ed:22:e9:3a:cc:d7:01:a5:f2:82:5c:86:79:40:1b:
                    ea:ff:38:8b:f4:14:ec:2f:82:e0:e3:60:57:10:ef:
                    a7:05:b1:23:9c:61:b0:ec:f1:ff:f7:84:56:4c:8d:
                    f0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:52:A0:41:6C:46:90:7E:52:14:83:02:D0:5C:8C:8B:68:AD:58:43
            X509v3 Authority Key Identifier:
                keyid:3C:DF:43:D7:17:FC:58:49:F2:3A:94:E2:9A:77:2B:28:A5:D7:01:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:26:e0:ad:80:3b:3a:e1:fa:c8:68:6a:ea:dc:c7:03:d7:e0:
         5e:cd:89:4f:02:76:12:1f:47:96:22:66:85:55:c1:48:13:1e:
         62:d7:3d:70:71:53:1b:23:22:82:17:f0:85:c5:7a:51:f2:f4:
         c0:6f:ca:52:8b:7c:43:78:d6:1b:06:84:b1:11:3a:d9:5d:68:
         5c:60:46:2a:57:77:30:b0:5e:1c:96:5d:13:e1:c5:3b:d9:b9:
         da:d7:1d:56:03:8a:10:9b:41:6a:a9:6e:24:3e:db:e9:6a:ad:
         4b:ae:49:7d:6d:51:df:6d:c2:65:39:5e:f2:1b:d4:77:4d:eb:
         46:d4:b0:fc:19:fe:50:d9:ba:9e:ba:93:51:ec:19:45:b1:aa:
         7f:87:b6:6b:89:40:bc:4d:c0:28:96:e7:9f:0b:25:a4:c0:e9:
         97:ac:76:bf:55:24:0a:2f:5a:2d:f0:a9:b6:c4:59:38:6e:27:
         39:f2:72:cd:46:6f:34:47:24:46:b8:fd:1f:d4:ee:7e:35:ef:
         21:e6:50:27:ce:18:1a:b2:cf:46:7a:10:f9:4d:48:08:f8:c5:
         71:26:03:1f:7c:7f:f2:56:80:e9:b5:9c:02:31:65:e7:28:a6:
         11:e5:4e:dc:b9:0b:e2:25:cb:8c:57:32:b7:e5:6d:a0:0d:cd:
         af:f9:d5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:51:38 2026 by rpki-client