Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
File:                     -apja1w-MMegupdDAVtbEhBMt6g.mft (raw, json)
Hash identifier:          xpztz1aisMMEoVK3+Y5MCA4utXyZIPJIifCKRE76Jy8=
Subject key identifier:   25:34:61:4F:3B:51:7F:51:D3:05:13:DF:DA:6C:FF:6F:46:61:95:B5
Authority key identifier: F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8
Certificate issuer:       /CN=A91EE099/serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8
Certificate serial:       0271
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
Manifest number:          025A
Signing time:             Thu 17 Sep 2026 02:33:04 +0000
Manifest this update:     Thu 17 Sep 2026 02:33:03 +0000
Manifest next update:     Thu 24 Sep 2026 02:33:03 +0000
Files and hashes:         1: -apja1w-MMegupdDAVtbEhBMt6g.crl (hash: OCmlSvVvKmlnzxkpNoNaryN5Fb8REDHj+aL9OT5dBlY=)
                          2: 8C7D2730687F11F181765BB26747A888.roa (hash: AoolfexpE1a0GLZ727/bM9alwN/p0RcLVzKJEQs2ZGs=)
                          3: F5AA194CB2C911EF91AE9209C4F9AE02.roa (hash: 06dX2KVWPpmUbkoYBEvGaO5JfDjEnnsVzxsCvPM9wdk=)
                          4: 804FEC802F6711EEB6EECA5BC4F9AE02.roa (hash: /1aH28uRj5sCLfB+J4QIfQMHYuWp9lasDemp4Sum7JI=)
                          5: 89BDDA4A2F6F11EEB73F3231C4F9AE02.roa (hash: 7UTbDfcLmJAZQJQEWgKL+Wduw1Ayjfv8pyNh7/ymhzQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl
                          rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 02:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE099, serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8
        Validity
            Not Before: Sep 17 02:33:03 2026 GMT
            Not After : Sep 24 02:33:03 2026 GMT
        Subject: CN=6aab515f-72ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e1:28:41:5f:51:74:9a:64:0a:0d:4c:3b:55:
                    ca:48:0e:03:ae:d7:80:e9:32:32:c8:28:ac:6d:89:
                    05:34:e5:30:3b:f8:43:28:66:12:c5:71:70:31:e5:
                    14:a6:95:15:6c:b0:4f:61:98:b2:42:93:2f:bd:45:
                    2c:d7:22:50:16:3b:17:03:11:84:86:10:9d:53:5b:
                    c4:a9:b6:5b:bd:6f:aa:5c:8f:a2:1c:a7:0c:ef:ee:
                    ce:ee:57:61:ce:36:31:e3:db:49:ea:34:d5:69:86:
                    01:07:b0:64:d5:37:2b:47:e8:53:cc:a5:67:e8:8b:
                    1d:44:55:ac:f3:4e:c0:55:0b:9b:7c:77:a5:49:b7:
                    11:d0:1e:ed:27:4d:b5:80:34:e6:bd:93:98:f8:18:
                    17:be:c6:4b:a8:39:6f:d1:df:55:08:c6:3e:bc:df:
                    a2:b9:dc:f3:52:ac:d4:c6:50:12:cd:a4:ed:7a:85:
                    21:37:e9:f7:5e:03:b2:24:10:e4:d9:56:9c:58:3a:
                    40:42:28:5f:cc:7b:9c:18:b2:04:18:2f:c2:d9:ee:
                    bf:a0:f8:3a:4e:91:1a:b5:5d:39:25:80:f5:0b:51:
                    97:8c:9d:19:c1:7b:e4:80:29:f9:24:a8:c3:91:77:
                    62:e3:ef:7d:90:c5:2d:3c:4b:74:c9:43:06:5f:eb:
                    f6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:34:61:4F:3B:51:7F:51:D3:05:13:DF:DA:6C:FF:6F:46:61:95:B5
            X509v3 Authority Key Identifier:
                keyid:F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:65:7c:d1:93:a4:7e:7d:9b:e9:73:34:6b:af:02:74:1e:82:
         5b:ae:03:ea:ee:38:82:81:45:5c:27:7b:ae:7f:2e:bd:ef:ef:
         0e:25:d5:ef:20:47:e3:b7:31:e7:07:51:97:17:f0:d7:6e:fe:
         d5:34:c4:df:b4:d7:ad:73:f8:78:94:54:c4:68:78:4c:c8:1e:
         31:49:d8:f8:e7:7c:58:e6:42:d8:f9:b1:c8:d5:a1:4e:09:c7:
         7c:42:3a:ad:66:a5:27:e0:f1:ce:97:5b:f4:cd:f6:0e:6c:14:
         97:26:a4:b2:16:2f:5b:70:bd:f0:82:ca:fa:4e:1a:58:31:84:
         82:3c:1b:a0:c5:c0:16:56:fe:d4:5e:b0:44:e7:1a:ff:f0:d1:
         69:0e:eb:24:26:c5:e5:5f:8b:fa:93:a5:53:7b:5c:2d:77:28:
         f6:46:f1:9e:f0:fd:e0:35:64:6e:73:a2:c1:39:d2:ff:66:ba:
         d4:f5:39:dd:4d:52:b5:7c:a3:dd:94:14:7d:34:19:00:c5:19:
         d3:88:22:a0:b4:89:b0:27:ee:eb:32:50:81:c8:72:e3:f1:5b:
         5a:d1:b5:ac:96:c9:33:08:cf:24:3f:b8:dd:35:59:f0:98:8e:
         ef:46:29:c7:db:32:b0:bf:b1:da:27:0f:41:30:ef:bc:3d:db:
         57:06:3b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:58:43 2026 by rpki-client