Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft
File:                     mgI7gKvPTmeX04jA3oFgoW6xXf4.mft (raw, json)
Hash identifier:          DzUpjdpyMgzGvVIeWzcIQmPeq4qTj+2uHbO4nFDo1/w=
Subject key identifier:   15:35:35:AA:62:7C:91:5E:B6:A0:65:03:49:B3:89:A4:05:A1:3B:77
Authority key identifier: 9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE
Certificate issuer:       /CN=A91EF6EF/serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft
Manifest number:          E9
Signing time:             Tue 15 Sep 2026 06:22:37 +0000
Manifest this update:     Tue 15 Sep 2026 06:22:37 +0000
Manifest next update:     Tue 22 Sep 2026 06:22:37 +0000
Files and hashes:         1: mgI7gKvPTmeX04jA3oFgoW6xXf4.crl (hash: VUw7jHI+Lfw6jARv1HCDgGuOQVLSR1PSZwg0N/rgDF4=)
                          2: 3C15F928579311F0B296C030C4F9AE02.roa (hash: PcxApA6oFAaKQrQP/VJxBmFi70SG6p/mmGbv5cjRlVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl
                          rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 06:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF6EF, serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE
        Validity
            Not Before: Sep 15 06:22:37 2026 GMT
            Not After : Sep 22 06:22:37 2026 GMT
        Subject: CN=6aa8e42d-a204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b4:d3:7b:f3:3a:f9:f6:96:81:2b:81:f6:39:
                    81:63:8b:b6:9f:fc:16:53:00:28:87:49:fa:4f:c7:
                    ec:f7:c6:4a:ea:23:7d:4c:41:77:60:0d:d2:9f:21:
                    dd:36:f0:2c:1c:5b:0d:9d:23:52:2d:18:57:36:57:
                    bd:d2:ef:27:fa:0b:89:24:d3:32:f1:ce:a2:7f:b0:
                    c7:57:ab:d2:3d:11:f5:3a:81:51:11:46:8e:1b:8c:
                    ad:bc:a6:20:4c:72:05:85:1e:8b:c4:37:30:e7:db:
                    67:df:bd:09:49:91:53:70:8a:5b:ba:42:b0:09:17:
                    0a:09:6f:9c:fc:e3:1c:2e:c2:38:00:79:da:81:8a:
                    04:3f:a0:7e:c0:af:83:db:90:87:04:74:af:0f:3c:
                    f6:4d:ca:94:43:35:1c:e7:56:dc:4d:78:49:7f:2d:
                    d0:0f:c5:d7:c9:2a:fa:e2:ea:3e:e2:d6:5d:96:81:
                    a2:e4:fa:70:cf:28:97:73:27:d9:b0:67:b8:68:9f:
                    24:bc:3f:31:34:62:86:e0:82:fd:78:ff:c6:7f:73:
                    03:f7:73:a6:ba:00:38:d4:8d:b2:a7:8a:e2:54:4d:
                    e3:8b:21:ec:b6:0d:d9:12:d6:21:3e:6e:bd:fd:bb:
                    38:84:a5:66:3b:29:60:7a:4d:53:1e:77:78:24:5e:
                    9b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:35:35:AA:62:7C:91:5E:B6:A0:65:03:49:B3:89:A4:05:A1:3B:77
            X509v3 Authority Key Identifier:
                keyid:9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:2b:ce:17:10:91:33:2c:f6:3a:a6:01:3d:d9:dd:13:b1:53:
         da:82:48:2c:b9:82:17:bb:b3:c6:59:ed:c9:31:d9:5c:1a:31:
         9d:51:c5:b2:3f:b5:aa:a4:22:c7:ac:53:d3:6f:33:42:5c:9f:
         30:ad:1e:98:34:2f:ef:86:1e:39:4f:55:18:42:5e:94:eb:62:
         aa:95:ee:bf:2a:06:7b:99:2d:d0:3f:e3:70:dd:d6:a8:fe:ba:
         8f:32:11:a8:9d:16:07:ce:fd:6b:57:18:24:07:c6:9b:1b:94:
         a5:c1:35:f7:16:b7:7d:99:d7:60:a2:86:c9:c5:29:b1:d5:93:
         21:15:fa:8f:a9:5f:4e:a2:ff:57:bd:19:7e:da:7f:83:3a:27:
         a6:a2:79:18:dd:15:10:a2:d6:8c:b7:1f:cc:a7:a2:a1:6f:ed:
         ff:e1:3b:e0:b2:15:9b:4b:71:45:ec:57:0a:13:f2:ff:37:d9:
         60:49:b2:e3:e7:b6:5b:7d:f2:9f:62:a3:89:19:5f:2a:5c:55:
         d1:15:64:a2:c9:0b:f0:13:02:c2:91:d8:e4:7a:71:5d:7e:c8:
         9a:a9:80:12:c4:45:62:4a:6f:59:f9:58:3c:48:2a:62:91:b9:
         78:06:d0:6b:76:9a:cd:63:93:27:c5:45:c7:f4:1d:8c:8c:96:
         4c:8b:98:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 16:27:27 2026 by rpki-client