Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft
File:                     1cgQTMoJtQwAk-50IwWIXbT_N9M.mft (raw, json)
Hash identifier:          XNO9EvBtxqCnKs6LVYnoJhGpjnpC4j8qwe3MkF9wu3k=
Subject key identifier:   39:50:ED:B9:93:01:9D:45:02:EE:F0:5B:54:16:4F:91:D7:27:84:13
Authority key identifier: D5:C8:10:4C:CA:09:B5:0C:00:93:EE:74:23:05:88:5D:B4:FF:37:D3
Certificate issuer:       /CN=A91FDC31/serialNumber=D5C8104CCA09B50C0093EE742305885DB4FF37D3
Certificate serial:       44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft
Manifest number:          42
Signing time:             Thu 03 Sep 2026 08:45:19 +0000
Manifest this update:     Thu 03 Sep 2026 08:45:18 +0000
Manifest next update:     Thu 10 Sep 2026 08:45:18 +0000
Files and hashes:         1: 1cgQTMoJtQwAk-50IwWIXbT_N9M.crl (hash: deMst+adyJ3twKqMsEWdErEILm+EdEvWvILoLWhxdDU=)
                          2: C25C2A1A4A3211F1BD5DF90392833773.roa (hash: 4kmKcblD4wdTmxGgk/4VMvZd46VPu73tC+rcETmeaGY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.crl
                          rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 08:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDC31, serialNumber=D5C8104CCA09B50C0093EE742305885DB4FF37D3
        Validity
            Not Before: Sep  3 08:45:18 2026 GMT
            Not After : Sep 10 08:45:18 2026 GMT
        Subject: CN=6a99339f-f508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b0:7e:a1:6d:66:7e:e7:cb:3b:25:9c:dd:69:
                    6c:34:53:f5:d5:9b:6e:79:ab:e0:89:b6:8c:f5:43:
                    69:0f:e8:a8:84:cd:7c:b8:c9:12:00:f1:48:c4:40:
                    02:32:70:14:ba:16:1d:23:4f:5f:a3:3b:ad:4e:6b:
                    55:7d:8b:ca:f2:02:6a:56:41:7e:c0:ec:cb:07:a6:
                    7f:f4:8f:6f:c8:d7:8d:b5:34:34:13:18:55:78:1a:
                    32:2e:ee:e0:ec:c5:e1:30:be:70:01:7d:9f:a0:32:
                    be:60:2d:09:1b:0c:d5:0b:05:12:46:00:c5:68:28:
                    c1:b0:b9:dd:1a:96:50:ea:97:1c:5c:a8:7e:d1:cb:
                    93:94:45:14:3b:34:85:fd:6b:ce:d1:a3:3b:64:31:
                    bd:05:dd:e8:83:56:85:ea:43:72:4b:a5:51:15:2e:
                    18:65:bc:2f:70:c6:aa:a7:94:f0:10:c1:72:c7:2a:
                    9a:99:7b:04:f7:c9:f4:ca:66:1f:85:dd:87:25:d2:
                    98:eb:93:fc:c0:88:93:6e:da:9a:46:25:fb:b4:56:
                    2b:33:ed:21:f2:6c:5e:1e:22:f1:26:f3:7f:ca:1f:
                    9c:ca:32:fd:76:ad:fe:0d:f4:b8:ef:e2:79:23:86:
                    a8:01:59:ee:b2:76:91:f1:1c:52:d4:ee:04:ca:72:
                    5b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:50:ED:B9:93:01:9D:45:02:EE:F0:5B:54:16:4F:91:D7:27:84:13
            X509v3 Authority Key Identifier:
                keyid:D5:C8:10:4C:CA:09:B5:0C:00:93:EE:74:23:05:88:5D:B4:FF:37:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:dc:b2:f7:75:12:ea:25:b9:c6:53:a3:d8:74:82:83:68:7b:
         0d:d8:c5:0a:a5:11:d5:7c:e0:ca:9b:b7:1b:8d:83:52:91:68:
         ea:a5:81:61:1b:e0:01:d9:6c:05:50:1a:74:1e:09:a2:5a:8a:
         9c:dd:55:c6:fe:34:08:04:40:cf:9d:b7:ae:7f:1f:64:2c:75:
         cf:10:09:21:61:16:ac:1c:51:cc:fa:75:80:61:c5:fa:96:4a:
         ad:a7:88:b1:c5:03:25:88:a5:18:9c:1a:f6:09:cf:2a:33:95:
         4f:b9:23:14:0e:08:41:49:e9:62:a9:76:55:b2:15:1d:35:79:
         48:b6:41:e3:c3:1e:c9:0b:6a:83:f3:99:40:be:73:11:1a:6a:
         70:3b:79:e2:48:97:77:29:8c:65:ab:81:f0:68:d7:07:8a:61:
         87:f8:0b:c8:3d:ad:7f:25:c0:ac:aa:42:f3:0a:bb:e4:69:f4:
         9d:95:ea:50:e0:59:31:e6:8e:3b:72:05:90:40:e2:2d:bb:1e:
         53:92:e9:d1:85:1a:63:ac:70:6c:a7:96:d4:50:3f:d5:af:33:
         9f:70:02:bc:f7:8f:5c:6c:8e:05:af:79:0d:ba:ca:ae:4a:31:
         e2:80:9d:10:e7:a8:02:5f:f7:b0:6f:9a:ca:ee:74:d8:42:6b:
         f8:f9:95:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:26:32 2026 by rpki-client