Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
File:                     Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft (raw, json)
Hash identifier:          GgT0FDHlSh+gmFJfSHDowrA8COypiYmBifjQXCZla58=
Subject key identifier:   5D:4B:28:A9:63:4A:FC:9C:18:28:64:DB:D9:34:64:17:9A:AA:AC:25
Authority key identifier: 49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81
Certificate issuer:       /CN=A91FDE13/serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
Manifest number:          0106
Signing time:             Wed 09 Sep 2026 06:36:58 +0000
Manifest this update:     Wed 09 Sep 2026 06:36:57 +0000
Manifest next update:     Wed 16 Sep 2026 06:36:57 +0000
Files and hashes:         1: Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl (hash: xKhkXlYTSeHFsPE5bY/2ew1of49XS0ejOFAKXqv+7xg=)
                          2: 5B45D97C2A5611F0B7C8BB20C4F9AE02.roa (hash: ZAcnv2B2glJNz/amDzlP0oQS8f8IykGzbvOZt8DAQOY=)
                          3: 189D8FCE565D11F0B381417EC4F9AE02.roa (hash: V0jiGWcisCYeYKJhJdPZNpTEwuLUAeBQE/p7M60AP1w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl
                          rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 06:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDE13, serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
        Validity
            Not Before: Sep  9 06:36:57 2026 GMT
            Not After : Sep 16 06:36:57 2026 GMT
        Subject: CN=6aa0fe8a-f6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1f:f1:a6:15:91:fd:15:89:13:27:0f:d7:d0:
                    fb:66:93:e7:00:d0:dc:b9:81:05:a3:35:c4:05:52:
                    33:bd:48:b4:04:2c:0d:0e:98:8a:67:5d:6d:b8:69:
                    4a:f8:ad:97:ef:47:11:9c:29:d8:cc:32:d1:58:23:
                    9f:57:40:da:f6:ac:35:9c:66:f0:46:ed:87:0e:d0:
                    ea:3d:77:61:fd:00:e7:c2:8e:da:ac:f1:f1:8e:9d:
                    7d:da:1f:5d:c5:52:dc:1c:61:d2:45:b4:41:9a:47:
                    59:87:d7:7b:45:20:68:c9:06:3d:c2:22:39:65:f5:
                    29:42:90:59:2f:18:8f:f3:df:aa:d2:20:64:d8:39:
                    0f:ef:3c:61:14:c9:84:c8:ed:88:d4:5f:45:e2:46:
                    48:a9:f8:cd:06:4c:1b:55:a1:fc:b0:48:81:4b:6f:
                    8b:1c:d7:3d:11:19:fc:ea:7e:d1:d0:fc:f2:62:b2:
                    bb:fe:ac:9d:51:1d:c1:73:c2:a4:11:24:e3:47:21:
                    6f:45:00:a2:e9:13:8e:7a:8c:a2:a5:4f:a6:a3:bd:
                    ad:56:19:85:73:4d:11:4c:5d:be:69:6f:a3:de:0a:
                    6c:73:4b:e6:8f:ef:48:8a:54:22:0c:56:10:08:c0:
                    38:9b:f7:be:32:5e:e3:e1:21:92:d4:2f:fd:39:b7:
                    ac:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4B:28:A9:63:4A:FC:9C:18:28:64:DB:D9:34:64:17:9A:AA:AC:25
            X509v3 Authority Key Identifier:
                keyid:49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:54:c4:9a:20:ec:ff:6a:d2:5c:22:99:85:74:7c:80:06:46:
         25:08:ac:46:77:1f:2c:dc:69:c3:ed:5f:da:15:be:56:c4:e6:
         c6:e0:f6:b0:43:60:57:df:d5:34:75:2f:46:57:91:6d:37:da:
         17:f7:ae:23:b7:45:84:a3:8a:bd:b1:ca:33:d1:de:32:e7:77:
         5e:c8:0a:cf:f8:3b:76:a6:2c:c3:6a:a7:36:ae:44:7f:30:6c:
         e8:bb:7e:56:01:07:7b:bd:72:22:69:10:a4:23:30:2a:88:cb:
         ae:c9:66:55:a6:43:ed:25:44:43:78:5c:8a:77:de:94:5f:19:
         c7:06:c9:0f:f5:68:77:b7:53:ea:ea:e0:90:ec:04:4b:c8:ff:
         b8:25:52:8a:c4:60:b0:36:8e:de:8d:9f:a3:12:fb:c0:6b:70:
         7e:5e:97:c0:21:43:4f:8a:79:17:97:06:d4:f2:46:29:85:39:
         87:26:5c:d1:3c:a0:0d:df:e1:12:82:7d:96:66:a5:ae:c0:69:
         7c:07:73:51:04:54:51:3f:5f:ec:d5:1a:16:11:ec:36:62:78:
         8f:17:72:7e:e0:74:a1:b1:8a:4d:07:1c:42:6e:bc:74:ec:2e:
         cf:30:de:09:67:05:aa:d1:87:e7:ac:ea:71:ee:7d:46:60:9d:
         fe:73:91:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 22:25:09 2026 by rpki-client