Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
File:                     PurfFFrim0gkCj-6OvvZSajxU10.mft (raw, json)
Hash identifier:          vY07Tfuu50TSLAJwYGNjhC/RAhobtf6XxiXVkYABHDo=
Subject key identifier:   BA:3F:AD:6C:3F:36:26:89:BF:1B:C3:70:77:FC:FB:0B:27:42:74:FF
Authority key identifier: 3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D
Certificate issuer:       /CN=A91F823E/serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D
Certificate serial:       0417
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
Manifest number:          0410
Signing time:             Thu 29 Oct 2026 00:33:34 +0000
Manifest this update:     Thu 29 Oct 2026 00:33:33 +0000
Manifest next update:     Thu 05 Nov 2026 00:33:33 +0000
Files and hashes:         1: PurfFFrim0gkCj-6OvvZSajxU10.crl (hash: eANzSO81gXv45Di20JZXwLuJLeRIvJ9kGvqPoCN5spM=)
                          2: B3481ED4D5B611ECA61EEC28C4F9AE02.roa (hash: SFrPVIEcm3Sob1UjztJCMJRsgyH7hMthtgc0D0N7bCM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl
                          rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 00:33:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1047 (0x417)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F823E, serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D
        Validity
            Not Before: Oct 29 00:33:33 2026 GMT
            Not After : Nov  5 00:33:33 2026 GMT
        Subject: CN=6ae2945e-4b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a8:84:15:46:aa:17:5c:73:d2:26:a0:11:28:
                    ea:ef:c8:b2:5e:0b:9e:2b:72:6c:b6:82:45:29:fd:
                    fc:03:46:b2:5f:93:97:3d:ae:a5:ff:7e:16:70:19:
                    15:59:ef:e6:f3:20:a7:c5:52:37:e0:44:31:a5:f7:
                    38:15:73:b0:d7:44:5a:95:a8:38:29:00:6c:86:5d:
                    44:03:59:41:6e:8d:03:63:cc:da:c3:60:a1:f1:4c:
                    2d:c6:23:dc:a6:af:c6:09:bf:f1:b8:d7:14:1e:42:
                    e3:15:88:ec:d4:80:cf:4a:7c:68:ef:a8:95:96:6e:
                    38:d0:1c:94:ef:81:54:45:9d:0a:81:49:fc:2d:8e:
                    49:fa:21:27:ed:a7:da:53:e8:d5:c4:fd:3a:c7:d9:
                    8b:bc:90:32:85:94:a7:2b:48:c3:14:1b:ef:de:8e:
                    4b:3f:e8:f4:e3:8b:ea:b2:5e:3f:75:91:9f:72:24:
                    e6:b8:09:26:48:87:da:a8:a9:30:5b:ca:47:3b:e4:
                    74:21:a2:31:f4:c3:46:0f:07:18:1e:bf:6b:e1:65:
                    8e:46:9f:4b:7b:4e:e4:87:4c:5a:6a:2a:e6:aa:38:
                    5e:3a:65:c1:e4:ef:d6:46:1b:05:bf:ea:4b:ca:ad:
                    e0:24:da:b1:a5:8f:fc:2a:64:d4:39:ae:f7:4b:44:
                    79:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3F:AD:6C:3F:36:26:89:BF:1B:C3:70:77:FC:FB:0B:27:42:74:FF
            X509v3 Authority Key Identifier:
                keyid:3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ef:14:29:a5:ee:42:02:91:94:28:28:c6:c8:17:d4:e5:8a:
         a6:31:57:da:53:d8:de:ca:48:07:0b:ca:f5:3c:7b:d7:1f:c6:
         15:da:79:c2:78:4c:9f:3c:41:6d:0c:35:b4:a0:da:15:73:39:
         c2:b0:78:f2:a3:dc:df:ad:ef:c3:6f:9f:e8:94:6a:23:8d:93:
         7a:dd:75:7a:96:a5:53:80:f5:22:73:7e:e6:c0:0c:f5:65:72:
         40:0a:2f:87:68:ad:b7:e6:fd:d8:df:5d:24:9a:ae:35:5d:c3:
         fb:1c:f5:87:89:8b:1d:6a:ea:a2:4c:c3:90:9f:2b:61:b8:41:
         5a:7c:34:51:af:21:6c:20:0f:fe:e4:86:6a:b3:eb:94:4e:2f:
         0f:9a:36:06:03:da:8e:44:5d:cc:c1:72:d8:76:42:2f:fd:dd:
         f6:2f:6f:fd:76:a2:b8:36:5d:7c:47:24:a9:7d:e9:40:ed:ee:
         d2:de:1e:26:24:df:e2:67:17:07:bb:be:24:4b:b1:91:22:71:
         59:61:db:ae:7e:ef:71:64:43:45:62:52:cb:aa:11:5e:b3:46:
         85:03:61:c7:b4:7f:b1:d2:b0:f6:b2:a0:05:ff:28:34:d5:55:
         a5:56:33:b0:57:fe:2f:de:c8:6d:4a:6d:11:b2:e8:c1:ef:c2:
         6b:c8:f1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:17:28 2026 by rpki-client