Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
File:                     4mv29S1wn7Nug3uag0rDrML5tFk.mft (raw, json)
Hash identifier:          t/cb2p1XqQq25xRCKQsoWU422/sNl+B1LQVgdFEbZOo=
Subject key identifier:   34:FE:16:14:AA:A8:FF:98:54:02:D8:54:DE:85:DC:6A:11:12:40:83
Authority key identifier: E2:6B:F6:F5:2D:70:9F:B3:6E:83:7B:9A:83:4A:C3:AC:C2:F9:B4:59
Certificate issuer:       /CN=A91133DE/serialNumber=E26BF6F52D709FB36E837B9A834AC3ACC2F9B459
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
Manifest number:          73
Signing time:             Mon 19 Oct 2026 08:35:48 +0000
Manifest this update:     Mon 19 Oct 2026 08:35:47 +0000
Manifest next update:     Mon 26 Oct 2026 08:35:47 +0000
Files and hashes:         1: 4mv29S1wn7Nug3uag0rDrML5tFk.crl (hash: xdUXU9EepXxmklFqIMXz4FOgiPi/MCwpkXyuOUkampk=)
                          2: 3E65AB521D0311F1B8948CF0043D8C67.roa (hash: sHNfG7PUkGQvb8cZheQ91puxBDfj8TkMgmzZhYPjhpA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.crl
                          rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 08:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91133DE, serialNumber=E26BF6F52D709FB36E837B9A834AC3ACC2F9B459
        Validity
            Not Before: Oct 19 08:35:47 2026 GMT
            Not After : Oct 26 08:35:47 2026 GMT
        Subject: CN=6ad5d664-14b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ac:dc:6f:59:cd:6b:7f:25:37:54:68:6a:c3:
                    f3:cb:75:c5:d5:18:84:1d:5e:be:f6:17:26:73:a9:
                    8f:ea:79:8e:f2:93:1e:a8:d6:8d:06:a4:e0:26:b5:
                    da:84:6d:37:71:cc:be:5f:c6:dc:5d:05:b2:54:06:
                    6f:b6:60:58:6a:6e:27:f0:17:88:77:35:0d:48:0b:
                    c7:b5:10:7c:af:04:8f:35:a8:26:9d:c0:d2:07:bd:
                    ee:e0:d5:b7:55:2e:06:57:67:e6:ce:1b:c0:3a:d9:
                    dd:68:18:c7:ee:fe:69:2d:44:69:dd:e1:0c:23:73:
                    e1:cf:3e:5b:d1:86:1a:af:f5:05:94:f8:d3:05:71:
                    3a:f2:fd:5a:7c:d1:44:b1:fd:68:9b:cb:da:d2:c5:
                    86:85:ed:13:39:5b:ce:b8:59:4d:73:0d:b1:fc:3d:
                    07:c2:b1:3b:45:0d:41:cb:d4:38:98:98:33:26:2c:
                    9b:d4:04:6c:e1:7b:85:de:2a:ee:ea:75:e1:a8:f7:
                    ff:13:6c:1d:7e:8f:c9:4a:1f:cd:77:25:b3:ac:b3:
                    3a:f4:b6:39:8a:ea:c1:e2:bb:bf:91:a3:32:a0:89:
                    c3:b3:63:b2:7e:20:9c:25:7a:97:28:d7:ae:92:9b:
                    d7:e8:47:99:10:42:d9:f4:e8:01:bc:a1:5d:97:22:
                    b7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FE:16:14:AA:A8:FF:98:54:02:D8:54:DE:85:DC:6A:11:12:40:83
            X509v3 Authority Key Identifier:
                keyid:E2:6B:F6:F5:2D:70:9F:B3:6E:83:7B:9A:83:4A:C3:AC:C2:F9:B4:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:34:47:61:e2:6d:2e:c3:d4:d4:72:5c:74:61:e8:ae:bc:7e:
         73:5a:f7:6d:93:70:a2:e1:f1:26:6b:e0:cd:0b:22:ed:83:7c:
         1e:b6:cb:7b:7f:22:68:5f:c0:72:b6:57:5c:b5:19:44:bf:cc:
         a7:28:32:f3:ca:54:f3:be:cc:72:39:5e:20:ab:c0:cd:14:85:
         55:9b:de:c9:76:83:f7:23:87:b7:59:cc:24:c5:86:09:22:b2:
         c8:61:0f:56:98:d7:6a:ad:8c:f5:1f:fb:e4:b7:55:7e:d0:77:
         0b:2b:f9:ff:11:69:90:18:b3:dd:ca:68:0d:21:ab:ea:58:54:
         35:34:6f:55:a7:a2:87:13:9f:06:c7:7e:38:3e:44:3d:5d:a7:
         86:b5:5a:91:74:b0:fc:65:86:8d:c6:b0:36:f2:f6:a5:89:f4:
         fb:48:ee:66:81:1a:1d:6c:5c:fb:20:13:f4:45:b2:0a:17:63:
         7b:a5:a7:f8:56:cf:70:e7:c2:22:93:33:b0:d4:37:a6:a9:d7:
         2c:94:bb:e5:f5:77:78:e6:d0:db:5c:b5:d3:e0:de:dd:d5:3c:
         58:40:bd:31:60:74:f0:53:d6:b2:00:43:54:2d:23:3f:ee:3b:
         da:e3:90:7d:cd:b0:eb:f4:74:61:11:91:70:8a:9d:5e:1b:0d:
         10:74:4f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:54:22 2026 by rpki-client