Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
File:                     IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft (raw, json)
Hash identifier:          PXGHqnyoN4rWQshMO2jQGiQVlJyH/VNAxp0I4J2QX3c=
Subject key identifier:   1B:52:6A:CB:86:B2:DA:BE:BE:F2:0E:5B:27:34:EC:B3:30:2E:9E:A2
Authority key identifier: 21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6
Certificate issuer:       /CN=A91159B7/serialNumber=21F20227559DB1F863849AB643233C3E935776A6
Certificate serial:       0E0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
Manifest number:          0DFD
Signing time:             Tue 06 Oct 2026 17:56:59 +0000
Manifest this update:     Tue 06 Oct 2026 17:56:59 +0000
Manifest next update:     Tue 13 Oct 2026 17:56:59 +0000
Files and hashes:         1: IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl (hash: yGPKR/iTM6vt7tgpjC7qG+ZnL2jBVcRVDqlvUMu9CFY=)
                          2: 7FC0801ED4EF11EC84AABC0CC4F9AE02.roa (hash: rkIEofZev6bDtd5nBARLbA+jCza/n/hXbR4AIclPFH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl
                          rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 17:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3597 (0xe0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91159B7, serialNumber=21F20227559DB1F863849AB643233C3E935776A6
        Validity
            Not Before: Oct  6 17:56:59 2026 GMT
            Not After : Oct 13 17:56:59 2026 GMT
        Subject: CN=6ac5366b-3e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2d:4a:fb:11:40:bc:7b:ca:e0:48:98:be:3f:
                    08:df:e8:13:ae:23:e2:1d:ca:7c:ae:22:97:e4:92:
                    fe:93:e6:a8:20:2a:14:6d:80:01:d4:bf:45:6e:3e:
                    01:1f:d9:38:e3:28:cd:22:2a:c9:87:19:3c:d5:5b:
                    5b:73:07:7a:5f:d5:e2:5b:2d:69:8f:3e:af:d8:aa:
                    ae:db:1c:55:8d:51:f0:f2:06:b2:0a:09:98:b3:17:
                    42:b3:0e:75:e9:68:2b:61:2f:a0:43:35:53:fc:aa:
                    4a:56:c6:6c:b2:4b:10:c9:34:f9:e6:8e:2e:bd:ca:
                    6b:82:47:14:f4:6d:5c:a6:c8:d4:45:d6:ec:7c:69:
                    67:b9:53:7b:0b:6a:26:7e:30:f7:f3:a7:b4:c7:93:
                    de:1d:ac:ac:a6:70:aa:f5:e6:f9:62:22:35:04:f3:
                    45:d2:f4:0a:16:cf:91:64:0e:bc:81:1b:6c:46:cc:
                    dd:c6:8f:b0:b1:34:ce:07:52:e1:9f:20:cb:82:ec:
                    d5:ac:80:df:b5:ab:3a:d8:80:f4:c5:83:ef:71:ed:
                    16:3a:8c:6e:bb:00:15:c9:fe:88:7e:2c:d6:69:fc:
                    33:17:7b:3a:d2:bb:4a:25:5f:2e:ab:d4:0f:02:5d:
                    1e:65:85:30:e7:53:24:19:c8:2b:bd:06:5f:a9:73:
                    b5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:52:6A:CB:86:B2:DA:BE:BE:F2:0E:5B:27:34:EC:B3:30:2E:9E:A2
            X509v3 Authority Key Identifier:
                keyid:21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:97:08:52:c2:1d:e4:8f:6f:ac:61:19:bd:df:d1:02:bb:e2:
         8b:11:a4:99:ec:e4:9d:f8:fb:b5:a5:ef:89:fa:58:29:32:01:
         17:e8:2a:64:cf:4c:aa:2c:a2:fd:9b:5c:38:73:78:2b:50:3a:
         80:4e:21:23:12:f5:6b:86:24:9f:44:fc:b9:ae:bb:95:ec:28:
         b5:6f:ba:b6:08:28:c8:55:17:e3:12:37:ec:bb:75:b2:cb:87:
         67:06:99:79:b9:3e:69:a4:1b:c1:7b:cf:d4:1e:e8:e4:0f:a8:
         bb:b4:3c:6b:aa:57:92:f5:86:ce:5d:75:41:08:44:50:80:77:
         d4:68:d6:81:3b:5f:10:a8:9c:11:dc:09:bc:ff:b5:25:50:8a:
         92:af:be:f0:7f:0e:d0:9f:bd:66:28:1c:2e:25:c1:0e:01:f5:
         cc:b1:b6:e0:93:cc:d4:81:7e:0c:95:93:23:59:02:e5:4d:17:
         3e:17:11:0f:34:a7:3d:d9:33:eb:b0:83:82:00:33:12:5c:04:
         ed:35:a1:d8:20:62:fa:be:e7:7d:28:18:93:b7:16:b6:29:82:
         64:73:a9:3b:f0:b8:9d:e2:10:86:86:ad:69:cf:ec:6c:97:26:
         9b:05:e7:f3:00:e3:35:72:4c:73:3d:02:65:99:98:f4:99:cd:
         ba:8f:03:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:07:35 2026 by rpki-client