Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
File:                     Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft (raw, json)
Hash identifier:          G9yIPzn39677LyKWhazmS+ZrAH1wH+soQvoEuvxVFIs=
Subject key identifier:   3A:C5:87:39:62:AA:61:51:4C:91:A6:26:B5:BE:65:F6:42:E1:47:73
Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
Certificate issuer:       /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Certificate serial:       0313
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
Manifest number:          02DA
Signing time:             Tue 27 Oct 2026 01:22:21 +0000
Manifest this update:     Tue 27 Oct 2026 01:22:20 +0000
Manifest next update:     Tue 03 Nov 2026 01:22:20 +0000
Files and hashes:         1: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl (hash: uS5+lpi2xwbnmRXbdaR2IQCtwzPAaD8o08SEkvW4hIs=)
                          2: E137AAE4914011EDABD5F778C4F9AE02.roa (hash: LkF5oYRIVtud1TlZnXT75FqzafJ3cOedylwYvC/BvFg=)
                          3: C3E640EE917811ED904ACF83C4F9AE02.roa (hash: nquKdBYb17f91RwkbMJz0YJOyUNBfY9B+zJHnQj7Zk8=)
                          4: E1D3A69C914011EDABD5F778C4F9AE02.roa (hash: UTHobHs4mZ75Li/c4ZWnYTJJw1N7jQT2yw1kRGz49v4=)
                          5: E260EBC4914011EDABD5F778C4F9AE02.roa (hash: rX8iAImSKJ7BiKpMtoKCx7hmjEJ7mmhaIkBGctc7F3w=)
                          6: C3481400917811ED904ACF83C4F9AE02.roa (hash: 4xjAkin/j6TIMIFKuvZwnU4pQkfqHu8yYEJNx0r+s1o=)
                          7: E07C4E34914011EDABD5F778C4F9AE02.roa (hash: UJJEQF3bRcxEzs9FxUgqB61bTKSaDvDmCO8VGSiwpHY=)
                          8: 7606086E914611ED8DE00A16C4F9AE02.roa (hash: 8+Zy2+XVCGA+aHk/+gqV29ugPCKWdcGR+5k5svBK88M=)
                          9: 18498E84AA4911F0909AC335C4F9AE02.roa (hash: tL8r7ZwrA8G9Ow3+rgRwQ7tcji7gVdiRGZltZQ0+9g4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
                          rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 01:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 787 (0x313)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
        Validity
            Not Before: Oct 27 01:22:20 2026 GMT
            Not After : Nov  3 01:22:20 2026 GMT
        Subject: CN=6adffccc-825f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:38:79:35:af:e4:ce:35:3a:8d:cc:12:47:57:
                    fb:d9:50:04:69:6a:48:f4:6b:66:0e:86:38:53:0a:
                    8d:83:b9:44:18:c2:c0:68:6a:2a:a5:33:64:23:3b:
                    82:bc:dc:c8:ee:12:04:7a:72:ac:45:df:14:22:55:
                    e0:21:3b:62:77:81:ac:03:ef:35:e4:ff:58:07:8d:
                    3f:10:b7:97:0e:71:cf:f8:5c:5d:c3:13:64:8d:eb:
                    7f:a7:cc:7b:ef:2e:d5:98:12:07:22:6f:b2:e7:52:
                    ba:7b:0c:de:42:6d:ec:a6:51:8a:39:1c:9e:85:d8:
                    03:48:1c:7c:f9:b4:e8:1a:73:98:38:ca:bf:1c:ee:
                    51:50:94:37:35:bd:9f:75:39:c7:bd:6a:3a:07:b9:
                    9a:02:6d:ed:69:e1:64:7f:b4:ec:24:85:38:cf:4b:
                    34:50:c3:1f:6c:71:a4:b1:3c:2d:9d:bb:ec:dd:ea:
                    72:16:03:a5:a4:3b:dd:c9:12:2f:88:71:a4:9a:a9:
                    92:96:97:18:f3:d1:9a:ef:56:e2:c1:24:9a:6c:21:
                    0c:ff:74:e3:db:72:87:ce:13:61:a7:f4:ea:e5:11:
                    78:59:11:a5:f7:34:47:f6:cc:48:17:0c:97:f5:c3:
                    57:9f:a0:5d:55:23:b8:7e:5f:af:03:56:52:88:6f:
                    c9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C5:87:39:62:AA:61:51:4C:91:A6:26:B5:BE:65:F6:42:E1:47:73
            X509v3 Authority Key Identifier:
                keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:19:18:73:12:d6:70:93:a9:83:bb:84:59:68:a6:6f:02:4b:
         73:ec:c4:1f:07:82:7c:d4:db:90:87:c2:2f:f4:60:49:28:f3:
         6e:5d:93:51:cf:62:f6:c4:4a:29:4d:6b:c6:3a:ef:0c:64:69:
         61:c0:fc:85:8f:01:64:16:24:da:46:85:4d:a5:f9:9a:1b:a1:
         f1:b1:4a:9c:5d:56:70:f3:d6:5e:75:8b:1c:d5:60:cd:71:15:
         0f:e1:43:93:02:d2:22:e4:6b:d1:6e:f5:e4:cd:2b:4d:62:0d:
         03:2e:9e:cb:09:5f:cf:af:09:46:a7:2c:cc:85:cd:b3:42:a0:
         47:03:16:16:47:26:be:3a:a9:29:8d:11:ef:3d:f0:bf:c1:40:
         f1:ff:20:37:15:03:a2:5e:ec:88:a3:8a:eb:dd:f4:5a:ef:31:
         1e:d6:f6:d7:2a:e8:c4:ec:24:fa:5e:26:7b:ff:f2:5a:78:6f:
         4e:42:2d:74:4f:2e:9c:4d:7b:2f:bd:2f:bf:45:ba:c8:e3:9e:
         f1:b1:df:75:3b:ac:fa:e7:15:95:76:ca:e9:0a:8b:ee:4a:9c:
         8d:64:ba:0c:4e:91:1f:97:3d:74:fa:3d:65:d2:4b:1d:4b:07:
         12:4a:ff:e0:04:67:ef:a0:89:bb:fd:6b:3d:5c:8a:a4:d9:57:
         cd:28:43:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:40:25 2026 by rpki-client