Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
File:                     lML0ajLRB3XhZJuiUPaX_0esBj0.mft (raw, json)
Hash identifier:          HCnxVUgD6InGFxWNNcHauE4IbXkkojbQt7mFCW8varo=
Subject key identifier:   B0:2E:21:8B:1B:66:4E:5D:10:36:F0:34:DD:14:37:8E:93:6F:0D:12
Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D
Certificate issuer:       /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D
Certificate serial:       0305
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
Manifest number:          02EB
Signing time:             Thu 29 Oct 2026 01:44:37 +0000
Manifest this update:     Thu 29 Oct 2026 01:44:37 +0000
Manifest next update:     Thu 05 Nov 2026 01:44:37 +0000
Files and hashes:         1: lML0ajLRB3XhZJuiUPaX_0esBj0.crl (hash: oFkIC//qBJWMAaFmS7enjCV7gSPdZ0W7lqC5CJu102g=)
                          2: M8jBNirzp-FPjI2dNrVehbsa11Q.asa (hash: ZDZzGQIxLYumQFcobn7nkzlTWAEhcjsopzajkoxdG2w=)
                          3: 42C28C36A80711F0A622350DC4F9AE02.roa (hash: BpCSL66Kcxa7BlGBFMkmM3b3I1bmGIXPHueAxzsNq50=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl
                          rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 01:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 773 (0x305)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121071, serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D
        Validity
            Not Before: Oct 29 01:44:37 2026 GMT
            Not After : Nov  5 01:44:37 2026 GMT
        Subject: CN=6ae2a505-e2f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:35:d9:dc:6d:77:80:7a:d5:e1:4e:6f:40:e5:
                    d4:75:52:45:1f:b3:f2:a3:b4:3b:a9:a8:f1:c6:11:
                    46:12:ec:96:a4:b2:6e:5c:2b:a4:36:7b:df:62:16:
                    b8:0d:a0:23:40:46:0c:e1:d1:09:c4:7e:e3:5a:5c:
                    0a:ac:b4:e8:1d:bd:53:4e:74:f8:96:3c:10:dd:d0:
                    a1:57:df:ae:22:6a:45:07:d4:a1:b2:0b:fa:1d:fe:
                    1a:02:ce:23:ce:f5:09:86:87:be:7a:14:74:e8:82:
                    c2:a0:06:80:7c:e9:ec:99:1a:63:c9:f3:35:65:76:
                    11:4f:bf:d5:7d:08:94:73:0f:54:5b:93:b5:ab:c4:
                    a5:46:e2:f1:5b:d2:ee:5a:62:4c:5e:77:a8:e5:8a:
                    a8:f6:ac:13:18:71:a7:31:dc:df:02:59:32:bc:70:
                    b4:1b:cf:b8:0f:7d:d7:81:d0:0d:14:12:4e:d0:26:
                    7a:8a:68:0a:55:03:df:30:64:78:82:a1:7f:e4:db:
                    df:62:61:a9:22:ca:25:ea:a6:50:9a:05:11:83:86:
                    ac:98:89:50:d5:16:bc:5b:01:31:f0:82:32:56:d4:
                    b7:9d:bb:09:34:49:9f:ac:71:ca:dd:07:ff:6b:ec:
                    4a:fc:f1:09:5a:9d:40:93:d5:3b:91:2a:f8:0a:39:
                    d0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2E:21:8B:1B:66:4E:5D:10:36:F0:34:DD:14:37:8E:93:6F:0D:12
            X509v3 Authority Key Identifier:
                keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:6d:b1:9c:40:66:7a:a7:83:33:29:a6:c1:f3:ad:03:f8:eb:
         c7:9b:e1:7e:25:eb:ec:82:18:19:ff:88:90:b5:9f:69:43:e4:
         4e:3b:77:43:f1:42:f0:3a:af:69:1d:c5:50:e3:d7:1f:15:a1:
         7c:05:46:24:72:5e:dc:53:29:23:9b:f6:fc:05:f6:94:6c:ed:
         1f:9f:3e:40:03:93:46:19:47:9e:76:56:39:d1:9c:9f:59:ee:
         39:14:75:e1:56:df:79:f3:3c:d3:a4:38:d4:62:93:ab:81:f5:
         b4:c7:f4:e7:aa:98:ed:e1:3f:4d:0b:06:aa:fd:9e:42:4a:b0:
         07:97:e0:87:50:19:9c:fc:78:ea:91:ad:a4:b1:ed:b5:cd:ee:
         a9:44:0a:d6:d7:16:f3:fa:9a:83:60:8b:f8:88:c3:c4:7c:60:
         da:4b:d7:a8:6c:7e:7e:fd:07:91:58:4b:64:57:0a:96:f0:94:
         cd:51:3d:d9:1d:b7:64:91:bc:07:f9:90:17:c5:5a:0f:35:89:
         00:f1:6f:1b:d9:26:be:03:cd:fe:b9:f2:db:05:f6:f1:76:70:
         9d:3d:8b:60:ba:b0:1c:b1:45:d1:ba:93:43:f5:7c:d4:7d:06:
         16:cb:92:4f:dd:3a:c3:8d:80:2a:a6:41:a1:15:6d:4e:a3:19:
         37:a8:27:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:07:34 2026 by rpki-client