Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft
File:                     MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft (raw, json)
Hash identifier:          OE4EmZz5jBvCFb0z2YmktbB6vag7IFKBdrshOStTz7Q=
Subject key identifier:   D5:EE:9E:4A:3E:0D:82:A7:0C:EC:40:5E:A6:A0:63:20:03:AE:22:FE
Authority key identifier: 31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF
Certificate issuer:       /CN=A91222CD/serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF
Certificate serial:       1C2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft
Manifest number:          1C29
Signing time:             Sun 04 Oct 2026 16:13:48 +0000
Manifest this update:     Sun 04 Oct 2026 16:13:48 +0000
Manifest next update:     Sun 11 Oct 2026 16:13:48 +0000
Files and hashes:         1: MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl (hash: q0lc6QVfti2+URpzbkMSp8r/BdMq0rD7NC+GUQSZi2s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl
                          rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 16:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7210 (0x1c2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91222CD, serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF
        Validity
            Not Before: Oct  4 16:13:48 2026 GMT
            Not After : Oct 11 16:13:48 2026 GMT
        Subject: CN=6ac27b3c-38ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f9:38:7f:7a:8b:ed:e3:fc:d1:4b:ee:39:bf:
                    b5:a0:70:57:1b:4d:c3:ea:3e:74:1b:1b:c5:a1:76:
                    f4:6e:42:c6:c7:03:9f:e8:cf:bd:ad:6a:38:49:4b:
                    44:fd:a3:48:17:ca:a1:f2:4b:d3:28:c2:e9:6c:44:
                    54:d3:b0:a6:77:8a:a3:0b:d4:5b:bd:ec:90:d4:23:
                    6f:7a:54:33:99:b9:2f:5f:55:a2:23:b7:b6:83:ab:
                    75:85:73:b5:3c:d1:30:80:86:e0:3d:4a:4d:24:e4:
                    6a:15:56:2b:d0:d1:9b:96:2a:1a:34:84:96:04:00:
                    e3:66:98:dd:3e:39:0b:a8:37:8f:c0:ba:ea:56:ce:
                    78:8f:19:c0:df:50:fd:b1:9a:ef:41:5d:06:06:da:
                    9a:5f:a9:cc:74:6b:e1:d3:d9:28:6e:3c:53:23:2a:
                    f9:c2:e3:7c:db:b6:bf:1c:8e:63:37:81:65:e8:3a:
                    a8:bf:f1:1a:cb:f9:69:15:0d:e9:cd:8b:99:65:65:
                    b6:8d:94:32:71:59:39:f0:94:42:47:2a:38:30:ac:
                    a7:14:cc:63:f2:9e:ab:27:11:e8:39:54:eb:78:31:
                    84:aa:09:26:3b:d2:7f:27:a5:8b:b3:09:c1:b3:7b:
                    56:93:4a:5a:4d:f5:bc:3d:13:00:8a:89:40:e1:1b:
                    b9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EE:9E:4A:3E:0D:82:A7:0C:EC:40:5E:A6:A0:63:20:03:AE:22:FE
            X509v3 Authority Key Identifier:
                keyid:31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:98:45:97:aa:ae:70:27:c3:ba:68:fe:67:f4:61:9f:49:e1:
         03:ec:b1:97:fe:66:5f:5f:09:9c:7c:fd:35:c1:34:64:b5:d7:
         ee:1c:56:03:c0:27:58:4c:66:5f:73:6e:b6:8b:d9:d0:66:de:
         5f:b9:0e:45:f5:12:84:43:dd:86:a2:87:e9:f6:db:8f:71:8d:
         ef:f0:46:7c:77:7a:67:14:b7:c7:c8:e4:52:3b:b3:11:fe:f8:
         73:98:6d:c7:36:1d:e4:5a:5f:62:bf:2d:2b:5f:42:9f:28:32:
         f5:bf:23:af:bc:f8:8d:e1:66:6c:89:68:b2:4e:ef:cc:e0:ae:
         52:30:52:9f:df:80:37:8e:5f:a5:f1:33:3f:af:bc:4b:24:a2:
         23:31:68:51:df:99:a3:bf:7c:65:c9:6a:a1:52:c9:e6:b0:dd:
         77:21:4c:da:84:f7:c8:ad:76:2b:4a:ad:8c:81:8e:55:95:30:
         b4:9b:f0:89:f0:3b:85:b9:39:1c:cd:07:f6:21:12:54:87:09:
         d3:0d:ec:dc:93:e7:a6:e5:c4:71:88:23:71:d2:a3:17:f2:2a:
         b8:ec:22:a4:04:41:08:93:cd:4d:95:f9:78:94:c4:2d:5d:5c:
         b2:7b:67:9d:01:b2:33:ce:a8:19:19:68:a3:be:56:a5:45:ec:
         a6:bf:51:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 10:18:31 2026 by rpki-client