Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
File:                     loNUUNMhwefEjKDF3NK6bB0tSPE.mft (raw, json)
Hash identifier:          hfMXmhXxMXG+wcatkPYwu/csxXG8I+cI5G7SWLrVV2A=
Subject key identifier:   A0:35:86:44:07:DB:60:06:99:1B:40:F0:B6:7A:DA:6E:D7:96:A5:02
Authority key identifier: 96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1
Certificate issuer:       /CN=A912DF25/serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1
Certificate serial:       01AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
Manifest number:          0195
Signing time:             Mon 05 Oct 2026 04:41:40 +0000
Manifest this update:     Mon 05 Oct 2026 04:41:39 +0000
Manifest next update:     Mon 12 Oct 2026 04:41:39 +0000
Files and hashes:         1: loNUUNMhwefEjKDF3NK6bB0tSPE.crl (hash: qctY5Ir7jIH3wdDZq53oqDHaCUv+CuYp0xHSoSP4+YE=)
                          2: 047C04705AC911EF9DF4275AC4F9AE02.roa (hash: a/TnggBB8UkIjAm7pActJAUeWI+/1tK1Ltz4pGc0HY4=)
                          3: 050079585AC911EF9DF4275AC4F9AE02.roa (hash: q2A1ZrcnLrc/5Mb88/ViL0159nZ7TMUuRBpOWdSVt/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl
                          rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 04:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DF25, serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1
        Validity
            Not Before: Oct  5 04:41:39 2026 GMT
            Not After : Oct 12 04:41:39 2026 GMT
        Subject: CN=6ac32a84-cc01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:54:a2:c4:5c:62:ee:0d:d3:21:82:18:ea:4f:
                    ce:c4:5f:91:c9:e0:f2:52:21:87:2c:36:72:31:79:
                    9c:25:aa:82:a4:98:2e:e7:74:ea:0f:9e:91:02:b4:
                    e0:39:6f:f0:35:c1:df:d1:24:dc:92:de:ed:f8:20:
                    ca:d4:b8:85:13:4a:6f:3f:29:4b:0d:09:de:9a:d8:
                    ea:00:f9:ff:d1:86:23:2f:37:41:b1:04:4b:80:38:
                    ed:4d:e1:c4:a8:bf:9c:95:43:16:f2:50:67:8c:48:
                    0f:51:7d:d5:b1:d6:a0:b8:0c:55:63:43:b9:47:d4:
                    a1:91:56:60:e7:89:67:b3:15:35:d0:18:2b:c4:b4:
                    87:73:d0:d3:c0:3b:88:ab:e6:69:dc:c9:e7:0d:a4:
                    88:a6:fd:5d:8d:1f:a6:36:1c:0e:59:a0:da:80:b9:
                    71:9e:63:70:88:16:17:7a:22:e0:25:66:7c:25:62:
                    e0:18:f3:84:7b:21:5e:c3:9f:69:3d:66:77:2d:05:
                    01:e0:95:8b:a6:c1:f9:29:f8:18:fc:77:a5:d6:f1:
                    0f:ca:74:f8:92:a4:31:38:ba:5c:0c:1c:7b:81:74:
                    ef:1f:e7:45:8a:37:58:85:c9:7b:0d:16:e7:b4:ed:
                    7e:9a:a2:c0:37:9e:6b:bb:3a:77:58:73:7a:a4:70:
                    84:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:35:86:44:07:DB:60:06:99:1B:40:F0:B6:7A:DA:6E:D7:96:A5:02
            X509v3 Authority Key Identifier:
                keyid:96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:15:54:ca:c0:9e:db:99:6c:22:f7:12:26:73:46:88:2e:4b:
         ef:3a:70:a1:17:84:c6:a2:01:aa:4e:58:ce:aa:67:6d:60:6b:
         54:77:86:06:da:f9:ce:6f:b6:81:3c:61:4b:89:00:f5:80:42:
         30:4a:f9:00:4b:7b:98:01:3d:70:08:b3:13:97:96:cf:94:f7:
         93:69:5c:1f:f0:d0:ca:b9:0a:fe:58:7f:df:df:7d:d9:48:5e:
         0d:ca:c4:19:d7:13:81:ff:90:70:af:7f:b8:ec:82:bb:f7:a6:
         a6:fb:af:eb:a1:ca:c2:39:70:68:ac:76:be:19:4f:2a:f3:df:
         35:f6:3d:84:38:84:c4:49:fa:c1:70:19:38:08:0f:90:84:40:
         2f:55:4c:5f:0f:01:63:d7:07:67:42:a5:42:2e:a1:a1:d8:f6:
         cd:42:da:62:ac:61:d9:a7:e9:d7:86:34:78:ca:cd:c1:4c:a0:
         67:3d:1d:36:fd:48:45:72:07:a6:44:2b:3c:36:a4:5b:ae:d8:
         d5:d1:41:da:4c:11:5f:74:d5:ad:20:9e:fa:ae:72:7e:63:42:
         1d:26:4b:ed:c4:11:7f:48:4e:ad:5c:28:d0:5a:4b:cc:9d:e3:
         9e:9c:55:0d:50:cb:b4:f5:64:74:91:50:50:7d:2f:9e:8d:03:
         2a:9b:eb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:48:23 2026 by rpki-client