Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
File:                     iTrFeQFBVhhq6vUDS6C0km-S43Q.mft (raw, json)
Hash identifier:          fLGzGrQ/+Dj3gtdLPmnXzSDuqh8k0z3ByikBYBtnlhU=
Subject key identifier:   63:08:CC:E0:1B:6F:A8:DE:6B:39:3A:5A:09:25:69:14:08:7D:BD:AD
Authority key identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74
Certificate issuer:       /CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374
Certificate serial:       0170
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
Manifest number:          0167
Signing time:             Thu 29 Oct 2026 05:40:57 +0000
Manifest this update:     Thu 29 Oct 2026 05:40:57 +0000
Manifest next update:     Thu 05 Nov 2026 05:40:57 +0000
Files and hashes:         1: iTrFeQFBVhhq6vUDS6C0km-S43Q.crl (hash: B2bhB3QTMZ1KJs4p8OnQv5hAxzH8D+tyrokF2IZ4QGg=)
                          2: FB729544B57F11EF8BDF3346C4F9AE02.roa (hash: lra+qhDRGNXUaND0a9KhE0KK0EaPsUI652BkcyFm2ic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl
                          rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 05:40:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E3C7, serialNumber=893AC579014156186AEAF5034BA0B4926F92E374
        Validity
            Not Before: Oct 29 05:40:57 2026 GMT
            Not After : Nov  5 05:40:57 2026 GMT
        Subject: CN=6ae2dc69-1377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:69:dc:27:2d:8b:8d:6a:df:2f:8d:22:31:32:
                    83:27:73:3f:b6:4e:3e:e1:32:d1:01:68:e8:bc:a0:
                    21:db:87:3c:79:29:80:6b:79:87:84:93:f7:18:ac:
                    bb:fc:55:3d:74:6d:f3:28:21:8b:e8:2d:ab:8a:f8:
                    9c:36:49:e3:74:72:27:55:2b:bb:6a:7f:9f:3c:9e:
                    d3:0a:56:fb:9c:b5:c9:99:6b:66:c4:0e:e1:2a:03:
                    69:36:53:b8:50:24:c6:aa:81:8a:22:83:6c:a2:0d:
                    2b:5c:4e:7f:7b:a3:8b:d1:fd:0c:69:9d:1c:6d:e6:
                    ec:cd:46:a8:a0:a9:f5:1d:e1:3e:e7:34:47:a8:6a:
                    35:8a:11:62:33:04:37:ce:4e:55:20:ec:5e:0e:cd:
                    56:7f:ae:06:ad:9a:7f:0f:5f:f5:ca:e0:53:39:69:
                    f8:3e:bd:c7:c5:32:59:e1:d9:af:62:c4:f3:53:77:
                    88:0c:8e:1f:d3:b2:f0:f4:2a:fa:04:e0:4b:83:f4:
                    2b:88:4b:30:5b:69:83:1b:7c:d0:2d:e2:3d:02:fc:
                    2c:00:65:86:17:2c:00:de:3c:f4:02:b4:13:bd:22:
                    51:46:7c:ef:1e:08:76:bc:0f:ca:da:0a:71:2d:f3:
                    b7:19:1e:f0:89:a8:9a:03:d6:77:44:9e:c4:3d:f4:
                    b6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:08:CC:E0:1B:6F:A8:DE:6B:39:3A:5A:09:25:69:14:08:7D:BD:AD
            X509v3 Authority Key Identifier:
                keyid:89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:dc:66:a2:dc:e5:87:ec:9e:2b:2c:d1:db:f7:15:f7:7f:9d:
         26:1d:15:42:55:00:77:42:75:1a:6a:3f:5f:3f:e3:9a:6d:34:
         55:a3:e0:26:9b:40:e3:00:84:b1:12:e2:a8:9c:64:c9:dc:b1:
         24:5a:dc:5e:81:3d:25:45:08:7f:96:ed:ca:f5:a4:2f:c4:f0:
         9b:8c:bc:77:89:11:a2:8e:ae:66:cb:2d:64:d9:21:13:7b:06:
         24:91:a8:16:34:98:d3:c3:02:66:78:3e:86:cc:9d:81:31:71:
         8a:07:e7:56:ac:8c:28:74:38:dc:1f:7d:65:1f:f0:f0:42:70:
         24:bd:06:64:82:f6:a1:bc:3e:a5:f3:fd:02:1c:12:fb:00:e2:
         80:eb:a9:7d:4d:0b:70:c5:c4:79:c7:95:de:45:15:6b:68:bb:
         81:9e:45:02:11:9e:95:e3:a6:70:aa:bd:21:a7:d7:25:cb:5b:
         97:c9:f8:41:8c:c7:b1:ba:c6:ff:d0:30:82:57:05:d2:0a:0b:
         f0:4a:10:82:a6:80:41:77:12:ef:8f:5a:78:c0:12:34:58:8d:
         2d:64:69:0a:cb:9a:82:86:2c:95:ec:3f:f7:95:8e:47:0c:d8:
         fc:0c:de:c5:dd:9a:b2:a2:c9:a5:f4:ab:41:61:ed:bc:ae:ba:
         ee:43:58:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:09:48 2026 by rpki-client