Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft
File:                     Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft (raw, json)
Hash identifier:          lAXQoOOmNaJuc6A1IYMLfedwPf9fdrsAXFpM9eu2M0M=
Subject key identifier:   B4:FD:9A:01:7A:76:85:FB:7D:96:70:EC:B6:A0:04:E7:42:59:E1:71
Authority key identifier: 26:2E:C2:0D:32:BC:13:2D:7D:20:4C:34:48:22:29:79:24:21:CF:70
Certificate issuer:       /CN=A9131157/serialNumber=262EC20D32BC132D7D204C34482229792421CF70
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft
Manifest number:          0136
Signing time:             Sun 25 Oct 2026 06:06:29 +0000
Manifest this update:     Sun 25 Oct 2026 06:06:29 +0000
Manifest next update:     Sun 01 Nov 2026 06:06:29 +0000
Files and hashes:         1: Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl (hash: A84jbydlRyNoXjAW9rPIUuoiAtGMb9V64kG0GwFD+fA=)
                          2: 2264A3AC083911F0B331A472C4F9AE02.roa (hash: pwNtVZGrmzrKiGVRjkeCeKqvfBMVhfXsfTuHRWtv4fs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl
                          rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 06:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131157, serialNumber=262EC20D32BC132D7D204C34482229792421CF70
        Validity
            Not Before: Oct 25 06:06:29 2026 GMT
            Not After : Nov  1 06:06:29 2026 GMT
        Subject: CN=6add9c65-0b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:a2:a8:42:91:d4:d4:10:fb:0c:61:2a:32:
                    91:33:33:96:05:f3:87:b3:85:2a:83:0e:03:9f:2e:
                    31:db:e2:15:f2:d3:f9:c0:b6:a9:00:8b:a1:b7:d0:
                    b2:46:a4:a6:27:ef:4c:fc:3f:d2:6c:38:38:28:bd:
                    44:2d:1c:90:2d:d6:3b:fa:79:46:8d:63:6e:eb:4d:
                    10:5a:14:61:2d:46:cd:c2:ec:60:ba:c7:53:fa:b8:
                    05:63:e1:b9:1e:a1:30:a5:35:3a:34:da:4f:de:4a:
                    90:db:5d:27:da:b8:40:a4:2b:43:f0:a8:cf:13:e1:
                    26:44:55:14:98:e6:ad:af:f6:88:28:5f:47:e9:3f:
                    0c:b6:cb:69:e8:ac:85:ba:5b:a1:b9:56:40:de:d0:
                    97:ed:e1:78:34:7f:6c:42:89:db:6e:80:f1:f1:77:
                    96:df:75:71:a2:8d:aa:fe:51:fa:6b:f6:57:05:f4:
                    75:e7:e4:65:54:c0:03:3e:65:c2:99:0b:e6:57:a6:
                    63:cd:de:76:cf:b1:d4:c1:da:3a:e0:e6:da:2e:4a:
                    fe:d0:9e:2e:ae:b7:96:00:70:1b:e9:e2:0e:62:7b:
                    4d:5f:2b:95:06:40:cb:22:ad:cb:a7:a6:5f:75:8f:
                    61:b7:1e:de:b0:78:1d:54:bd:d4:03:15:a7:b2:39:
                    a4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FD:9A:01:7A:76:85:FB:7D:96:70:EC:B6:A0:04:E7:42:59:E1:71
            X509v3 Authority Key Identifier:
                keyid:26:2E:C2:0D:32:BC:13:2D:7D:20:4C:34:48:22:29:79:24:21:CF:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:27:da:33:1b:86:94:ec:89:42:32:7e:d9:3e:ea:1e:e4:b9:
         96:43:2e:4c:d4:bc:69:7e:1f:80:f4:81:30:f8:bc:e0:58:dd:
         d3:57:e8:26:1c:65:bb:07:83:61:d9:aa:88:b6:4c:7b:c5:24:
         95:d8:ec:68:ab:88:c1:dc:4e:1c:87:e2:cb:31:96:38:29:9c:
         e8:3d:84:cd:b3:ee:47:79:2c:c2:aa:bc:47:4b:38:7a:1a:de:
         6e:06:e3:7c:50:dd:3d:de:ac:3b:97:08:7b:4f:f6:ec:67:41:
         b4:9f:d1:e7:ae:3f:0e:02:c0:8f:4f:0b:4a:08:b0:42:20:54:
         04:76:48:cd:c3:33:0c:21:cc:39:26:79:c5:e6:9c:9a:22:40:
         ad:0b:f2:23:1e:71:29:fb:4f:76:58:84:ee:32:cc:40:b6:df:
         3e:3e:63:03:5d:bf:92:1e:f3:82:0f:76:30:f4:59:5d:6c:9b:
         96:9c:87:b9:c0:85:d8:4a:e9:ec:27:93:95:31:20:c0:86:b3:
         81:d4:b9:cb:09:57:68:6d:c7:63:e6:bd:5b:cd:3f:aa:37:ee:
         67:1a:b6:10:c6:40:2a:30:96:d5:81:12:c2:39:5d:24:6e:ef:
         f6:52:f9:b5:95:b6:c5:33:70:ea:dd:9a:bf:6a:a2:32:5a:6f:
         6b:07:1c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:58:17 2026 by rpki-client