Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.mft
File:                     pCvBWA8L3pIR-4wIkUqlwsARIXs.mft (raw, json)
Hash identifier:          cIBdhsnJS1o6x9YhPqE97Xje7PoEooz4ytehDV6ypT8=
Subject key identifier:   A6:0F:54:F5:E4:83:F1:43:6E:0B:5D:BB:96:8D:FC:2D:C6:3B:2C:EA
Authority key identifier: A4:2B:C1:58:0F:0B:DE:92:11:FB:8C:08:91:4A:A5:C2:C0:11:21:7B
Certificate issuer:       /CN=A9131667/serialNumber=A42BC1580F0BDE9211FB8C08914AA5C2C011217B
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pCvBWA8L3pIR-4wIkUqlwsARIXs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.mft
Manifest number:          5A
Signing time:             Sat 17 Oct 2026 08:54:48 +0000
Manifest this update:     Sat 17 Oct 2026 08:54:47 +0000
Manifest next update:     Sat 24 Oct 2026 08:54:47 +0000
Files and hashes:         1: pCvBWA8L3pIR-4wIkUqlwsARIXs.crl (hash: qeGrFLWO36BE9BHkmCcWeKXDg1qFmyujDHE4MA6utUE=)
                          2: AE0F1BEA42AC11F1AC02065EBB833773.roa (hash: 2exTM74mYh/WV9DBBb+PAXb3+N+2GeJ1vzkMiQM/+Ls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.crl
                          rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pCvBWA8L3pIR-4wIkUqlwsARIXs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 08:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131667, serialNumber=A42BC1580F0BDE9211FB8C08914AA5C2C011217B
        Validity
            Not Before: Oct 17 08:54:47 2026 GMT
            Not After : Oct 24 08:54:47 2026 GMT
        Subject: CN=6ad337d8-eb57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:70:45:62:60:7e:d0:45:b1:76:ae:dd:23:51:
                    40:8a:1f:11:91:66:53:89:d5:c6:cf:39:97:35:9b:
                    14:f7:da:f5:6c:66:6e:f4:1a:48:c0:d7:9f:7d:9e:
                    d4:28:da:fc:a3:77:c8:66:b6:96:89:1e:eb:8d:22:
                    af:66:a2:31:d9:7f:89:18:d5:87:bf:36:81:fa:55:
                    25:ea:4e:20:1b:b2:5c:72:b2:62:bb:9f:72:c1:7c:
                    a7:c2:a3:bd:d3:07:3f:bc:60:90:d9:a4:af:41:ba:
                    f4:45:b5:62:16:8c:18:5d:37:30:2d:43:5f:32:4b:
                    0e:65:66:98:66:8c:4b:75:f4:23:83:19:56:38:ee:
                    ea:c0:74:5b:0f:61:df:2b:56:87:b5:bb:c3:3f:f0:
                    92:02:74:16:b0:e6:44:a1:c2:c7:c1:27:42:11:d7:
                    6a:3d:0b:96:7b:8a:80:aa:d5:e3:d5:1e:80:1f:4d:
                    e6:80:65:9d:a2:ed:d1:cc:89:ae:28:df:d5:63:50:
                    87:d4:73:c2:41:3d:09:b0:89:52:7d:f0:35:fb:74:
                    8d:fc:0c:b6:1f:06:6f:54:a3:e8:31:02:74:e9:00:
                    9f:57:32:8b:b2:cd:8c:a5:a8:51:1b:50:0d:5b:2d:
                    a5:5c:99:c9:29:0f:ca:f2:05:1e:7b:de:d0:43:8c:
                    91:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0F:54:F5:E4:83:F1:43:6E:0B:5D:BB:96:8D:FC:2D:C6:3B:2C:EA
            X509v3 Authority Key Identifier:
                keyid:A4:2B:C1:58:0F:0B:DE:92:11:FB:8C:08:91:4A:A5:C2:C0:11:21:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pCvBWA8L3pIR-4wIkUqlwsARIXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:63:ad:b0:3a:25:27:aa:14:99:de:aa:e1:2a:8d:ca:5e:d4:
         f5:3f:0e:59:90:71:4c:1b:88:09:92:48:98:08:63:7f:cc:39:
         89:35:76:85:16:a7:e5:eb:46:ba:2f:ac:21:c0:29:65:92:d4:
         c2:6a:74:87:bb:42:83:33:72:03:a1:e5:4a:16:f7:7a:fe:5d:
         0b:09:19:af:1e:8b:63:57:fd:28:15:2f:65:71:c3:7c:68:b5:
         16:fc:37:62:01:26:50:99:1c:41:c4:a3:31:7d:07:a9:79:1e:
         8f:dc:37:d5:3a:6e:2e:f2:07:d6:19:0f:c3:fa:fc:ac:63:7c:
         ad:49:1d:00:81:97:c8:02:58:00:9a:93:84:54:e8:b0:77:0c:
         cf:ce:e8:0c:5a:67:01:e4:e7:17:e5:c6:9b:9f:a9:cc:5e:d4:
         9f:6e:e3:48:93:a7:f5:2f:53:02:07:85:28:e4:56:4b:ed:1d:
         09:d2:1f:bf:2c:38:3c:61:01:ac:29:ba:4e:f9:d9:6f:e5:48:
         2e:14:8d:42:f9:ea:d4:69:83:8d:06:07:57:bd:43:0d:7e:7d:
         6c:bb:e0:f7:e3:17:a3:6b:53:e2:7f:bf:20:85:35:45:ac:30:
         96:5c:49:83:20:fb:59:b6:ce:f0:bf:50:70:b6:f1:b4:c3:f4:
         2d:6c:3b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 23:50:36 2026 by rpki-client