Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
File:                     d1_lofYadAjf7tR_FEfjRk2lCyo.mft (raw, json)
Hash identifier:          n6z9Qr/bkZCbUL41L/3sMRlS1GZS+zZ81MsRfc6ephw=
Subject key identifier:   54:D9:4E:73:96:87:88:10:B6:DE:28:E3:CB:B5:08:B1:3D:FF:4F:8F
Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
Certificate issuer:       /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Certificate serial:       055B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
Manifest number:          051B
Signing time:             Sat 24 Oct 2026 23:33:53 +0000
Manifest this update:     Sat 24 Oct 2026 23:33:53 +0000
Manifest next update:     Sat 31 Oct 2026 23:33:53 +0000
Files and hashes:         1: d1_lofYadAjf7tR_FEfjRk2lCyo.crl (hash: USj43ZgYrUq3khbJglGTOVQ77aLHYbfsOQjlDZwE6g8=)
                          2: 2D6288A4AE0611F1BEA6785E4B11F970.roa (hash: XFW6SnFPAV4WXehvZc70rBV7iQTFvf7ToBkJjvUsDGg=)
                          3: 57B53F64DE9B11EC9AE23269C4F9AE02.roa (hash: YBgWSZPd12SzkSv6+Yvkd/eLTpeiObJO+DoAErrQY6Q=)
                          4: 59230714DE9B11EC9AE23269C4F9AE02.roa (hash: RpVDZMT+Nv0Axr1oqRBB0G9hqkFqlnTO9St/IWj3aAQ=)
                          5: ABDFBE34A75A11F1AF10EB3B3411F970.roa (hash: lcUds1gRLf7ptoRIc8Q0v3/2oJ+IL+a0fqYf/i4R1v8=)
                          6: 5B17230CDE9B11EC9AE23269C4F9AE02.roa (hash: epvnNXqY0NKQ5ppRcRBfLXB95BUJnWRwELFme7G+FAQ=)
                          7: 59D82E00DE9B11EC9AE23269C4F9AE02.roa (hash: E0If5HXOtdFlh/a2uN5bsvDoD3Zc0q3mzSBVdzz2GG8=)
                          8: 5879949ADE9B11EC9AE23269C4F9AE02.roa (hash: mdyDpI7YmoUcuIMuxi6wkeIY7XAJvlplT7aCIokh1+s=)
                          9: DEE5E3C49F0511EC9DA80B77C4F9AE02.roa (hash: AXOdS8FamXWGpVb8dVSV9L7c5bFjLM5GeduJrKDw4hE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
                          rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 23:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1371 (0x55b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
        Validity
            Not Before: Oct 24 23:33:53 2026 GMT
            Not After : Oct 31 23:33:53 2026 GMT
        Subject: CN=6add4061-200c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3a:57:1f:b6:b4:93:1f:68:38:34:0a:0f:18:
                    e0:8b:7a:5a:c1:71:b6:c0:89:4d:27:02:be:14:8d:
                    82:da:9b:7d:3a:98:0d:40:9a:6c:a2:5b:79:34:c7:
                    40:5a:d0:c1:7e:ca:1b:ee:bf:71:c2:64:2d:c1:8e:
                    be:ab:1a:b7:17:ab:64:56:53:ce:7e:9a:39:c8:08:
                    21:c9:c9:3f:63:33:7d:bb:71:1b:42:7b:d8:18:ea:
                    48:fe:4a:7a:57:2e:55:c4:61:b1:37:18:69:60:cf:
                    64:8d:4f:55:e9:6f:57:21:6c:4e:59:5e:11:59:af:
                    88:69:22:bb:59:c5:e8:aa:fd:d0:d1:03:cd:f7:9d:
                    33:41:62:8b:8d:5c:8d:b6:9a:c4:a9:98:08:d4:8f:
                    7f:e4:15:12:05:3c:fe:d7:dc:63:b6:08:38:84:78:
                    fb:fc:8e:37:ee:39:bf:9a:8a:da:3b:c2:68:a3:f7:
                    8d:63:ee:b7:07:d2:00:5a:61:62:47:f6:b7:fc:5d:
                    a7:4a:15:62:6f:66:b0:ea:48:1e:fa:f2:97:de:2f:
                    9c:51:a1:4c:30:fe:72:6c:6c:d1:0e:19:b8:5f:13:
                    27:2f:ff:d9:05:d5:63:c2:05:93:df:55:8e:7e:e7:
                    f4:01:f3:06:f5:71:49:ea:30:15:3c:fa:5e:9f:5d:
                    2f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D9:4E:73:96:87:88:10:B6:DE:28:E3:CB:B5:08:B1:3D:FF:4F:8F
            X509v3 Authority Key Identifier:
                keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:0b:ab:f1:81:46:bd:a7:9f:d4:b6:ef:cb:10:c5:6c:10:0c:
         77:1d:5e:d4:3e:07:3c:ba:89:62:a8:75:f5:b5:ce:fd:23:b3:
         ee:a1:da:b8:dc:bb:da:74:a7:b1:e1:89:d7:31:40:47:5d:85:
         d4:4a:50:06:95:fb:f1:71:35:74:d2:29:ba:da:e6:d1:74:84:
         8f:c5:aa:96:e5:20:aa:5f:8c:97:05:cd:ac:29:82:dd:ba:96:
         27:2a:94:c1:0e:61:2d:6e:d6:e9:d9:1b:ae:c3:fa:32:3d:30:
         d9:b8:d5:0a:5d:9c:0f:82:fc:3c:c2:e5:70:01:f5:09:96:54:
         6a:cb:4e:7f:01:bc:1e:57:a6:d9:bf:09:84:16:d5:e3:40:4e:
         7c:17:72:57:63:61:b4:ac:5d:53:8e:11:b9:f6:89:26:7b:ac:
         3e:4a:33:8e:7e:c4:e7:a1:50:44:b1:23:3e:c0:e7:0e:0d:67:
         6b:df:4e:6b:f2:09:55:97:b2:45:db:29:a7:a7:aa:9c:1d:69:
         43:c3:20:e3:dd:ef:50:bc:f2:93:eb:1b:c7:da:e6:14:4c:7f:
         8f:85:b3:2b:72:3a:84:86:30:f4:19:15:04:55:3d:51:4d:f9:
         9e:ee:e9:d4:bf:fc:7d:59:18:c0:d5:ec:56:44:b0:a9:ff:c4:
         7a:68:21:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 10:57:21 2026 by rpki-client