Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft
File:                     0e69FiTc3lGUEO1dZObVE5hLd9A.mft (raw, json)
Hash identifier:          HyEx92CxABm6iP7YTxMxH2lFYdXUNl/7Xh43ah6tvKo=
Subject key identifier:   8D:E4:21:23:AE:B4:0E:69:5B:50:38:FD:45:91:AE:AE:5F:72:A8:D5
Authority key identifier: D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0
Certificate issuer:       /CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0
Certificate serial:       01B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft
Manifest number:          01AC
Signing time:             Sun 11 Oct 2026 04:39:20 +0000
Manifest this update:     Sun 11 Oct 2026 04:39:20 +0000
Manifest next update:     Sun 18 Oct 2026 04:39:20 +0000
Files and hashes:         1: 0e69FiTc3lGUEO1dZObVE5hLd9A.crl (hash: FdYpaqKcfGBIsmoAjn1Ccv3nlY77HFEicc4V4TH5m6E=)
                          2: D0B078FA389611EF909AF237C4F9AE02.roa (hash: r4s86w8kUPh2Ayt425Fs7qlK2WFWesJZiNchbJioMHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl
                          rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 04:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437 (0x1b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F2BD, serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0
        Validity
            Not Before: Oct 11 04:39:20 2026 GMT
            Not After : Oct 18 04:39:20 2026 GMT
        Subject: CN=6acb12f8-0a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:23:1f:e5:4f:bf:0c:37:15:a5:50:fa:03:24:
                    94:85:5c:20:af:d8:27:f7:06:43:a3:ce:83:6e:c1:
                    9b:77:3f:42:cd:64:c5:c0:c8:a6:ad:e8:56:71:96:
                    f9:50:7c:a2:0b:3f:d8:af:5e:16:da:a5:87:e8:2c:
                    51:05:80:ac:b9:08:6f:3d:99:a3:3b:0c:51:9c:33:
                    3a:59:b4:3e:1e:03:d8:cf:da:c9:36:33:6e:2f:a1:
                    7d:b9:d6:be:6f:d5:9a:f9:75:a0:1f:63:58:56:1c:
                    7c:4c:77:f7:b3:a2:54:ba:a9:d9:90:37:f8:6e:08:
                    d6:9b:96:13:4a:77:7a:a5:9a:37:f7:a4:1f:92:b3:
                    cc:2e:e6:33:b5:86:51:29:b8:dc:5b:0a:d8:34:4f:
                    ce:d3:92:c9:71:14:51:32:24:9c:b9:c3:e9:83:4e:
                    2d:bb:14:94:7e:62:fb:41:e1:1b:31:4f:70:2e:33:
                    70:8f:df:e2:01:b1:ba:5f:1d:31:4a:e1:46:8d:2e:
                    87:29:c1:fb:ed:32:35:82:1d:9e:7e:d7:12:71:60:
                    64:a3:95:7d:88:ae:83:e5:b3:f4:21:5d:b3:53:c3:
                    9d:e8:27:e1:c1:63:2c:5d:89:00:ae:2f:6a:15:e0:
                    03:b9:29:ae:ae:46:d8:61:02:7a:3a:e0:b4:29:dd:
                    5f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E4:21:23:AE:B4:0E:69:5B:50:38:FD:45:91:AE:AE:5F:72:A8:D5
            X509v3 Authority Key Identifier:
                keyid:D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:22:b2:e7:47:72:80:55:56:fe:47:69:59:ca:91:3d:dc:97:
         2c:ae:01:e3:15:54:11:01:f7:81:56:01:68:67:ff:85:14:9c:
         81:1a:8a:1c:0d:3a:c4:44:e7:c1:0b:a9:e5:49:40:e2:0d:c5:
         8e:32:dc:7d:34:53:fc:65:4f:7e:19:8b:99:9b:f5:7b:88:d1:
         93:db:cd:07:1f:c8:ca:35:66:c1:3e:e7:50:99:a2:08:e5:c4:
         76:ec:9d:e1:fa:67:c2:ec:8c:06:f3:6a:89:f5:89:bc:18:d1:
         74:bb:0c:1a:1d:93:da:c8:0c:50:41:c7:ec:f4:e6:13:e2:b9:
         04:90:63:66:f5:03:16:ee:1a:f1:10:de:70:ca:b5:50:7d:6a:
         88:e5:b2:fd:dc:7a:d5:0c:34:45:48:04:b6:e6:27:88:72:e5:
         58:62:cd:a6:ad:62:d0:cd:98:ae:4f:08:12:11:6d:71:a5:4c:
         e8:e4:f1:5f:a5:e8:76:e4:01:5b:d8:13:38:ad:94:71:b8:5a:
         7e:b7:df:6b:07:90:94:77:5c:c8:9c:4f:d3:a8:7a:df:ab:c3:
         b4:60:55:ca:50:70:40:8b:3e:90:78:84:fd:35:ec:c2:78:5a:
         d7:b8:ac:d6:04:ab:cc:1f:fb:ec:a6:e4:c8:ad:8f:93:2a:24:
         f6:2b:11:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:09:34 2026 by rpki-client