Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/l5j60KAlRO73NipYtxrzZoFJjrE.mft
File:                     l5j60KAlRO73NipYtxrzZoFJjrE.mft (raw, json)
Hash identifier:          CdTyux4Gbbt/a4DxkeqK6rY7OW9W5CbNg3ajht1r3L4=
Subject key identifier:   3A:E7:84:E6:7C:7A:D7:AB:7E:EE:55:DC:8E:6A:AC:86:F1:B0:F8:E7
Authority key identifier: 97:98:FA:D0:A0:25:44:EE:F7:36:2A:58:B7:1A:F3:66:81:49:8E:B1
Certificate issuer:       /CN=A9147067/serialNumber=9798FAD0A02544EEF7362A58B71AF36681498EB1
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5j60KAlRO73NipYtxrzZoFJjrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/l5j60KAlRO73NipYtxrzZoFJjrE.mft
Manifest number:          56
Signing time:             Tue 27 Oct 2026 08:30:55 +0000
Manifest this update:     Tue 27 Oct 2026 08:30:54 +0000
Manifest next update:     Tue 03 Nov 2026 08:30:54 +0000
Files and hashes:         1: l5j60KAlRO73NipYtxrzZoFJjrE.crl (hash: K/kuRbYSXYj/BiAArLQk0Si7RFPxQOu9UB5jAQwvqNw=)
                          2: 77F3A8B44D1A11F1A20E0EADB9833773.roa (hash: njgB4GyznC4WbAXjnMUKLhBAaTqFgRbORUoYNqNFmn0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/l5j60KAlRO73NipYtxrzZoFJjrE.crl
                          rsync://rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/l5j60KAlRO73NipYtxrzZoFJjrE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5j60KAlRO73NipYtxrzZoFJjrE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 08:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147067, serialNumber=9798FAD0A02544EEF7362A58B71AF36681498EB1
        Validity
            Not Before: Oct 27 08:30:54 2026 GMT
            Not After : Nov  3 08:30:54 2026 GMT
        Subject: CN=6ae0613f-6818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a4:b6:46:60:75:75:a7:0b:91:4b:3b:4e:5b:
                    1f:2a:d3:cb:a7:f1:3b:f6:13:0d:1c:45:70:2c:58:
                    31:1c:e5:98:f9:d0:2c:ef:b3:34:56:0b:ca:7e:84:
                    21:b0:85:3f:62:87:c1:a3:ff:e0:d8:ad:bf:3d:f7:
                    ce:61:b3:05:a8:c4:c0:c9:dd:e6:40:dc:2e:40:25:
                    b8:d5:27:d8:9f:e5:9a:10:89:66:34:0e:8e:de:b8:
                    2f:a9:e1:a3:7b:81:0e:72:d1:09:b8:b1:f3:a1:e5:
                    6a:92:b5:c9:99:22:b4:70:f2:5d:ac:98:7e:32:40:
                    57:c1:b6:1e:6f:53:80:9d:3f:be:dc:b7:3d:5e:1c:
                    4b:55:a3:69:0d:b0:e6:28:2e:82:2e:0c:9c:7a:2d:
                    02:f4:7a:a2:31:e9:1a:38:f5:b4:26:c4:59:ed:28:
                    26:70:2a:b6:0e:fd:3e:99:ed:6b:32:68:d9:cc:d9:
                    f6:e2:5c:dd:ec:f7:93:cb:01:26:39:6a:c4:29:e7:
                    3a:77:a2:d0:13:ac:7f:ee:1a:24:4e:3b:a0:42:c2:
                    17:04:6e:73:bc:eb:12:f1:22:97:a9:66:b2:95:65:
                    df:8e:b8:04:da:29:74:36:fa:48:d3:82:f7:5e:45:
                    c3:ca:86:22:2a:d3:ea:01:ee:a8:33:62:53:be:4a:
                    82:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E7:84:E6:7C:7A:D7:AB:7E:EE:55:DC:8E:6A:AC:86:F1:B0:F8:E7
            X509v3 Authority Key Identifier:
                keyid:97:98:FA:D0:A0:25:44:EE:F7:36:2A:58:B7:1A:F3:66:81:49:8E:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/l5j60KAlRO73NipYtxrzZoFJjrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5j60KAlRO73NipYtxrzZoFJjrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/l5j60KAlRO73NipYtxrzZoFJjrE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:54:58:3b:aa:8c:25:1f:04:b6:19:44:d5:1d:ec:f9:22:ff:
         a9:25:3f:e0:a6:9f:48:30:40:d7:09:42:99:ff:18:4a:d7:86:
         23:0a:7a:e2:25:1d:dd:76:4b:ab:22:89:93:9c:e0:ec:f8:60:
         8a:00:50:a6:02:9b:5f:1b:65:8f:09:0c:ab:59:49:b3:dd:38:
         a1:2c:bc:d9:17:f3:d5:16:83:b7:e8:2c:be:3b:27:e7:53:e6:
         ff:97:37:e6:f2:c7:c0:f0:4e:f0:aa:e4:81:3c:34:2e:5f:60:
         4d:72:a9:7b:56:08:1e:a2:34:92:1d:6d:f7:ac:84:58:89:17:
         61:d8:ed:20:a0:ff:aa:dd:6d:ea:b7:4c:dd:97:d5:38:da:07:
         9c:d8:96:11:e9:37:b2:3c:43:14:4c:3d:ae:d1:a5:ef:a9:44:
         ff:a1:1d:a0:eb:77:c9:b1:14:69:80:86:f2:ff:ea:28:f1:72:
         25:b6:64:80:63:f3:b2:e3:12:28:bf:e2:eb:3f:e9:07:a3:be:
         72:d6:7e:c2:08:89:15:9e:ac:f7:24:d1:24:76:de:28:d9:0a:
         22:76:e9:4d:07:59:25:c4:bc:f9:e2:c4:5b:84:6e:8d:f3:ab:
         33:53:8d:bd:ca:4f:95:6c:11:6b:77:bc:12:d9:60:56:43:30:
         16:61:ed:90
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
NzA2NzExMC8GA1UEBRMoOTc5OEZBRDBBMDI1NDRFRUY3MzYyQTU4QjcxQUYzNjY4
MTQ5OEVCMTAeFw0yNjEwMjcwODMwNTRaFw0yNjExMDMwODMwNTRaMBgxFjAUBgNV
BAMTDTZhZTA2MTNmLTY4MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDapLZGYHV1pwuRSztOWx8q08un8Tv2Ew0cRXAsWDEc5Zj50CzvszRWC8p+hCGw
hT9ih8Gj/+DYrb89985hswWoxMDJ3eZA3C5AJbjVJ9if5ZoQiWY0Do7euC+p4aN7
gQ5y0Qm4sfOh5WqStcmZIrRw8l2smH4yQFfBth5vU4CdP77ctz1eHEtVo2kNsOYo
LoIuDJx6LQL0eqIx6Ro49bQmxFntKCZwKrYO/T6Z7WsyaNnM2fbiXN3s95PLASY5
asQp5zp3otATrH/uGiROO6BCwhcEbnO86xLxIpepZrKVZd+OuATaKXQ2+kjTgvde
RcPKhiIq0+oB7qgzYlO+SoJhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOueE5nx6
16t+7lXcjmqshvGw+OcwHwYDVR0jBBgwFoAUl5j60KAlRO73NipYtxrzZoFJjrEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MDY3L0UzNjEwRTFDNEQx
OTExRjFBOEQ5QjE4NkI5ODMzNzczL2w1ajYwS0FsUk83M05pcFl0eHJ6Wm9GSmpy
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbDVqNjBLQWxSTzczTmlwWXR4cnpab0ZKanJFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3
MDY3L0UzNjEwRTFDNEQxOTExRjFBOEQ5QjE4NkI5ODMzNzczL2w1ajYwS0FsUk83
M05pcFl0eHJ6Wm9GSmpyRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBpVFg7qowlHwS2GUTVHez5Iv+pJT/gpp9IMEDXCUKZ/xhK14YjCnriJR3ddkur
IomTnODs+GCKAFCmAptfG2WPCQyrWUmz3TihLLzZF/PVFoO36Cy+OyfnU+b/lzfm
8sfA8E7wquSBPDQuX2BNcql7VggeojSSHW33rIRYiRdh2O0goP+q3W3qt0zdl9U4
2gec2JYR6TeyPEMUTD2u0aXvqUT/oR2g63fJsRRpgIby/+oo8XIltmSAY/Oy4xIo
v+LrP+kHo75y1n7CCIkVnqz3JNEkdt4o2QoidulNB1klxLz54sRbhG6N86szU429
yk+VbBFrd7wS2WBWQzAWYe2Q
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:23:26 2026 by rpki-client