Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
File:                     52j8yLln1vHIgeDUmgxCCN8H-zc.mft (raw, json)
Hash identifier:          JWILFGQLJQiPGAeYrtsnqsXLE/uf3c1ujX1BKgSFXZE=
Subject key identifier:   A8:E9:84:34:89:AA:08:10:84:B4:85:B0:ED:90:23:32:0F:BD:55:9E
Authority key identifier: E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37
Certificate issuer:       /CN=A914C1AE/serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37
Certificate serial:       045C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
Manifest number:          0454
Signing time:             Sat 03 Oct 2026 00:28:00 +0000
Manifest this update:     Sat 03 Oct 2026 00:27:59 +0000
Manifest next update:     Sat 10 Oct 2026 00:27:59 +0000
Files and hashes:         1: 52j8yLln1vHIgeDUmgxCCN8H-zc.crl (hash: 26+eGBl8Gv6/XJyF/1jKKzn1Vgip7Y1rEaAGorU68+o=)
                          2: 1D3CD16AB67A11ECB02F1D5FC4F9AE02.roa (hash: dHW1Qook3wZ5zh5JBvm9IKVQr+R+p5FVYsj7ayk0Xrs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl
                          rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 00:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1116 (0x45c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C1AE, serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37
        Validity
            Not Before: Oct  3 00:27:59 2026 GMT
            Not After : Oct 10 00:27:59 2026 GMT
        Subject: CN=6ac04c0f-0eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a8:ba:e7:b4:9a:4c:55:da:8d:c8:bf:e8:16:
                    93:65:30:0f:ec:1f:f3:1d:d5:d8:c7:a5:9d:9f:58:
                    cc:2a:31:18:16:1d:f3:f2:a5:15:af:d3:4a:6f:04:
                    3d:0b:a2:22:72:e6:17:d3:09:c3:a7:8c:26:ad:51:
                    ef:07:65:33:5a:c1:99:03:d6:8f:e3:77:73:2c:82:
                    d7:88:a5:e8:e6:11:83:99:1f:b1:63:21:ca:87:1d:
                    20:fe:72:42:e6:b5:ed:fc:09:60:f2:46:0c:fd:20:
                    40:f6:94:0d:9a:12:aa:d9:33:0c:88:a5:96:4b:17:
                    58:f6:0a:7d:38:1a:af:1d:61:d4:2e:53:0f:5d:59:
                    a7:d8:0e:b0:90:37:65:80:4b:cf:37:36:5c:fd:4b:
                    de:b9:5e:f6:ff:ad:6c:4a:6f:15:e1:a0:59:16:8d:
                    8c:5c:4a:89:79:95:88:f9:9a:08:c5:de:f9:b4:be:
                    64:e3:3e:57:1a:e7:b8:f4:cd:9d:00:75:78:52:f2:
                    14:1d:c4:d4:1f:3e:a4:e3:0c:18:0e:eb:66:8c:04:
                    90:e2:31:03:3a:32:20:95:45:f9:69:53:5d:60:f7:
                    2f:64:9e:c9:fd:27:a5:ef:bf:b6:bd:26:2d:d4:b2:
                    9b:76:8a:d2:71:5e:11:8d:55:84:7c:ae:12:cc:a2:
                    80:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E9:84:34:89:AA:08:10:84:B4:85:B0:ED:90:23:32:0F:BD:55:9E
            X509v3 Authority Key Identifier:
                keyid:E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:87:5a:1e:1d:28:56:ab:12:f0:70:70:43:87:91:73:b6:a3:
         1b:91:b9:77:55:ab:67:73:48:01:fe:b2:b6:22:f9:10:9f:39:
         ce:88:9b:51:ab:9c:c9:03:16:8f:91:4a:be:9f:bf:76:60:b8:
         fb:12:8c:2c:62:fd:dd:63:de:ad:c0:a0:4f:b9:1b:26:51:65:
         69:2c:6b:01:9e:cb:7c:36:33:a3:28:9b:57:28:82:83:c8:9d:
         c2:32:26:5e:2e:c4:06:da:b9:5d:89:67:98:6d:2f:7b:28:ec:
         1f:cd:a5:c4:f4:e8:18:89:c1:2b:ba:f5:a4:e4:68:99:80:7c:
         1f:af:e8:87:22:9d:f4:0f:78:10:70:a6:4b:be:5c:c0:f5:fc:
         93:f7:3f:81:94:9c:96:26:b4:56:e7:d5:cd:12:05:a0:44:d0:
         8a:a3:5b:2d:63:5d:d5:cd:42:cf:43:c8:51:bd:0f:e2:2b:28:
         72:59:7f:39:01:6c:68:2a:bd:14:de:45:95:c7:1c:0c:60:8a:
         6e:0e:5c:d4:22:60:f5:a5:06:96:16:ae:fb:84:28:66:fd:d8:
         7f:a7:85:21:34:6d:f0:fd:9a:08:89:a4:07:a1:f2:71:96:a2:
         49:a6:76:c3:4f:6c:f4:03:86:cc:5e:09:86:87:e9:1d:4f:e4:
         59:6d:7b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:55:07 2026 by rpki-client