Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
File:                     usyV7haoNg4u685zU3tvmszfLq0.mft (raw, json)
Hash identifier:          2QVz3NP5CLU/lFkWwVlJVmpsS+M0Y6BXcC0Pi2qJGkc=
Subject key identifier:   96:7E:F8:99:91:8A:1B:BB:61:AD:59:7A:3A:15:69:13:6F:70:F1:79
Authority key identifier: BA:CC:95:EE:16:A8:36:0E:2E:EB:CE:73:53:7B:6F:9A:CC:DF:2E:AD
Certificate issuer:       /CN=A914D3B0/serialNumber=BACC95EE16A8360E2EEBCE73537B6F9ACCDF2EAD
Certificate serial:       A4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
Manifest number:          A1
Signing time:             Thu 29 Oct 2026 08:04:59 +0000
Manifest this update:     Thu 29 Oct 2026 08:04:59 +0000
Manifest next update:     Thu 05 Nov 2026 08:04:59 +0000
Files and hashes:         1: usyV7haoNg4u685zU3tvmszfLq0.crl (hash: JyTUNRtzWPMsTUiF7KLYJ5wH8qtuqfl79grH9RFT3AE=)
                          2: 9D379516E54D11F092458985756F56BC.roa (hash: AL+N7ElGeC7e5RBQ2GpUJUeVjtCPWdN/2uCY9aq6uic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.crl
                          rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 08:04:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D3B0, serialNumber=BACC95EE16A8360E2EEBCE73537B6F9ACCDF2EAD
        Validity
            Not Before: Oct 29 08:04:59 2026 GMT
            Not After : Nov  5 08:04:59 2026 GMT
        Subject: CN=6ae2fe2b-ac66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5d:48:bb:48:b9:2a:09:5d:41:d2:3d:47:fe:
                    3b:08:c7:b7:7f:5e:36:6a:66:d6:f4:d7:af:24:48:
                    33:16:99:2a:45:2a:0d:04:d7:40:ae:9f:8e:71:63:
                    31:16:5b:21:5d:b3:e6:ba:95:70:9d:bd:13:ac:a8:
                    b6:61:8a:83:59:e3:7e:1a:b5:d8:9f:dd:20:59:ee:
                    7f:b4:33:5e:9b:7a:f3:0e:b0:a1:47:8e:e7:85:06:
                    2b:c5:91:ad:1d:12:8f:c8:ae:a2:1e:cd:53:73:d3:
                    39:8a:d0:78:43:a4:37:94:49:81:09:fe:91:48:a2:
                    ee:0e:f9:95:da:aa:28:22:35:bf:ad:23:c3:4c:4f:
                    0b:a5:9c:dd:c0:2b:56:65:28:0f:a9:26:26:51:ce:
                    86:be:b4:c3:e5:a7:7d:dc:e3:3c:05:05:80:38:fa:
                    17:5c:16:e9:de:44:08:24:3f:ee:86:50:c7:61:1c:
                    95:40:cb:3a:4d:3b:3d:db:2c:4c:0a:6f:d5:94:f1:
                    f1:b0:41:35:ee:d2:1e:a1:eb:e2:d9:75:2e:41:2d:
                    70:21:08:1a:b5:3f:50:d3:1a:f9:9c:c0:85:14:0d:
                    8c:54:aa:8d:16:25:eb:d9:7a:8a:5e:42:98:b1:82:
                    7d:99:5b:2a:1b:2c:56:9f:78:97:87:ae:e2:8a:97:
                    d7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7E:F8:99:91:8A:1B:BB:61:AD:59:7A:3A:15:69:13:6F:70:F1:79
            X509v3 Authority Key Identifier:
                keyid:BA:CC:95:EE:16:A8:36:0E:2E:EB:CE:73:53:7B:6F:9A:CC:DF:2E:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:0b:a8:fb:87:7d:85:0b:43:80:b9:f8:f3:2c:31:97:63:17:
         d9:aa:d5:8c:00:7e:55:09:85:e0:4a:77:a8:2e:24:60:b3:0e:
         bb:6c:07:0a:29:08:42:91:a8:df:92:3c:d1:ec:07:cc:06:0e:
         fc:0f:22:b4:68:7a:62:60:4c:9a:e0:a3:f5:89:1b:4b:83:93:
         d5:15:61:b4:53:95:fd:78:07:8b:15:38:70:ab:4f:b7:b4:5d:
         af:90:7b:e2:dc:12:d3:d6:17:7b:82:16:be:a9:ab:31:c7:f5:
         ab:bb:a1:3b:00:2e:bd:d8:8d:4e:87:93:f1:d1:c1:15:7d:25:
         1c:dc:6f:98:e9:95:88:89:41:73:1e:92:c5:cd:8f:20:b8:1c:
         b1:4a:00:c7:da:a2:e5:fb:bc:4d:12:2f:e6:ee:5c:86:92:08:
         08:2b:59:23:7d:45:22:c5:ac:4c:12:29:04:32:42:44:5e:f9:
         51:72:98:44:c2:2c:99:fe:93:ae:e8:e7:24:ef:32:da:37:fc:
         80:99:a6:3f:82:03:88:9a:3b:61:1a:d9:a7:1b:ec:24:7b:31:
         fa:02:c3:12:89:3c:44:20:17:1b:27:58:90:4f:3a:27:15:05:
         f7:fb:e5:56:47:9e:f4:4b:fe:02:45:c8:45:c6:60:b3:26:15:
         b4:9f:bd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:53:58 2026 by rpki-client