Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
File:                     AZgxEf1vCyfiQEY7aKehmEXHuwo.mft (raw, json)
Hash identifier:          mjxGRxE/D09O1xFbfGMzS1N1WSuRFjS2y/TLAHK322Q=
Subject key identifier:   33:C0:8F:45:6C:2F:5A:FF:76:4A:71:AA:73:12:EB:7F:A7:E2:4D:18
Authority key identifier: 01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A
Certificate issuer:       /CN=A91513B0/serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
Certificate serial:       061C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
Manifest number:          0607
Signing time:             Sun 18 Oct 2026 23:02:48 +0000
Manifest this update:     Sun 18 Oct 2026 23:02:48 +0000
Manifest next update:     Sun 25 Oct 2026 23:02:48 +0000
Files and hashes:         1: AZgxEf1vCyfiQEY7aKehmEXHuwo.crl (hash: GmERdjNvuGaJrgnl6FuLWxtfrolra8omCjzTAIb5yVo=)
                          2: C1CDEDC6950711F0AFD0F30BC4F9AE02.roa (hash: faousUY0JgE8iIy2l7ylas9vT1kvEU/RrBUjclwr8EM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl
                          rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 23:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1564 (0x61c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91513B0, serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
        Validity
            Not Before: Oct 18 23:02:48 2026 GMT
            Not After : Oct 25 23:02:48 2026 GMT
        Subject: CN=6ad55018-53f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d0:00:79:f6:62:31:93:e6:95:0b:08:f0:33:
                    1c:4b:17:fb:86:fe:24:e8:c1:7a:23:1a:c2:f2:25:
                    d7:34:c0:7e:b9:01:8f:9b:74:ec:b3:04:3f:3b:17:
                    6c:4b:62:19:c4:f4:a0:03:ff:04:87:1c:34:78:b3:
                    b5:52:d9:ee:9d:21:b8:b5:61:37:6e:21:a8:e3:b3:
                    8d:d6:8b:2c:3a:6f:4b:9e:7b:d9:5c:55:47:5e:64:
                    24:9a:1e:e0:f7:3f:68:92:c6:69:fd:81:52:f1:bc:
                    b9:53:4b:3c:d3:a9:56:9b:7d:88:14:11:22:0a:df:
                    39:cf:f4:4d:83:fa:15:1e:36:1c:69:69:65:17:99:
                    67:cf:98:79:47:30:e0:f8:3b:57:5b:3a:24:d8:62:
                    14:c3:6e:e7:7f:7b:78:c7:f6:76:47:6c:b1:b9:45:
                    af:8b:14:f4:78:90:db:f9:c6:03:61:df:8b:30:8e:
                    e3:b8:8d:8f:ab:05:39:c4:16:1a:26:ab:1f:05:8c:
                    78:cc:76:e9:c9:bb:55:23:b8:85:d9:e0:fc:e4:18:
                    2a:a8:d4:35:0c:ee:07:f8:73:cf:73:72:9f:65:a1:
                    32:60:4b:b6:0c:a5:ea:f9:a6:0a:53:6f:d6:64:29:
                    fa:51:ce:d4:74:de:3f:be:4a:61:bb:ee:bc:e9:d6:
                    1f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C0:8F:45:6C:2F:5A:FF:76:4A:71:AA:73:12:EB:7F:A7:E2:4D:18
            X509v3 Authority Key Identifier:
                keyid:01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:96:34:73:30:4a:45:76:c2:bc:16:d6:48:cd:19:66:89:ed:
         3d:3a:a4:9d:ad:3c:eb:c0:e5:5a:35:c0:e0:12:c7:f1:04:52:
         69:09:36:87:0d:d3:e5:ff:fb:5b:06:1d:a4:ad:5e:07:2b:7c:
         87:57:36:f2:9d:35:50:a0:96:f7:a4:73:a1:cb:36:71:0a:04:
         ee:19:b6:35:20:ec:58:13:fb:72:ac:ee:45:cb:8c:86:e4:c2:
         69:35:cb:61:96:f3:63:9a:88:be:75:1a:df:b4:e4:47:31:14:
         81:69:7f:ef:eb:e1:f0:87:58:8c:09:da:cf:df:b2:77:30:54:
         e8:58:d4:b8:e5:1d:52:c8:36:2a:ef:59:50:91:6b:25:be:c5:
         d1:ea:0c:09:9e:b1:c2:5e:7c:72:89:c8:10:0f:20:3c:d7:b1:
         ea:38:a4:ac:31:7e:ea:d7:fc:f8:c2:9f:5a:9a:a8:79:83:14:
         fd:5b:1c:55:1d:49:12:e5:17:5d:22:73:f8:14:93:3f:44:b6:
         25:97:8a:0c:3d:09:97:7e:46:cd:72:3c:15:29:34:a9:19:7e:
         ce:e3:19:12:19:ae:ba:c3:8b:3e:ff:5a:aa:88:f6:67:b0:67:
         09:b0:a0:dc:80:85:72:74:a3:d0:db:cb:97:e3:45:9b:26:cb:
         12:cb:62:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:20:26 2026 by rpki-client