Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft
File:                     5r9G5TDfkimPrAMq-8mECcRDBDk.mft (raw, json)
Hash identifier:          cl6qqcpU8epK9KfhhuT5XMJX8Wnl1bPpLFMaAAq68hg=
Subject key identifier:   50:FA:64:76:7B:03:4D:02:D0:4E:C7:73:18:43:7B:4C:0B:23:CA:63
Authority key identifier: E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39
Certificate issuer:       /CN=A91527F9/serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439
Certificate serial:       35BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft
Manifest number:          359B
Signing time:             Sun 04 Oct 2026 14:55:15 +0000
Manifest this update:     Sun 04 Oct 2026 14:55:14 +0000
Manifest next update:     Sun 11 Oct 2026 14:55:14 +0000
Files and hashes:         1: 5r9G5TDfkimPrAMq-8mECcRDBDk.crl (hash: plQmANYFiPgGC1GDP7AKyCkytdeZwvC+pe78yfzdnBw=)
                          2: AD5BA998D85D11EB8E31070BC4F9AE02.roa (hash: mZjZ+p8cLcbwXds5Q+V/zmBkA9l9nadihJZ6Y3qg9aQ=)
                          3: 909C5126F0A711EEA6150174C4F9AE02.roa (hash: S2c0dPwfKB8uOTngnalR9yGh9E58M2GB2TBOuFJZKU0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl
                          rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 14:55:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13754 (0x35ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91527F9, serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439
        Validity
            Not Before: Oct  4 14:55:14 2026 GMT
            Not After : Oct 11 14:55:14 2026 GMT
        Subject: CN=6ac268d3-95c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:43:c0:68:e3:88:df:b8:da:e6:10:32:0c:1b:
                    ba:80:31:bf:39:94:60:94:07:c9:88:20:85:db:f5:
                    bd:e3:90:ae:64:b8:a1:23:3d:a5:17:fa:5f:12:84:
                    53:05:c9:d1:9d:4d:82:79:d1:cb:51:e4:95:26:53:
                    66:9a:db:92:18:87:9f:fd:e0:06:18:1c:0a:87:38:
                    81:fc:ca:b0:3b:f4:47:47:5d:52:6e:ca:36:eb:7e:
                    bc:a1:99:cb:ad:53:98:ba:c8:6f:94:c2:17:12:4f:
                    64:61:ac:70:5f:ec:56:d8:33:e2:b9:66:9a:f5:92:
                    6b:64:27:a2:9f:3e:5a:63:0c:eb:f4:59:e4:ac:3c:
                    40:17:28:ed:75:3a:8d:08:4f:3f:a8:9c:53:c6:7c:
                    95:f5:68:f6:77:c8:e3:b5:49:1b:b4:4e:75:97:d8:
                    bf:5d:0b:57:4e:0b:21:6a:64:e3:c1:69:ee:c6:d0:
                    7d:2f:84:3c:fe:ad:52:fe:bd:cc:91:b7:e6:f3:6d:
                    e4:34:fa:cf:2a:56:a9:3c:a8:ef:6f:1b:de:27:08:
                    d1:ae:f7:5d:96:75:e2:2c:b8:84:1d:82:01:81:f1:
                    ae:27:53:ec:1a:54:80:c5:eb:92:73:dd:58:da:11:
                    97:44:cb:79:3e:44:40:3d:4d:87:8f:da:91:04:82:
                    39:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FA:64:76:7B:03:4D:02:D0:4E:C7:73:18:43:7B:4C:0B:23:CA:63
            X509v3 Authority Key Identifier:
                keyid:E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:96:b5:67:5a:7e:d3:4b:a6:d1:e0:11:84:b5:d3:82:b0:a1:
         af:01:83:5b:0a:99:bf:81:4e:f0:d3:7c:28:c3:66:c0:5c:19:
         b9:c8:f2:b5:d2:e6:fd:87:da:28:59:15:12:d4:32:26:17:b8:
         38:50:7b:0a:e2:31:6c:87:f9:94:f4:01:91:47:bd:e2:59:04:
         d9:a9:48:f9:de:e0:2e:b3:d0:95:da:07:e6:20:91:d6:ba:bf:
         1b:4e:2c:ef:0a:47:f0:54:20:69:ae:2b:df:04:6a:1f:12:ef:
         74:97:48:19:ec:15:eb:5a:ee:44:ae:f7:69:f0:7e:04:39:1f:
         1f:2d:e8:63:7e:6c:37:f9:37:3d:df:1d:64:94:34:e9:06:3d:
         c1:d7:aa:cd:ab:43:8b:ef:e9:3a:14:a4:35:50:03:c4:78:f8:
         ab:67:e2:00:ba:b8:3c:a5:99:39:ae:0a:2a:dd:e8:61:86:e3:
         31:68:64:11:1d:57:e1:c4:20:ac:42:e7:5f:32:dc:83:1d:be:
         b5:35:75:a7:5c:29:c6:ee:a4:98:87:af:18:1d:03:88:2f:d1:
         bc:80:4e:1f:8d:17:11:2b:b4:32:4e:4c:a2:97:01:a0:6d:f0:
         80:e0:81:b0:4e:5d:3c:45:3f:b7:b8:0c:74:e9:54:f9:93:a8:
         d8:c8:e1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:58:01 2026 by rpki-client