Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
File:                     aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft (raw, json)
Hash identifier:          n1kdMFl7Khdimo0U0hiA0qqYYy+wZ4bwOHnIoG2DQ5g=
Subject key identifier:   6D:08:64:E9:90:C8:33:42:DD:AF:BB:08:EE:06:9A:F8:BB:74:4E:BA
Authority key identifier: 68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F
Certificate issuer:       /CN=A91549ED/serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F
Certificate serial:       08AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
Manifest number:          08A1
Signing time:             Tue 20 Oct 2026 20:47:11 +0000
Manifest this update:     Tue 20 Oct 2026 20:47:10 +0000
Manifest next update:     Tue 27 Oct 2026 20:47:10 +0000
Files and hashes:         1: aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl (hash: FlsDF4l3pyLHLt0/Oq+dQXcdd5+tndfvVZZ+kpy4+rE=)
                          2: 89B3D06E0F9111EBA9B90727C4F9AE02.roa (hash: OMJTHEhRKbysqVwaCH/CrR6Pj2ikKlgHxMDDmRLDUbY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl
                          rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 16:23:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2220 (0x8ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91549ED, serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F
        Validity
            Not Before: Oct 20 20:47:10 2026 GMT
            Not After : Oct 27 20:47:10 2026 GMT
        Subject: CN=6ad7d34e-1dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5a:93:c7:98:61:47:2f:9f:e3:a0:05:30:e6:
                    92:fb:53:99:2c:5c:08:71:8f:2c:df:c0:9f:bf:4d:
                    7c:8d:d6:41:e7:39:91:40:3e:a7:39:17:6b:99:5a:
                    aa:4a:b9:6f:b8:fb:40:f3:66:0c:76:fd:6e:c1:f7:
                    52:d8:08:31:28:02:f6:3c:c9:58:3c:28:54:16:60:
                    a4:33:bc:b9:74:f3:e1:5b:26:80:d6:47:09:e9:e2:
                    32:7d:b7:d4:2f:95:a7:f3:12:f3:ff:a0:ee:83:09:
                    60:08:86:9c:7d:7e:eb:7d:04:4d:b0:ec:03:4d:3a:
                    55:a8:32:2c:ae:eb:9e:1a:f9:83:3f:a5:ae:51:d0:
                    fb:19:f3:c1:33:65:6b:a8:8f:e4:5a:b5:43:95:d3:
                    e2:f1:d7:3c:93:93:86:b6:cf:bd:c5:03:1d:28:6b:
                    24:8e:14:7c:13:72:eb:87:52:35:be:93:36:e9:c5:
                    b4:98:8b:fc:31:d7:17:70:d6:4d:7f:03:b8:7e:05:
                    b3:f1:09:a6:67:d9:9e:d5:96:9f:e1:44:a9:ad:56:
                    bb:bd:77:a0:bc:07:c1:1b:7d:b1:4d:a7:ca:f2:6c:
                    05:62:cb:9b:fb:3c:85:54:eb:b2:42:2a:bb:94:ed:
                    95:de:5e:50:e9:d8:3c:7a:83:21:b5:fc:1f:ed:8e:
                    60:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:08:64:E9:90:C8:33:42:DD:AF:BB:08:EE:06:9A:F8:BB:74:4E:BA
            X509v3 Authority Key Identifier:
                keyid:68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:6a:80:07:ee:c8:51:78:21:f7:c8:ac:ba:c9:10:ce:97:fa:
         44:fa:dc:81:0f:1c:d3:26:4b:66:96:04:6a:a3:5f:ba:f4:e7:
         9b:83:a4:5c:08:f2:ac:49:eb:8a:2e:82:97:0d:2d:29:83:f0:
         8d:63:f4:93:79:4d:2b:1e:5c:28:87:0f:d6:77:bc:c8:bd:fe:
         05:72:19:61:9d:0e:ca:e0:ff:d8:4c:be:0e:72:19:67:79:ca:
         ea:b6:34:cf:84:b3:ec:dd:4d:28:dc:01:4e:60:ad:2c:51:f4:
         68:6f:a8:57:e8:be:25:85:61:5c:2e:57:9e:35:6e:e1:20:ee:
         c9:9c:25:2f:af:5f:85:cb:85:5b:78:ae:78:fe:96:7a:c6:6f:
         49:12:f1:69:61:3b:82:ea:2a:d2:a1:58:a5:b5:8f:55:43:8d:
         eb:53:fe:b5:05:88:4a:c7:41:7b:da:bb:b1:73:6e:36:96:13:
         a9:33:eb:d5:ff:47:ca:d8:3b:af:6d:f7:10:c4:95:4f:9a:79:
         8f:f2:f9:20:19:34:51:7c:8b:07:86:df:36:6a:93:1f:37:2f:
         b8:7e:d0:a1:00:00:27:dc:7c:0a:3a:6e:66:3c:87:9d:e8:4c:
         b5:e7:77:80:47:1d:7b:d9:b7:bb:17:2f:e9:ec:fa:14:18:55:
         28:16:89:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 00:48:59 2026 by rpki-client