Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91618CC/BE10FD74B7D211F1BDEC96036411F970/5lIaiRmlF2mqCjq9RAsY6vAOdGE.mft
File:                     5lIaiRmlF2mqCjq9RAsY6vAOdGE.mft (raw, json)
Hash identifier:          +/GZgZmSkcnUOsA60q1gavuYaWaRXxd3MDmfS7pmpCM=
Subject key identifier:   1E:27:23:36:E9:84:9A:C9:C7:F2:50:67:7E:7D:3F:AF:C9:E4:AE:AE
Authority key identifier: E6:52:1A:89:19:A5:17:69:AA:0A:3A:BD:44:0B:18:EA:F0:0E:74:61
Certificate issuer:       /CN=A91618CC/serialNumber=E6521A8919A51769AA0A3ABD440B18EAF00E7461
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5lIaiRmlF2mqCjq9RAsY6vAOdGE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91618CC/BE10FD74B7D211F1BDEC96036411F970/5lIaiRmlF2mqCjq9RAsY6vAOdGE.mft
Manifest number:          08
Signing time:             Sat 03 Oct 2026 10:00:17 +0000
Manifest this update:     Sat 03 Oct 2026 10:00:16 +0000
Manifest next update:     Sat 10 Oct 2026 10:00:16 +0000
Files and hashes:         1: 5lIaiRmlF2mqCjq9RAsY6vAOdGE.crl (hash: pJkbaSaRiofywnKmPcah3wRvj1rDRlyXpcdrSVNxaEo=)
                          2: 1190F5CEB7FD11F1B60FE3E66F11F970.roa (hash: JLURucWU3mWkmCHGceX/BINflLURN7LspmptIE7Lqlc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91618CC/BE10FD74B7D211F1BDEC96036411F970/5lIaiRmlF2mqCjq9RAsY6vAOdGE.crl
                          rsync://rpki.apnic.net/member_repository/A91618CC/BE10FD74B7D211F1BDEC96036411F970/5lIaiRmlF2mqCjq9RAsY6vAOdGE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5lIaiRmlF2mqCjq9RAsY6vAOdGE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 10:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91618CC, serialNumber=E6521A8919A51769AA0A3ABD440B18EAF00E7461
        Validity
            Not Before: Oct  3 10:00:16 2026 GMT
            Not After : Oct 10 10:00:16 2026 GMT
        Subject: CN=6ac0d231-2b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9c:24:74:24:26:3b:0f:0a:1e:2a:9b:b4:30:
                    cd:2b:d8:a4:a2:49:89:7f:b2:12:83:c7:12:4e:3c:
                    0c:f1:4d:c6:23:94:08:04:38:76:96:af:02:d2:10:
                    50:90:f7:a6:52:1f:f4:f0:33:10:3a:69:fb:45:b6:
                    bf:bf:46:af:14:40:c5:11:26:6a:b5:b3:4e:81:3e:
                    74:7c:2c:d0:14:a6:a2:5b:7d:ca:ea:33:06:b9:9f:
                    9d:1a:62:a0:14:c7:87:97:ea:35:22:49:6c:fc:3e:
                    8c:28:d4:de:d0:1d:1c:f2:03:78:c3:01:18:7f:b9:
                    ee:4c:8e:be:9e:07:e4:f2:38:fc:5b:e0:e2:8a:5d:
                    d4:27:ad:9c:d8:09:76:c2:30:41:e8:fc:e9:a2:13:
                    93:a5:b1:e6:af:19:a5:3c:df:0d:05:d0:5f:d6:c1:
                    32:ce:9c:53:e5:d0:66:c9:e5:ce:a8:4f:1c:03:63:
                    e7:f5:6c:a6:2a:3e:43:cb:57:8e:09:72:16:d8:84:
                    0a:76:ef:d4:85:87:cd:c9:a1:cc:c2:d5:34:01:c4:
                    7b:05:3c:d5:f0:82:6e:ba:56:d4:9e:21:6a:4c:17:
                    bb:2b:0d:97:73:19:07:17:89:de:39:6b:d4:97:59:
                    ce:ea:9b:02:26:52:58:82:f8:dd:25:15:02:be:d7:
                    fb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:27:23:36:E9:84:9A:C9:C7:F2:50:67:7E:7D:3F:AF:C9:E4:AE:AE
            X509v3 Authority Key Identifier:
                keyid:E6:52:1A:89:19:A5:17:69:AA:0A:3A:BD:44:0B:18:EA:F0:0E:74:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91618CC/BE10FD74B7D211F1BDEC96036411F970/5lIaiRmlF2mqCjq9RAsY6vAOdGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5lIaiRmlF2mqCjq9RAsY6vAOdGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618CC/BE10FD74B7D211F1BDEC96036411F970/5lIaiRmlF2mqCjq9RAsY6vAOdGE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:52:b0:6c:c8:71:fc:d2:23:a8:8a:4e:ed:8c:c0:1e:2f:d4:
         39:65:7d:b9:b9:1b:a3:0e:f7:65:b7:ce:d9:eb:39:6b:7d:fa:
         f3:44:88:cc:37:03:bb:c9:e2:37:15:4f:6b:5a:8d:38:d3:c1:
         b4:fc:f4:1f:88:1b:b3:b5:d4:81:0e:17:08:ec:43:d3:b3:d0:
         81:dc:d8:26:c9:ab:17:0b:d0:51:36:10:f2:fe:0f:ae:eb:fb:
         b0:16:27:22:de:eb:e7:c6:22:12:9c:15:73:13:dd:58:1b:54:
         f7:52:ed:da:81:2c:2a:50:07:f8:df:a5:59:dc:36:2f:b7:00:
         25:c5:5d:4e:eb:8b:71:ab:90:c3:eb:19:72:18:20:06:e7:60:
         00:9c:48:a6:6c:e3:6b:a7:7a:f1:ef:3c:30:50:95:b5:26:9d:
         39:ef:9b:d5:ec:db:79:f2:b7:8b:9b:2d:a8:28:f8:ca:f2:e3:
         96:e8:43:dd:1f:fc:56:14:45:f2:b4:ac:1e:28:62:ac:74:f2:
         e2:3d:79:2c:43:8a:9d:26:5b:a1:f5:dd:19:6c:96:5d:c0:75:
         59:37:0d:2a:03:1f:2f:3b:26:02:d3:52:cc:08:13:69:7d:82:
         5a:aa:91:2f:4e:7f:3b:66:ac:6c:f9:6b:12:8b:87:21:de:03:
         fe:df:9f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:37:10 2026 by rpki-client