Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft
File:                     7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft (raw, json)
Hash identifier:          AfkTdHNmcob1WX4ZWFH6rfJiOVdDLAdaxPoHxxNZrVc=
Subject key identifier:   86:78:B5:30:E9:FA:C5:55:29:4C:08:16:F6:3A:6D:1F:DE:08:59:23
Authority key identifier: ED:23:A8:E8:9E:56:BC:BD:A1:C0:0E:49:7C:48:83:D7:95:E5:2D:54
Certificate issuer:       /CN=A91652B5/serialNumber=ED23A8E89E56BCBDA1C00E497C4883D795E52D54
Certificate serial:       A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft
Manifest number:          A5
Signing time:             Sat 03 Oct 2026 07:54:04 +0000
Manifest this update:     Sat 03 Oct 2026 07:54:03 +0000
Manifest next update:     Sat 10 Oct 2026 07:54:03 +0000
Files and hashes:         1: 7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl (hash: pc35F7pwo+TLs+sM3d2CXk1n//gBvH/o+8tEphmeZs0=)
                          2: 53D55B1CD1AF11F0AD05C10CC4F9AE02.roa (hash: m0+z5eRLT8pv0TnouBrk5fUb2HbYM2GEY2LCpA+SYWw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl
                          rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 07:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91652B5, serialNumber=ED23A8E89E56BCBDA1C00E497C4883D795E52D54
        Validity
            Not Before: Oct  3 07:54:03 2026 GMT
            Not After : Oct 10 07:54:03 2026 GMT
        Subject: CN=6ac0b49c-ef5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3b:4b:51:55:d0:65:02:5b:6a:df:65:12:ef:
                    a0:32:60:1f:7a:3a:9f:97:4a:ad:1f:cd:b8:74:e9:
                    a2:02:0f:c2:76:65:60:cf:79:73:20:dc:06:9a:37:
                    f2:44:67:55:be:6e:b6:6f:ed:35:51:23:d1:21:8d:
                    c0:9e:e1:ac:8f:ed:af:9f:c1:3c:9a:18:0a:4a:ce:
                    2a:02:03:bc:55:2f:91:56:ed:62:b6:31:74:5e:63:
                    12:d6:09:10:e2:57:61:f0:13:32:95:a4:01:a0:35:
                    5e:24:31:33:a8:e9:05:37:21:0e:f3:73:2c:8f:15:
                    5f:f0:f4:c5:06:67:a8:b6:eb:18:07:6b:f6:9b:97:
                    3f:a6:9e:bb:8c:72:ce:f9:5f:ce:33:bf:a2:6e:5c:
                    8a:0f:5f:b2:8e:2a:fa:51:a8:90:14:11:88:0a:43:
                    e2:6f:bc:cd:ad:3c:7f:1c:ea:32:9c:4e:59:8c:cf:
                    9a:a6:37:6f:5f:44:bb:6a:df:d1:5c:a4:fc:86:0e:
                    6b:a7:ab:6e:03:4c:8b:91:4b:ab:88:8c:72:d4:c3:
                    45:47:44:a7:69:62:20:52:dc:3a:b2:37:b7:f1:2d:
                    fa:d8:f1:c3:ea:cb:02:a5:27:51:a4:12:af:e6:2c:
                    41:32:d0:72:e9:0c:f0:ac:63:43:e2:88:26:e6:a8:
                    b8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:78:B5:30:E9:FA:C5:55:29:4C:08:16:F6:3A:6D:1F:DE:08:59:23
            X509v3 Authority Key Identifier:
                keyid:ED:23:A8:E8:9E:56:BC:BD:A1:C0:0E:49:7C:48:83:D7:95:E5:2D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:8b:1c:7c:87:f4:33:7f:b6:1a:5b:29:c1:e0:0b:16:6b:3d:
         af:93:55:90:94:55:2c:19:c4:e2:df:6c:43:ec:3f:70:44:1e:
         10:6d:78:b5:51:b0:61:60:9f:2e:1f:fa:58:45:db:08:3b:0c:
         bd:40:7f:f3:64:26:a2:23:2b:93:2c:b6:5d:1e:45:cf:8c:50:
         cb:e2:58:e6:66:c7:de:de:2b:2a:ce:a6:d0:f5:16:2e:4d:ca:
         5b:bf:41:bd:fe:a3:05:67:6a:41:aa:58:db:27:c4:3a:33:d9:
         5e:90:26:bc:aa:1a:fe:2a:5c:9d:41:79:4e:c5:e6:73:da:f2:
         ad:e3:fd:bd:68:4e:90:16:66:8e:71:e6:fc:89:71:08:0c:f9:
         89:54:2e:31:4c:ec:03:a9:23:e1:8e:a6:3f:75:53:70:b6:1f:
         6c:e5:8f:25:da:e9:7e:bb:31:16:5d:a8:f6:86:35:c8:67:1c:
         17:4a:51:cc:73:cf:fb:2d:f3:fe:64:5e:2b:49:4e:9e:57:f3:
         0b:a3:c5:bb:d5:c0:e1:5e:d7:ce:aa:a9:47:be:71:25:e5:79:
         8a:22:4a:22:82:fb:e2:84:f1:f1:35:47:20:88:aa:d3:4f:b0:
         f9:04:1e:86:2b:5c:9c:ea:55:5b:da:25:08:de:69:2b:5b:19:
         2d:69:2f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:19:28 2026 by rpki-client