Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
File:                     tADiGrPTJXQtuHeDDrxEB233CUg.mft (raw, json)
Hash identifier:          nLyLBDKlTAKzdeNWYY4VnCY1VIDJ2IWLLue80STP3gw=
Subject key identifier:   9D:DB:EF:C4:60:2D:23:B7:87:0E:F0:0C:CF:52:49:C5:D3:C9:85:D0
Authority key identifier: B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48
Certificate issuer:       /CN=A91658EF/serialNumber=B400E21AB3D325742DB877830EBC44076DF70948
Certificate serial:       1003
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
Manifest number:          2E92
Signing time:             Sun 04 Oct 2026 16:44:10 +0000
Manifest this update:     Sun 04 Oct 2026 16:44:10 +0000
Manifest next update:     Sun 11 Oct 2026 16:44:10 +0000
Files and hashes:         1: tADiGrPTJXQtuHeDDrxEB233CUg.crl (hash: XRudrmOicoBQG9vMKQhDwlKzCReq7yrSerFFnLw6r1s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.crl
                          rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 16:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4099 (0x1003)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91658EF, serialNumber=B400E21AB3D325742DB877830EBC44076DF70948
        Validity
            Not Before: Oct  4 16:44:10 2026 GMT
            Not After : Oct 11 16:44:10 2026 GMT
        Subject: CN=6ac2825a-01c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f2:81:e3:f0:38:a0:19:ec:9c:b6:89:75:3e:
                    e9:e4:82:f5:e4:e3:d4:ff:ea:49:0d:5c:17:7a:05:
                    ee:d8:3b:55:75:65:d3:f3:b9:86:c4:04:15:63:b8:
                    d1:a6:1b:f0:2d:13:94:de:0e:5a:8a:38:8e:00:40:
                    47:de:fa:8b:5d:3e:5a:f1:fc:46:a4:59:44:11:d3:
                    07:2e:af:0b:e1:e6:b8:71:ff:25:2d:64:60:55:c2:
                    57:e4:c3:f4:e0:22:f1:9c:83:ed:f8:6b:83:7f:3b:
                    34:c1:a0:b0:4d:d3:d1:95:60:8d:73:57:2d:c5:a6:
                    24:91:5b:84:9d:9f:f7:a3:65:76:49:4d:dd:1d:cf:
                    0d:bb:e8:b1:7f:76:79:b1:25:64:4f:90:99:3a:62:
                    e8:6e:ac:27:2a:c1:57:72:f2:b8:57:14:9a:05:65:
                    bd:25:d3:76:5c:71:33:fd:8a:6a:03:4a:03:df:8d:
                    40:95:c3:85:b7:bb:0a:b2:dc:ec:d7:1d:5c:73:ba:
                    fc:17:d2:a2:f0:d6:62:5f:07:e6:e7:1e:a7:c7:0a:
                    fa:fc:10:d1:4b:63:75:28:7b:b4:61:69:43:ac:c6:
                    f8:d9:b7:4f:4c:7a:0f:b2:6a:d3:0c:5f:d9:d5:64:
                    0e:a8:a3:1e:f0:94:7b:ca:a2:36:86:25:96:a3:6e:
                    45:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DB:EF:C4:60:2D:23:B7:87:0E:F0:0C:CF:52:49:C5:D3:C9:85:D0
            X509v3 Authority Key Identifier:
                keyid:B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:03:ab:1a:fc:9b:c0:73:94:79:64:84:7c:b8:0d:6a:ee:02:
         69:7e:b9:ab:85:82:60:ef:c8:c5:de:93:e5:91:34:38:e9:81:
         b9:95:5d:fb:b1:1f:24:d5:5b:b1:82:db:08:df:a7:b2:ef:a6:
         d7:f9:b8:5f:1e:c4:36:58:b0:2e:da:af:fd:10:2b:6d:07:19:
         0a:71:1e:a3:3a:93:8f:d0:3b:5a:dc:21:5c:4f:5a:0b:27:e1:
         66:15:72:9f:46:f8:1b:a0:3e:a7:8e:f6:da:3f:04:21:d5:36:
         18:d3:b5:fc:8c:7c:77:fa:c4:b7:32:c3:87:38:2b:13:30:5e:
         e8:12:a5:d3:9f:6c:02:ec:9c:44:64:2a:02:4a:4f:09:a4:2d:
         30:54:cc:4f:60:5c:d0:93:36:47:0d:5d:31:4b:10:6c:e1:e1:
         84:f2:f8:80:e8:76:fb:ac:ca:96:df:ff:a2:70:ad:cd:49:d2:
         32:64:d2:20:65:7c:a2:39:e5:41:af:24:ca:0e:5e:1e:d6:e4:
         5c:99:bb:80:e9:3f:ee:44:95:c6:09:3a:c5:23:85:ed:f1:83:
         c8:9d:e4:7a:78:92:e7:ad:32:2e:dc:07:df:61:df:d7:72:06:
         cf:c2:21:25:5d:1f:e9:37:42:94:79:9f:b5:c1:32:f8:39:15:
         de:ff:46:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:44:16 2026 by rpki-client