Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
File:                     cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft (raw, json)
Hash identifier:          s74AtJgUtDFY5e0bBt2kKllofIxc6EhC5EHFL5H2sIA=
Subject key identifier:   74:3A:75:F0:9B:1B:FC:A5:73:E0:99:A7:71:67:FE:68:C5:CA:01:64
Authority key identifier: 70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED
Certificate issuer:       /CN=A9171996/serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED
Certificate serial:       C3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
Manifest number:          C1
Signing time:             Sat 31 Oct 2026 07:18:06 +0000
Manifest this update:     Sat 31 Oct 2026 07:18:06 +0000
Manifest next update:     Sat 07 Nov 2026 07:18:06 +0000
Files and hashes:         1: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl (hash: hJlcYE3CIheeHIX0ctvdKyUXToBSx25ceKUJzV42Bc4=)
                          2: 125C30DAAE6811F09E31E129C4F9AE02.roa (hash: ZQnPx0Gfa+D/DsNGzSZbn0CDbcNNkPZZEr8XRi55tUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl
                          rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Nov 2026 07:18:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171996, serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED
        Validity
            Not Before: Oct 31 07:18:06 2026 GMT
            Not After : Nov  7 07:18:06 2026 GMT
        Subject: CN=6ae5962e-f70b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5b:d6:0e:67:5a:9a:37:1a:aa:58:92:6f:75:
                    43:d0:84:94:c8:0f:39:57:32:8d:b3:ef:7d:3e:a9:
                    d5:b6:cd:15:66:22:d1:96:44:08:a3:72:70:ed:2d:
                    5c:47:63:76:6d:8b:14:81:29:fe:ef:e3:03:7c:ab:
                    1b:28:d3:29:1b:be:8d:ed:67:10:56:e1:6f:0e:30:
                    7d:f5:e4:52:0c:aa:73:fa:7c:4e:fd:00:14:36:9c:
                    e7:82:86:90:62:fb:0d:60:03:7b:18:56:4c:a5:b4:
                    7e:15:6a:ef:f9:1a:04:ab:ae:8f:af:f3:7a:76:cc:
                    07:0e:a2:88:15:d3:af:69:0f:31:ff:d7:4c:bb:18:
                    2d:3e:60:b8:c8:78:14:da:99:93:df:a4:fb:2f:4a:
                    1b:43:29:a7:65:0a:4f:55:ed:41:b4:51:98:1d:6f:
                    dd:cb:1e:a3:5a:e5:c8:01:8e:64:b9:b9:63:ba:4c:
                    66:f9:cf:87:b8:fd:5d:6f:59:4f:7f:f4:d5:64:44:
                    dc:01:91:1b:1f:b3:70:25:5d:bd:73:4b:83:6f:e4:
                    9a:87:c6:79:4d:ba:42:f2:4c:00:5e:55:56:68:e4:
                    2b:4a:a8:27:71:76:26:1c:09:d7:d1:27:3a:a5:0a:
                    ec:8d:4c:64:8f:1a:3e:7d:b3:eb:c2:6d:cc:62:0c:
                    0c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3A:75:F0:9B:1B:FC:A5:73:E0:99:A7:71:67:FE:68:C5:CA:01:64
            X509v3 Authority Key Identifier:
                keyid:70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a3:dc:b5:02:fe:36:6d:f9:77:a3:c5:b2:05:ac:16:d0:35:
         5a:52:4d:63:23:59:9b:ac:b7:80:72:05:d0:b6:f5:a5:32:71:
         10:83:95:a4:35:e3:5c:e0:1b:21:60:34:c7:2c:82:44:bf:da:
         93:e7:bd:e4:0f:60:09:9f:1c:21:c2:87:89:72:32:ac:04:53:
         ee:f5:1e:b4:87:de:a3:18:d0:bf:06:b9:51:b6:fb:5f:81:2e:
         d0:d3:9d:d9:1f:66:c8:0d:d8:7b:cb:f9:52:92:f9:d6:85:59:
         60:f1:05:d9:05:7a:51:ee:5c:d6:8f:8b:70:a8:b2:b0:65:e3:
         a1:ba:87:fd:ea:df:29:45:9c:4a:b3:a0:70:ba:1b:ab:b6:9c:
         ea:3f:70:bb:60:9f:f0:fe:b0:ed:86:a4:00:96:b2:e5:5c:98:
         b1:64:92:a1:c5:43:ca:25:ab:69:3a:f7:d7:9e:07:5f:a4:48:
         62:f8:cd:96:d6:f1:27:f0:40:f6:20:ff:9d:92:fe:18:e6:ae:
         20:14:3d:82:8d:c8:b9:b5:26:7a:4e:27:9a:ab:f8:7b:3e:19:
         51:4e:11:5a:e6:e7:5f:9c:f6:a3:a3:50:48:7f:75:97:5d:79:
         97:9a:3e:f5:10:e9:1d:0d:7e:bc:bb:e2:f7:b9:65:64:1f:64:
         69:c4:46:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 16:48:57 2026 by rpki-client